Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
File:                     iBLpJPysuGLPO2T1bnZ7wybyf8o.mft (raw, json)
Hash identifier:          pcFyr5RBpIThbb06dV8AzoCwUoDXiSVGqrgqKHa7+7Y=
Subject key identifier:   F3:56:D8:B3:DA:11:C0:40:BF:D7:DD:D1:93:D4:B7:33:75:7F:9E:27
Authority key identifier: 88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
Certificate issuer:       /CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Certificate serial:       018F87489C827F52A42850F06428B2D9EA28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:33 +0000
Manifest this update:     Fri 17 May 2024 16:00:33 +0000
Manifest next update:     Sat 18 May 2024 16:00:33 +0000
Files and hashes:         1: 5xT5hqMWEan4RXjVBMzMXHA7u-o.roa (hash: mapAk5Sdk7OG+Y0x5NF1hhUlpfWEyHq7Ut4nNiSKoA8=)
                          2: iBLpJPysuGLPO2T1bnZ7wybyf8o.crl (hash: VGBjuIiyK2Htj5z0ZSTKRNISYfgDJxk1/xTZ4AM8k+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:9c:82:7f:52:a4:28:50:f0:64:28:b2:d9:ea:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8812e924fcacb862cf3b64f56e767bc326f27fca
        Validity
            Not Before: May 17 16:00:33 2024 GMT
            Not After : May 18 16:00:33 2024 GMT
        Subject: CN=f356d8b3da11c040bfd7ddd193d4b733757f9e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:39:4c:8e:db:e5:8d:62:86:34:d7:fe:80:
                    ab:42:9c:34:23:35:3d:26:c7:8b:bc:bb:fc:25:6f:
                    62:dd:fa:ff:04:c5:78:c6:0f:04:38:07:92:47:8c:
                    89:79:2b:94:f5:a0:ff:b2:c9:ac:62:5e:a3:93:7f:
                    97:72:47:12:bd:75:cb:50:99:a3:13:e8:db:9a:68:
                    0e:22:bf:b7:5f:96:11:dc:81:d8:d9:ed:72:4b:b3:
                    7b:d0:c4:e0:b9:b6:6e:d8:73:a8:c8:70:ce:23:48:
                    1e:7e:1e:44:5c:8c:47:88:db:4c:4b:e4:c2:80:b0:
                    a4:20:62:2c:71:f1:41:42:69:b7:b0:e9:e8:f3:1b:
                    a7:98:63:d5:6f:70:a6:56:75:5d:75:d6:19:37:af:
                    ad:55:73:9e:14:dd:65:a9:8a:65:30:fa:7c:f9:42:
                    57:9a:ff:69:0e:86:0e:be:50:cd:d2:7e:96:42:ae:
                    04:7e:84:c8:5c:91:14:f3:4a:37:0f:cb:14:b9:54:
                    a2:a6:dc:60:e8:1a:e7:c9:0d:90:7d:53:f8:d7:08:
                    3f:78:1e:49:80:96:6e:81:a5:5a:d5:6f:8d:21:d8:
                    2a:3d:82:11:4e:b6:f8:83:34:5c:04:3d:90:ea:ec:
                    67:c4:92:48:3c:d7:68:5b:0d:40:ec:cb:f3:0d:56:
                    01:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:56:D8:B3:DA:11:C0:40:BF:D7:DD:D1:93:D4:B7:33:75:7F:9E:27
            X509v3 Authority Key Identifier:
                keyid:88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a4:4c:72:80:b1:cd:00:e4:4a:af:d8:9f:cf:80:90:7d:12:
         03:fc:6a:24:a0:81:58:a8:cd:a7:12:2e:8a:ed:2d:37:b3:b8:
         fc:19:33:d8:36:b2:b2:11:70:14:ff:cc:27:aa:f1:b7:11:6c:
         7c:84:55:c0:59:ea:bd:7d:cc:18:f6:de:e5:33:cc:b8:8a:78:
         ca:59:03:63:eb:91:61:ac:ef:6d:e0:56:60:f9:28:6d:33:91:
         79:01:47:4e:c9:d2:67:ce:66:82:5f:81:7b:31:da:32:a8:ef:
         f5:51:24:86:b1:a5:82:b1:6a:62:5b:81:09:1f:53:3a:c5:cd:
         cf:d7:72:2c:cc:92:dd:2d:b2:91:72:10:76:2b:91:2a:fc:29:
         01:38:9c:aa:ad:6f:75:dd:68:58:2f:1f:a4:d0:cb:10:b7:12:
         4a:34:43:61:49:5a:7a:52:88:08:c0:36:60:4a:09:20:fa:01:
         1d:04:f6:36:7e:4a:b8:9b:02:bf:9d:cb:bd:40:90:7f:2c:43:
         0b:c5:68:1c:ec:4b:9e:9d:6f:53:a6:51:53:1b:fc:5e:c5:df:
         3e:c1:37:be:83:3f:26:8f:42:04:77:ba:37:0f:03:1e:e3:e7:
         df:6e:f9:8e:94:9a:b9:74:1b:11:6f:8c:7f:be:95:45:e6:bb:
         4a:45:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:13 2024 by rpki-client on console-ams.rpki-client.org