Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File:                     Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier:          cgkrsMZK4DI+y1SBcP2rMW3lqZKIxrEuTc9d1BCZ9d0=
Subject key identifier:   8D:BB:C4:04:CA:80:EE:36:09:D6:B9:83:CA:2A:A3:64:67:AA:75:30
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer:       /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial:       01902981790B0A55EE586CCAF7DBCB8C470C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number:          05D9
Signing time:             Tue 18 Jun 2024 04:01:09 +0000
Manifest this update:     Tue 18 Jun 2024 04:01:09 +0000
Manifest next update:     Wed 19 Jun 2024 04:01:09 +0000
Files and hashes:         1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: 6WXMujHI/F0TxbhlLMRyfiCSTw0vH4osXA0zP7rACfY=)
                          2: vTuWUaOnTSZSUBBeBU_3WWbrWNM.roa (hash: KTgLHQgwuGaiBtKhCtUnqGRTJN9qjom8ycBe8kpRZSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:81:79:0b:0a:55:ee:58:6c:ca:f7:db:cb:8c:47:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
        Validity
            Not Before: Jun 18 04:01:09 2024 GMT
            Not After : Jun 19 04:01:09 2024 GMT
        Subject: CN=8dbbc404ca80ee3609d6b983ca2aa36467aa7530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7d:b4:70:27:04:80:a5:6f:1d:42:58:22:c1:
                    1a:c9:16:34:b0:25:a7:30:69:2b:8b:9f:bb:8b:6c:
                    7b:1c:8d:de:57:ed:cd:8e:4e:ea:14:6d:a9:8e:8f:
                    5e:7f:56:b3:37:79:65:25:c3:2e:9b:b0:54:2a:69:
                    7a:f8:1b:75:b8:dc:5c:de:25:de:ef:a5:fa:de:8f:
                    b4:9c:3f:bd:a9:d0:71:a9:4d:04:ac:f4:33:29:6a:
                    63:dd:4b:5e:39:bf:f8:53:21:b7:a0:45:2f:84:f9:
                    30:3a:5c:25:19:aa:18:6d:bc:44:70:24:80:84:5f:
                    1a:bc:f9:06:26:ef:97:0c:93:0d:e6:18:75:48:62:
                    12:f0:71:d6:e3:7b:a9:21:09:2e:11:c1:ca:92:93:
                    9e:28:70:ef:de:8f:ae:20:56:d8:a8:cf:79:20:f9:
                    43:92:86:3a:c3:e2:38:be:8e:c5:1c:c3:12:b4:64:
                    1f:a9:91:84:86:dd:db:bf:5d:a9:78:42:41:4e:0c:
                    ca:0f:6d:8f:77:1a:eb:f1:a5:ea:9b:3f:61:9e:c8:
                    d5:c5:5a:0d:8a:98:d3:fa:d6:4f:19:94:53:82:cc:
                    15:59:d1:31:b2:a8:37:6b:50:be:fe:0c:a2:ef:02:
                    b8:0b:41:ba:67:44:17:29:0c:70:ab:1e:9a:ee:6b:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BB:C4:04:CA:80:EE:36:09:D6:B9:83:CA:2A:A3:64:67:AA:75:30
            X509v3 Authority Key Identifier:
                keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:52:5a:35:dd:02:e6:e1:ca:b7:8f:bb:57:04:ed:b8:38:db:
         23:a1:fd:77:5d:92:89:a4:65:f0:fd:13:54:34:ad:b8:58:21:
         b0:aa:13:82:1c:c5:86:19:3f:7d:5e:4b:04:d9:a6:e1:de:91:
         08:95:6c:73:94:58:d7:9a:9b:37:a5:7f:db:68:11:47:af:a7:
         7e:72:cf:72:a8:b4:03:1e:ac:5c:cb:f0:0f:58:31:e0:85:16:
         26:25:0a:e1:18:01:bf:b2:62:90:b1:4c:0f:39:bc:ae:5d:92:
         f0:44:1c:15:a6:ef:76:60:c9:0f:f1:a8:8f:5e:88:fb:f9:22:
         dc:0d:e1:29:79:e6:2d:e4:89:c9:66:a3:13:7a:65:9b:72:60:
         34:61:97:ae:51:3d:b0:80:29:ba:b4:fb:9d:53:ab:79:eb:aa:
         1d:85:04:39:b9:3c:53:11:95:28:af:c2:53:51:55:25:14:fd:
         5f:36:43:c7:b6:3f:9d:61:a1:8f:fa:5e:be:d3:91:05:76:d4:
         6c:59:6d:27:cf:ea:6f:e2:72:ab:84:be:be:ef:72:b6:67:7c:
         de:46:d6:b2:aa:15:97:db:6e:6d:f6:cd:44:d0:ac:68:9f:3f:
         ca:8a:9b:e3:bf:3b:b8:8f:23:8d:26:a4:81:e6:c3:50:aa:22:
         62:3f:e6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:14:45 2024 by rpki-client on console-fra.rpki-client.org