Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File:                     IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier:          VA+TmB9BOEIf2qs9bs+OvIRZr03l/JHLmWm+LQ1xuwE=
Subject key identifier:   D0:8E:4C:BF:93:2C:D5:D6:33:84:C3:05:4D:9E:68:09:12:CC:B1:7A
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer:       /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial:       018F554A06AF7356FE9C0EC79C88CE2DA07D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number:          1162
Signing time:             Tue 07 May 2024 23:01:05 +0000
Manifest this update:     Tue 07 May 2024 23:01:05 +0000
Manifest next update:     Wed 08 May 2024 23:01:05 +0000
Files and hashes:         1: D5RQ4u8CuACW9O9NAM3xIqO_YzU.roa (hash: OWUE/ksxWF+nqFfoXhORDuwQ/CowcY3mFKZe/uKSYYQ=)
                          2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: IVnxjTh6l7aX2MsW2Ld3Q4Bn/fNZZ5hLwPvzHJLOOgo=)
                          3: q93oHpC2o9QqBuX4cnCslFTWVrs.roa (hash: 2JtU856xL9iPjyw7QbEUpz7jl+rU99RhcXqX0JOFmAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:4a:06:af:73:56:fe:9c:0e:c7:9c:88:ce:2d:a0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
        Validity
            Not Before: May  7 23:01:05 2024 GMT
            Not After : May  8 23:01:05 2024 GMT
        Subject: CN=d08e4cbf932cd5d63384c3054d9e680912ccb17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6d:a9:0b:e8:a5:45:38:81:c4:51:02:be:cc:
                    2e:51:7e:1a:18:16:eb:21:6b:d8:8b:70:30:f1:ea:
                    61:55:75:9b:cd:b5:0b:3d:88:44:f8:14:a0:0a:0c:
                    30:17:3c:cc:ad:2d:76:3c:e3:5a:7a:03:fa:67:c1:
                    bc:d2:eb:7f:18:e4:05:4c:71:c1:6f:ad:fe:09:c0:
                    c9:11:8d:8b:ab:8b:a5:81:7a:d9:b5:e3:05:6b:72:
                    4f:00:3a:03:e8:e8:42:9e:98:9c:81:30:82:49:57:
                    1a:10:0c:93:96:4e:bd:98:eb:d5:98:ef:42:da:b5:
                    a6:ed:52:5d:a0:8a:6f:08:0d:8e:a2:b4:dd:a9:27:
                    28:c2:3a:12:fa:78:29:35:8d:cd:52:c4:b0:0e:bd:
                    03:04:f8:fc:53:78:b7:e6:c6:75:71:e0:1b:ef:66:
                    70:85:19:b9:a4:65:0d:1b:54:73:88:55:2d:d2:f1:
                    59:be:40:f6:f0:95:55:0b:75:6d:93:d7:48:23:63:
                    99:60:03:3f:9e:6d:d2:91:dd:00:d7:aa:e0:61:ea:
                    26:0f:b8:49:88:b4:25:ff:42:cb:9e:70:8a:db:74:
                    b5:92:30:0e:a2:2a:50:69:b3:69:43:74:58:6b:65:
                    99:39:58:29:ca:70:c1:63:0d:33:59:84:ff:5b:74:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8E:4C:BF:93:2C:D5:D6:33:84:C3:05:4D:9E:68:09:12:CC:B1:7A
            X509v3 Authority Key Identifier:
                keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c3:f8:1e:06:d6:80:26:61:ac:ea:e3:1d:18:93:64:ed:cb:
         e0:16:cf:b1:31:06:e5:96:35:9a:44:6d:e8:c2:6b:bf:48:cd:
         b4:51:2a:19:b3:a2:b7:88:21:36:09:b8:d3:ab:a1:44:19:32:
         d8:fb:11:18:36:ae:64:a9:a4:67:cd:3d:74:05:7b:4d:0f:61:
         09:c7:11:e1:3b:da:20:1c:09:96:35:e8:29:cf:03:d7:12:bb:
         19:41:d8:76:6f:a5:04:f8:10:6a:d0:02:dd:fb:17:67:47:81:
         67:da:df:4c:5f:32:34:ff:68:e8:ac:cb:da:26:4c:f1:68:e6:
         41:94:29:da:f6:1c:ca:67:8d:f8:be:90:6a:12:90:86:fa:bf:
         c0:c9:84:2b:51:ce:1b:83:c2:60:b9:32:93:05:11:49:b5:4f:
         46:e8:1c:b9:99:87:83:8f:78:31:ad:1e:ef:33:84:ca:20:bb:
         88:1e:44:e4:ad:e8:a1:8b:b4:44:5f:af:c5:5c:d0:df:97:83:
         07:0c:5c:83:57:13:0e:c5:16:c0:2b:0f:6d:fa:23:ec:7e:d4:
         56:76:8a:6a:3e:fa:f7:c7:a5:42:94:fc:3e:59:67:67:4b:6e:
         e5:b2:ad:61:41:47:74:93:0b:3f:f7:16:07:31:66:8b:4c:ed:
         58:0a:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:22:40 2024 by rpki-client on console-fra.rpki-client.org