Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          l1G8VCbpdy56F2pt4HnO9PXG7XStyG0MceVdd58LV4k=
Subject key identifier:   7A:9F:27:94:95:AC:06:BF:B4:94:BD:B9:EE:00:C9:FD:2D:CC:AD:11
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       018FB3B406D246A2E2DE95F727E2BF2968F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          118D
Signing time:             Sun 26 May 2024 07:01:10 +0000
Manifest this update:     Sun 26 May 2024 07:01:10 +0000
Manifest next update:     Mon 27 May 2024 07:01:10 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: yUasV4OJtrFT35KjILjC0VbfPe9gGaFQUsUbiko9lms=)
                          2: n6Cb5zAJsvtaP1u_ayxP1crqwO0.roa (hash: yq2zR/+Pia1XfEdBSUcaXWm1F2xRicF2Mh0hZgt1ccQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b4:06:d2:46:a2:e2:de:95:f7:27:e2:bf:29:68:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: May 26 07:01:10 2024 GMT
            Not After : May 27 07:01:10 2024 GMT
        Subject: CN=7a9f279495ac06bfb494bdb9ee00c9fd2dccad11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:3a:82:80:23:6e:bd:25:ac:2a:c7:27:a9:
                    96:4c:63:b8:8d:ec:3d:d7:50:c2:ec:86:47:14:23:
                    19:b0:7f:dc:8b:3c:c7:05:64:2a:8d:64:27:8a:9b:
                    69:0a:d9:a5:a8:81:ea:81:9b:41:a8:0e:c2:c2:84:
                    af:6e:0f:1f:d0:6c:37:f0:f2:71:c9:99:fa:af:bf:
                    7c:53:90:2b:d3:28:31:e2:0e:2f:fb:9e:6f:a3:80:
                    a6:eb:e5:8e:1f:a6:22:1e:1d:34:73:54:5b:98:72:
                    87:cd:30:63:64:66:d8:22:f6:d1:f5:de:10:c8:30:
                    c8:da:12:90:b4:fc:a0:02:12:9b:48:9c:87:90:e1:
                    d6:50:a4:5a:46:21:5b:a9:72:7d:a9:78:72:e2:2e:
                    fb:81:f6:f3:d0:ef:e7:98:7a:18:07:0a:b7:8e:41:
                    60:65:2b:c7:fb:8e:b3:ea:6f:72:f8:03:5a:e2:0e:
                    13:9b:e9:dc:24:c7:4d:c8:5e:45:96:2e:c0:6b:4b:
                    95:1d:32:ac:a1:4f:57:36:76:98:ce:a9:c3:b4:4e:
                    09:22:11:19:d4:80:dc:62:f0:48:84:c2:54:2d:48:
                    10:1b:38:29:88:4e:76:b3:80:81:8b:5f:5b:4e:2f:
                    f6:03:b9:61:77:1b:23:a8:aa:15:52:3e:97:30:31:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9F:27:94:95:AC:06:BF:B4:94:BD:B9:EE:00:C9:FD:2D:CC:AD:11
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8b:09:1d:7c:8b:f1:1b:71:72:18:0c:24:a1:10:0c:09:a2:
         39:08:ba:aa:05:97:ab:7a:b7:51:e2:d3:f1:ea:e5:6d:5f:87:
         58:df:12:ae:0b:70:d8:c9:d5:78:29:bf:1d:f1:f6:72:83:21:
         f1:ad:41:b1:e1:be:76:4a:03:b4:12:6e:aa:c8:90:8e:3c:2d:
         f1:ee:77:f4:d8:87:33:e1:d9:37:3d:85:99:e7:2a:2d:49:1c:
         7f:c8:90:b1:b4:9e:ce:81:30:b6:41:71:ec:33:38:01:49:33:
         19:76:25:8e:06:0e:47:f0:c2:5b:e5:60:3f:73:04:df:a6:b3:
         a4:a7:f0:1a:01:89:ad:57:bf:af:78:7a:b2:02:26:92:42:e7:
         dd:e9:bb:83:a9:b6:57:1a:3b:c2:0d:98:aa:d3:ef:5b:5e:fb:
         63:2f:9e:e2:f0:6d:88:4a:d4:dc:3b:04:91:95:19:8c:33:f7:
         95:ba:73:f5:e4:15:3e:ee:d7:22:1c:08:45:fa:00:ee:4e:60:
         17:96:98:28:f0:66:03:0b:7a:0b:5c:4c:f3:45:fa:be:b7:cf:
         61:24:c4:d7:76:ea:a4:49:5f:75:54:9f:3e:66:6d:db:91:9c:
         06:59:77:85:b5:64:e2:4b:74:a1:1f:ec:7f:a5:56:b7:9a:53:
         12:9b:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 16:13:16 2024 by rpki-client on console-ams.rpki-client.org