Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
File:                     IB_mmB68vJI8jkn0hFJEHQgOZvA.mft (raw, json)
Hash identifier:          ZmGmdhNvb8AlgwdYzVPNU8nM6TSi4gty6g2SN2M424o=
Subject key identifier:   B2:A6:33:D6:49:89:5C:D6:B3:AF:3C:A1:3C:9A:98:1E:DB:16:1E:50
Authority key identifier: 20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
Certificate issuer:       /CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Certificate serial:       018F5392D9D0CB1242A4501627E9F142608E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
Manifest number:          0B57
Signing time:             Tue 07 May 2024 15:01:23 +0000
Manifest this update:     Tue 07 May 2024 15:01:23 +0000
Manifest next update:     Wed 08 May 2024 15:01:23 +0000
Files and hashes:         1: 2_fq_sO4tenA-s5amyJbA8l4mqA.roa (hash: VVaux8KMN35jd13QoMgUJWmtgFh3B3LyZu2v6tEjzcY=)
                          2: IB_mmB68vJI8jkn0hFJEHQgOZvA.crl (hash: w+FeNMon4lMd1UJt0DDNqiwjvEG/pT++C1TnQS/8KEk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:92:d9:d0:cb:12:42:a4:50:16:27:e9:f1:42:60:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe6981ebcbc923c8e49f48452441d080e66f0
        Validity
            Not Before: May  7 15:01:23 2024 GMT
            Not After : May  8 15:01:23 2024 GMT
        Subject: CN=b2a633d649895cd6b3af3ca13c9a981edb161e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:4a:70:ec:a6:b1:aa:27:c7:0f:a8:aa:7f:
                    01:9f:c0:99:d1:71:45:81:27:2f:d6:3d:61:ea:30:
                    ab:c8:63:99:fe:02:c6:dc:fa:35:8e:40:98:15:6d:
                    97:59:3c:4d:da:ce:38:70:d0:4d:8b:f2:6b:e8:1f:
                    1e:7a:f9:d7:fa:7c:2b:98:37:a4:aa:a9:56:1d:4f:
                    52:9e:3e:3a:0b:bc:c9:88:ef:15:ae:ff:9a:98:39:
                    1a:9c:78:f9:a8:d8:83:3f:a5:07:f5:03:5f:1b:b5:
                    4b:7c:9a:7c:08:d2:0f:7c:ae:40:55:b3:29:4c:4c:
                    d8:f1:e6:a3:5c:78:05:47:9a:a0:e4:59:e9:8d:c3:
                    60:ba:86:9c:f9:fb:52:ac:6b:7e:dc:c0:98:1b:17:
                    18:81:cd:6f:8a:db:28:b6:18:6a:5d:ec:5b:78:7e:
                    7d:98:ad:7a:0d:ad:4f:d6:11:79:b2:bf:80:f7:7d:
                    aa:bf:d4:b1:62:87:1d:be:c5:46:fc:08:f2:4c:17:
                    c0:66:35:0a:87:9a:b2:28:e3:7c:ff:f7:a7:18:44:
                    94:0d:f0:4c:40:bd:8a:1a:2d:a9:19:0a:94:47:6b:
                    3b:0e:50:64:30:e7:bc:d3:76:6d:5a:d6:ed:f4:b4:
                    ec:78:f0:77:a1:e1:c1:d7:ab:36:4a:34:6b:99:1d:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A6:33:D6:49:89:5C:D6:B3:AF:3C:A1:3C:9A:98:1E:DB:16:1E:50
            X509v3 Authority Key Identifier:
                keyid:20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:88:9a:87:e0:9f:0a:ba:42:c5:ea:aa:fe:9a:7a:de:ed:88:
         fa:48:21:04:77:a2:a5:2f:f2:c5:08:6b:58:db:f8:89:81:c4:
         94:6a:e3:f7:7b:f6:e5:99:1a:a4:68:60:34:35:52:c9:3e:08:
         69:6f:f2:18:53:1c:44:77:08:9b:93:ac:d8:e0:3b:02:f4:8c:
         b9:11:25:9f:cb:bd:ea:bf:bd:fc:3c:18:97:08:83:58:cb:74:
         3f:cc:6c:0f:dd:d6:f4:27:a5:37:a0:e1:42:7d:e1:73:db:21:
         5e:84:49:f5:6e:33:cb:22:db:f0:ba:cb:d3:d7:84:79:38:ec:
         d1:2b:c3:eb:d7:1e:c5:43:d4:9f:cc:e9:df:ac:38:cd:30:7a:
         45:62:c6:d7:1f:1a:f4:d9:cb:54:a2:5a:6f:88:dd:44:a5:1d:
         6f:df:29:5b:f7:a0:c0:a2:cf:e8:8a:6e:db:16:e8:d5:4f:00:
         cd:4a:c9:f4:7e:c0:62:73:a5:2e:92:68:b5:ac:af:3f:62:9e:
         98:7d:9f:02:52:18:85:a3:4c:be:52:65:18:a7:03:07:df:85:
         d5:64:d8:3a:a2:77:61:66:1b:7f:ac:26:b5:d0:d1:1a:60:bc:
         c6:b5:c8:ba:a6:fb:cd:4a:05:86:09:2d:ba:9f:2f:2f:e6:61:
         c3:f2:e2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:56:29 2024 by rpki-client on console-ams.rpki-client.org