Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File:                     IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier:          EagOZajz3RPAvgivDuTHskhlNTDWUt/6FGQU6Esj7+U=
Subject key identifier:   5E:77:20:AF:28:5D:F4:E3:B6:18:CF:97:20:14:E0:E2:45:E4:6C:F9
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer:       /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial:       018F847E46516772B5304A0F655CCA514962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number:          0229
Signing time:             Fri 17 May 2024 03:00:19 +0000
Manifest this update:     Fri 17 May 2024 03:00:19 +0000
Manifest next update:     Sat 18 May 2024 03:00:19 +0000
Files and hashes:         1: 9IMJ2fe9C69Vxmu6QCrqyUvQZ9Q.roa (hash: 7phUsk2BIW0ZHHBnUPMHFFxHXb878juhNAA3cgN6CqY=)
                          2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: f0eFGeDkGoTihXCHmQe8VvKGfYO5NEsfygP56FmqfQo=)
                          3: V4pYpCQHCCvTWlN38fj1bcu6M-4.roa (hash: VRQKBm8WQBGigDkWRKbwtcIKQ6UVG2ZoBdf+7fFlfI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:46:51:67:72:b5:30:4a:0f:65:5c:ca:51:49:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
        Validity
            Not Before: May 17 03:00:19 2024 GMT
            Not After : May 18 03:00:19 2024 GMT
        Subject: CN=5e7720af285df4e3b618cf972014e0e245e46cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d4:44:99:ef:a5:cb:8a:13:32:61:1d:1f:95:
                    03:2e:65:4c:45:63:d8:c5:86:2c:a8:d4:e7:47:d6:
                    55:b2:0e:15:3d:94:4e:89:00:6b:49:df:a1:28:38:
                    ce:64:72:c7:64:9b:b4:09:f8:6e:6c:bb:cd:4d:0a:
                    be:02:58:4a:68:02:69:40:92:88:e8:74:16:e1:7f:
                    58:64:59:04:70:f7:6c:77:a4:25:a4:64:ec:14:41:
                    cb:3e:14:28:ca:cf:e2:8d:6d:cc:48:d2:46:2d:4f:
                    ca:7b:d3:e8:87:c5:63:ed:6e:54:9c:28:1a:43:2e:
                    da:8a:52:44:08:03:52:fb:7f:51:2b:8c:da:9c:0c:
                    ad:23:ab:4d:d8:52:c6:56:42:a1:dd:a6:34:47:e2:
                    4c:bb:63:ff:8f:a4:c0:22:d6:bf:58:7d:33:dc:93:
                    db:16:42:41:3e:ca:ef:fb:b2:62:b4:40:29:29:c1:
                    69:8b:0e:ec:29:76:84:be:86:24:00:75:4d:11:9f:
                    75:4d:5a:e2:fe:28:c4:92:8d:6b:1d:7a:b9:8c:16:
                    25:e1:95:95:5e:bb:33:71:98:89:da:38:95:6c:0a:
                    fc:8c:bf:74:88:33:4c:90:e9:e8:a9:58:94:ec:cf:
                    11:45:92:d9:77:7e:06:c8:3b:7a:1f:ce:85:5e:12:
                    e1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:77:20:AF:28:5D:F4:E3:B6:18:CF:97:20:14:E0:E2:45:E4:6C:F9
            X509v3 Authority Key Identifier:
                keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:31:4d:03:26:15:8c:10:75:7d:87:c4:48:6e:e6:b1:31:70:
         7e:56:14:b5:38:6e:07:0a:bd:e4:51:bb:58:03:84:f8:44:f9:
         54:4d:08:61:cc:f3:80:15:c2:de:cf:4b:36:07:ee:d8:21:5b:
         25:b2:58:38:65:18:dd:47:9b:cd:ec:75:de:d9:68:e4:47:18:
         40:3a:24:59:6c:b2:23:ad:4b:ec:ef:f2:14:c5:21:46:cd:04:
         40:cf:da:08:11:ce:73:46:25:cf:4e:6e:3a:ff:39:e9:2c:60:
         d9:43:1b:54:a2:74:b3:45:14:07:b0:92:f8:87:dc:c2:8a:44:
         40:44:33:af:47:50:34:43:3a:b4:47:71:05:06:94:bb:96:83:
         e6:51:88:80:21:44:09:26:60:22:2e:57:5c:cf:06:69:9d:5f:
         6c:15:93:17:e7:28:dd:17:b6:a7:1c:df:9d:e1:2a:56:73:df:
         3a:05:ba:56:3f:00:4e:40:67:73:6d:cc:69:c9:df:e6:07:e1:
         6f:66:31:1d:3f:eb:db:0a:9e:3b:b6:86:85:93:bb:19:09:f6:
         97:7f:1f:0f:ff:0e:7b:74:3d:84:d4:87:db:94:14:e5:f8:16:
         9a:7a:c0:84:3f:1f:95:2c:c9:42:73:b6:2f:67:0f:c7:b2:c4:
         b0:88:5e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:32:37 2024 by rpki-client on console-ams.rpki-client.org