Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.mft
File:                     IRtX4m8cWgBN-7D-00c22pCIrjw.mft (raw, json)
Hash identifier:          jE5VkQV/OQJ0fsoAb8EopG9dxWU5BD5UZlk/MRexvU0=
Subject key identifier:   B8:17:D3:39:53:8B:15:31:33:0D:5E:0A:0F:3F:F0:F6:BF:80:26:40
Authority key identifier: 21:1B:57:E2:6F:1C:5A:00:4D:FB:B0:FE:D3:47:36:DA:90:88:AE:3C
Certificate issuer:       /CN=211b57e26f1c5a004dfbb0fed34736da9088ae3c
Certificate serial:       018F45A0792E9540E04EB954BB8755A0302A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.mft
Manifest number:          1138
Signing time:             Sat 04 May 2024 22:01:35 +0000
Manifest this update:     Sat 04 May 2024 22:01:35 +0000
Manifest next update:     Sun 05 May 2024 22:01:35 +0000
Files and hashes:         1: IRtX4m8cWgBN-7D-00c22pCIrjw.crl (hash: 1k+t7NAA2onfLYnPG+2A1MR4OFwfLvp8P2S44WMrmnA=)
                          2: QolFqAuannDI-xpcpFmcLmWidd4.roa (hash: jJfETHRxX53fHKUVfFLRUUIiYKbD0xS6cyr1vRFy7fs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a0:79:2e:95:40:e0:4e:b9:54:bb:87:55:a0:30:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211b57e26f1c5a004dfbb0fed34736da9088ae3c
        Validity
            Not Before: May  4 22:01:35 2024 GMT
            Not After : May  5 22:01:35 2024 GMT
        Subject: CN=b817d339538b1531330d5e0a0f3ff0f6bf802640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:7a:04:e5:80:0c:ef:2d:c5:bd:f8:d3:28:
                    1b:fa:a6:e6:5a:6a:58:81:37:01:3e:72:90:80:49:
                    4a:66:94:ed:6b:ea:57:b8:3e:0f:b5:2a:4f:57:ad:
                    df:e3:e4:85:9e:b2:55:1b:81:b0:09:e4:fa:7f:7d:
                    5d:1f:37:33:03:34:b6:75:b8:32:7e:8b:be:4e:d4:
                    73:0f:5c:4e:bc:7c:cf:44:f4:a4:f2:a8:21:a7:ef:
                    e2:a3:73:ca:0d:8e:62:dd:64:f5:54:27:18:e5:4a:
                    21:0b:24:b5:ed:44:f2:51:ea:18:db:ff:88:eb:71:
                    8e:df:5e:f9:c8:b2:3b:40:33:ba:8b:36:b5:08:18:
                    8c:74:11:c5:25:cf:47:53:48:8c:d0:07:01:55:c5:
                    8c:f8:18:73:f0:6b:f7:1f:2f:09:9f:ce:15:ca:8c:
                    bf:54:bd:38:ee:0b:fd:dd:fd:a2:ed:b4:a6:11:2c:
                    cb:6b:db:e6:f8:ed:c1:63:ff:9b:c4:3e:da:86:79:
                    e8:c5:09:43:91:ac:0f:64:aa:2d:bb:d1:85:49:a0:
                    06:78:25:51:5c:bf:c6:12:26:8b:af:2c:37:df:15:
                    0e:f2:dc:e2:f2:5b:f7:4d:21:80:bd:23:01:97:48:
                    c3:44:53:11:60:6f:99:5a:9a:0e:2c:64:8f:33:dc:
                    df:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:17:D3:39:53:8B:15:31:33:0D:5E:0A:0F:3F:F0:F6:BF:80:26:40
            X509v3 Authority Key Identifier:
                keyid:21:1B:57:E2:6F:1C:5A:00:4D:FB:B0:FE:D3:47:36:DA:90:88:AE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:cf:b2:55:b8:d0:bf:16:cf:29:43:d8:83:2a:80:27:7c:9e:
         5d:03:d1:72:28:d0:4f:6a:21:95:8f:e5:34:eb:a1:b9:bb:19:
         e6:2b:90:c0:14:d5:59:bc:aa:db:07:cf:9c:a6:a6:ab:3b:a6:
         81:03:be:57:1d:25:52:29:7e:fd:4e:62:23:68:3c:a5:5f:05:
         54:f8:8f:16:f1:03:07:a0:80:e5:40:3a:89:ec:aa:fa:9b:fd:
         72:bc:9b:f7:b2:3e:4b:10:fb:6e:6d:9e:32:79:41:e6:da:8d:
         aa:c7:fd:c2:2e:50:a0:b1:08:9e:06:68:64:d0:e9:06:48:5e:
         ba:28:b5:40:db:d5:ac:dc:9c:07:39:5b:aa:40:7e:cc:a0:c8:
         fc:63:08:d3:94:6c:ae:1c:ab:fa:ec:be:05:59:0f:45:ff:b5:
         0b:c3:63:33:56:a0:55:28:0a:ea:fc:af:f8:90:95:af:41:8a:
         37:c9:5f:83:4c:e0:bc:2c:cf:bd:4f:51:00:6f:58:5c:61:65:
         23:8d:d7:dc:ec:1e:97:02:df:23:2b:fa:b6:63:d8:71:7f:f0:
         04:ad:0a:29:87:1c:cf:e2:b3:87:7c:41:5a:84:8b:2b:56:68:
         4c:38:ca:91:b1:4b:f8:ae:82:83:8a:eb:95:fa:13:ca:fe:31:
         90:39:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:19:09 2024 by rpki-client on console-ams.rpki-client.org