Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File:                     i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier:          iGsmnzmaTTiYQggxQOQm2BYLSgWMvohNw7m8x5R2XxM=
Subject key identifier:   37:51:B1:DD:34:65:2B:9D:69:C4:6A:6F:5A:A8:A0:FC:EF:7F:1E:E1
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer:       /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial:       0191FA105E5085EE9742AAB234C875F698FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number:          013D
Signing time:             Mon 16 Sep 2024 09:01:02 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:02 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:02 +0000
Files and hashes:         1: 2c2ig1U6hdOZPqIb0OxeKOZZ6As.roa (hash: SVtvqLV6mp20hYm2biWZ4kq/cbqwDvNf0nYs1XSV4X0=)
                          2: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: qwWpI9B2mg6brxLl7WnV2Ib8jWgnvYDQIHCpeYOD85c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:5e:50:85:ee:97:42:aa:b2:34:c8:75:f6:98:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
        Validity
            Not Before: Sep 16 09:01:02 2024 GMT
            Not After : Sep 17 09:01:02 2024 GMT
        Subject: CN=3751b1dd34652b9d69c46a6f5aa8a0fcef7f1ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:10:99:8a:3f:9c:cb:ee:15:dd:44:cb:3b:
                    4e:02:5a:04:a5:4b:96:48:90:dc:8c:c8:e0:58:39:
                    38:83:9d:5f:b0:99:13:63:24:72:53:32:47:ab:7e:
                    f6:b7:47:6d:4d:14:66:86:ee:90:0e:ab:66:ed:8c:
                    06:da:24:94:01:43:b0:02:12:63:4d:66:14:fa:f5:
                    9c:da:1d:41:f2:c1:f8:58:80:25:3d:1d:65:67:9b:
                    19:fb:68:48:a9:10:49:57:56:27:d9:a4:e7:06:bd:
                    a9:82:11:cc:c3:64:15:9f:0f:46:b0:44:4c:9d:a1:
                    c8:5d:23:00:8c:ac:ed:f3:c2:f4:4c:ae:9d:d8:f8:
                    c6:b6:3b:87:6a:45:02:9b:39:a7:97:42:48:64:41:
                    d2:51:36:19:1d:1f:56:d6:f5:26:c1:7a:e4:86:96:
                    a1:aa:ea:bb:bf:ef:3b:71:4d:db:33:cc:60:64:3c:
                    b5:60:19:5c:93:71:bf:84:fa:63:c4:81:b8:4a:be:
                    f5:f1:6a:c6:88:01:ae:c0:a4:7e:18:55:fb:1f:d8:
                    39:7e:b8:71:7f:d4:b0:35:50:5a:fe:9c:f2:5a:08:
                    f6:0d:14:30:ae:ba:ae:e0:06:06:ed:b0:4c:b7:80:
                    78:0c:ae:ce:40:63:6e:21:5e:07:3a:37:cc:78:79:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:51:B1:DD:34:65:2B:9D:69:C4:6A:6F:5A:A8:A0:FC:EF:7F:1E:E1
            X509v3 Authority Key Identifier:
                keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:90:c8:18:5a:ed:90:6b:90:26:82:e6:38:e3:b2:a4:2e:5f:
         05:b4:7f:86:b7:04:a2:12:4a:26:f8:64:0c:25:8a:ab:ff:44:
         ed:31:aa:e4:57:9e:04:bb:34:88:91:91:3c:4f:86:eb:6f:f1:
         30:54:e7:14:8b:68:4f:96:96:45:83:fb:8b:ac:d1:22:a4:f6:
         67:dd:15:1b:fb:31:da:20:60:72:b9:81:92:f7:5f:84:18:65:
         2a:da:e6:6d:b7:77:2f:bc:0a:4b:25:d4:28:fd:54:c7:73:bf:
         cc:3b:9e:e8:b3:22:65:f7:10:d0:49:0d:be:44:1e:5a:07:b1:
         5b:82:6a:32:7c:40:a4:52:fa:2e:13:86:ee:16:c0:57:0b:7b:
         b1:8c:93:60:b4:3a:e9:82:75:c0:43:b2:4e:39:38:6d:13:34:
         82:b3:0b:c7:7c:bf:ca:d6:67:06:40:a9:ff:52:61:d2:16:0a:
         0d:93:8c:1a:36:c4:86:dd:b1:e1:d2:b0:37:03:4e:82:48:82:
         87:58:fd:69:40:15:9a:3d:e6:06:04:8f:59:16:41:66:e4:46:
         4c:76:bd:ac:c5:2e:c1:15:6b:0a:b8:a6:a6:d3:ca:37:e9:f7:
         59:e7:a9:7d:00:3d:29:56:14:52:7a:65:bf:f2:1f:3c:6b:64:
         c3:29:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:14:34 2024 by rpki-client on console-fra.rpki-client.org