Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft
File:                     iBmVbdzq4CLP4SPaNzxrERZANo0.mft (raw, json)
Hash identifier:          eW3hQpnC2qDLOqfiVWuUrHxgoCWBLLuVVQmWpSL3U7I=
Subject key identifier:   6D:26:F6:A4:79:3D:22:59:2F:A5:3C:53:86:07:37:1E:C9:35:5A:36
Authority key identifier: 88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D
Certificate issuer:       /CN=8819956ddceae022cfe123da373c6b111640368d
Certificate serial:       01935764B00EB9B082E8FB4F6D066FAC3027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft
Manifest number:          0F82
Signing time:             Sat 23 Nov 2024 05:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:36 +0000
Files and hashes:         1: 7rA7lJy1gaugLUl7gDtr4oHqPq4.roa (hash: b2nFgjyAjK2Hq6hRQMS8pdg8xL55yFS8WdYrN31kTmI=)
                          2: iBmVbdzq4CLP4SPaNzxrERZANo0.crl (hash: aYF7PTh+GadWCLiwpaoMc8lcVJ8Qhx5mfJeBWK4k8UM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:b0:0e:b9:b0:82:e8:fb:4f:6d:06:6f:ac:30:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8819956ddceae022cfe123da373c6b111640368d
        Validity
            Not Before: Nov 23 05:00:36 2024 GMT
            Not After : Nov 24 05:00:36 2024 GMT
        Subject: CN=6d26f6a4793d22592fa53c538607371ec9355a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:d6:4b:83:98:45:d5:77:ab:5b:ae:01:cb:
                    23:8d:0b:14:58:15:76:1c:45:f6:ed:66:87:f4:b7:
                    05:56:44:ec:df:4c:7f:3b:11:75:e3:55:5a:0f:3b:
                    3f:9e:65:36:82:b6:70:2d:fd:5c:49:d1:1f:da:53:
                    82:c6:a2:a0:12:f7:64:28:0b:f3:78:f0:bc:b4:5e:
                    d8:be:f9:be:8e:e5:5f:ee:ec:72:ba:80:20:91:52:
                    b7:ad:6a:0d:2f:ec:be:dc:ca:a0:b3:de:9d:1c:88:
                    9d:43:05:f4:7a:c2:f7:97:4f:6e:d3:33:45:ff:99:
                    88:33:ab:e1:04:c8:f5:68:63:07:34:5a:47:2c:8f:
                    80:b1:39:ad:b2:46:e7:ec:70:b6:cc:42:7f:56:c6:
                    fc:63:b7:3a:fa:0f:40:76:3a:84:24:2d:df:f4:59:
                    a5:23:92:d6:8d:db:d4:4f:74:cc:c6:b7:9b:58:b6:
                    58:72:fb:67:5b:b5:84:e5:da:f5:6b:14:81:c3:70:
                    0e:bb:7b:5b:c2:15:a9:21:0e:12:d0:58:e5:41:37:
                    cb:60:c0:ec:e0:e9:cd:a8:ae:f2:a1:0e:40:d1:b6:
                    ef:e0:d1:28:86:56:dd:fd:ed:ad:c6:4b:09:d7:a9:
                    b1:21:cc:e6:4f:71:22:dc:58:ca:e7:b9:63:f8:31:
                    18:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:26:F6:A4:79:3D:22:59:2F:A5:3C:53:86:07:37:1E:C9:35:5A:36
            X509v3 Authority Key Identifier:
                keyid:88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:1d:a4:9c:0e:52:37:3d:1e:30:6d:d5:64:e8:36:78:80:84:
         02:ca:fa:79:2f:b5:8a:a6:3f:b7:9d:d4:5d:85:ab:9e:3b:69:
         c7:f9:f2:5a:fd:ed:7d:37:9d:54:c1:8d:5c:ec:05:3b:f1:e8:
         59:99:2e:44:bb:1e:7e:47:e6:2b:f6:59:6d:bb:0e:99:e5:e9:
         64:51:3d:63:48:d6:26:54:8c:8c:a3:d7:a4:2c:0b:a4:a2:80:
         bd:4a:8c:f3:e4:d7:fa:a7:6e:f6:a3:36:0d:6b:ef:92:4f:5f:
         5e:39:19:a1:f6:d8:65:27:43:01:aa:d2:35:2b:fd:38:ba:67:
         51:e8:59:e1:88:9a:de:7d:89:21:4c:c8:bc:fb:c0:47:ca:e4:
         95:01:39:55:58:d8:01:40:62:e9:f2:f7:56:63:00:e0:99:c0:
         46:4d:2d:76:45:f6:69:85:a1:44:57:6a:25:e6:ce:90:1a:ee:
         be:5b:12:62:3d:2e:00:9e:ef:e4:6a:61:c1:b1:99:4e:5d:02:
         de:4f:bf:2c:f4:fc:95:ee:05:08:23:f8:17:63:14:36:e1:9e:
         b0:b4:7c:f0:d0:8f:a4:29:ce:61:3e:7a:3e:b1:de:2a:87:de:
         6f:9c:da:4e:4e:f1:fd:99:d1:1c:0b:62:30:b4:fe:79:d3:ec:
         29:2f:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:46 2024 by rpki-client on console-fra.rpki-client.org