Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File:                     iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier:          PXrhSVrck2TvmRd6jaknG4CohTXStxhNIas+wVRaafk=
Subject key identifier:   18:AA:5F:B2:1E:3E:3F:02:C9:AA:E7:53:F5:B7:67:8F:8C:EA:DF:71
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer:       /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial:       018F874A7FA225245CE1CA8E2F6FD2162F3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number:          10CB
Signing time:             Fri 17 May 2024 16:02:37 +0000
Manifest this update:     Fri 17 May 2024 16:02:37 +0000
Manifest next update:     Sat 18 May 2024 16:02:37 +0000
Files and hashes:         1: 1-F3pJmIrvXEbQVxnDGHfc87A9EQ.roa (hash: +h04nr+2HKoVvqAnZnTh2OpoaihG0DPG6hhjFmAC88Y=)
                          2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: YKXAv89ciIyflJxbJ7p6ulkaA1MaSbhb9FHe1NNMZzE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:7f:a2:25:24:5c:e1:ca:8e:2f:6f:d2:16:2f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
        Validity
            Not Before: May 17 16:02:37 2024 GMT
            Not After : May 18 16:02:37 2024 GMT
        Subject: CN=18aa5fb21e3e3f02c9aae753f5b7678f8ceadf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:9d:92:60:55:74:b8:88:0d:3d:f1:c3:d6:
                    aa:34:f2:4b:ec:57:27:76:2e:a9:4b:c1:87:e4:5d:
                    73:2e:3b:fa:ee:8f:3e:8e:43:86:46:4c:9f:22:b9:
                    f8:d5:ac:89:7a:ef:2f:ac:2a:7c:52:39:a4:14:7c:
                    27:a6:e5:cb:a0:88:c6:6c:a4:22:04:ed:d7:31:a4:
                    45:47:5a:78:f9:1b:d0:b9:4b:68:2d:30:58:c2:25:
                    9d:78:73:0f:6d:71:56:39:fe:33:af:e7:b9:79:24:
                    a0:20:62:99:57:3d:25:d7:f7:1c:74:18:3b:d6:33:
                    1b:fc:fb:db:77:ac:9e:d1:f8:50:fc:79:87:c1:dc:
                    8f:c0:c6:11:25:74:64:af:01:0d:ef:06:bb:0c:c0:
                    29:cc:13:1f:6f:ec:6a:af:c1:3f:49:bb:a9:22:0d:
                    43:59:a7:68:a0:9e:3f:8f:4b:0b:8a:2d:48:92:fa:
                    79:f5:6c:4a:da:0c:26:64:d3:17:24:76:dd:6b:57:
                    64:bc:ba:bb:59:2a:95:da:6a:b8:f8:4b:ab:e2:81:
                    54:45:f6:10:2e:83:e2:5a:d8:2a:35:9e:65:4e:de:
                    a4:b1:a3:64:55:7f:76:e3:e2:78:5f:ed:fc:9f:77:
                    ab:de:c9:58:f0:7b:67:92:df:0c:74:9f:bb:80:5a:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AA:5F:B2:1E:3E:3F:02:C9:AA:E7:53:F5:B7:67:8F:8C:EA:DF:71
            X509v3 Authority Key Identifier:
                keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:b2:e1:85:d4:29:b6:83:30:4a:fa:75:84:22:b9:0b:28:
         c5:dd:34:69:49:be:86:b0:ec:2e:da:26:cf:20:54:61:e7:d9:
         85:57:99:f4:78:36:ce:e3:66:86:f2:01:53:c8:e8:87:c7:e8:
         1b:e9:0d:d6:cd:e6:7f:87:ea:f9:00:cc:3b:68:42:83:51:4b:
         6c:aa:ce:7f:da:6a:1e:fa:64:31:8e:1f:c0:a9:ea:05:e8:b7:
         c2:a6:4a:95:24:bc:34:9f:12:b3:da:e5:93:fd:12:e0:7d:c1:
         9e:3b:87:d3:ce:5a:a9:4f:07:af:74:8e:45:19:10:e8:ef:fc:
         3a:cb:19:80:7f:75:fe:43:e4:e5:a0:00:13:44:8c:c8:a1:ca:
         a9:31:89:82:01:3d:89:75:a7:f0:5a:b0:08:9c:c4:4f:60:d9:
         36:9c:01:bf:d2:b6:29:0f:ed:e9:fe:6d:ad:61:0b:a4:46:42:
         c4:c2:bb:89:90:aa:8d:83:c5:f2:86:06:9d:cf:ad:69:81:98:
         aa:b2:95:53:d0:3f:5c:e3:04:3f:c5:17:0c:1e:63:2e:76:ac:
         d0:39:39:94:06:51:5f:6d:14:7e:87:cc:f4:01:4a:20:f3:73:
         f5:f9:04:13:b0:ed:50:87:97:0e:a8:7d:18:a1:12:41:57:40:
         71:4e:5b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:08 2024 by rpki-client on console-ams.rpki-client.org