Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File:                     Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier:          RFy/OcHLNjUSrYRfC8vf9sGH6tv9OWubCJLvWYhxcwA=
Subject key identifier:   54:4B:5B:C8:0C:37:43:FD:45:FD:63:F0:3B:09:0D:B9:9F:E2:76:60
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer:       /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial:       018F4BD936C5D9AB42311A503C4976A0E805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number:          0E2C
Signing time:             Mon 06 May 2024 03:01:17 +0000
Manifest this update:     Mon 06 May 2024 03:01:17 +0000
Manifest next update:     Tue 07 May 2024 03:01:17 +0000
Files and hashes:         1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: yE6ZNO72t3dK/6TIMoon70gzpVqdY/+LX1/9mX4U9DA=)
                          2: dpPotOgLeEgYwaFuXIPvj4J6E_Y.roa (hash: nsRSt5ZKfisc8Y5B6AZi6y6hR40EhJvM+sGFW61maR8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:d9:36:c5:d9:ab:42:31:1a:50:3c:49:76:a0:e8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
        Validity
            Not Before: May  6 03:01:17 2024 GMT
            Not After : May  7 03:01:17 2024 GMT
        Subject: CN=544b5bc80c3743fd45fd63f03b090db99fe27660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:9d:3f:87:e6:2f:25:64:d4:79:9d:aa:cc:
                    13:de:3e:31:00:11:05:78:e5:a7:72:13:9d:ae:a6:
                    c4:dd:74:0c:36:ed:81:d5:61:34:25:58:5c:dc:9b:
                    3a:bf:3d:57:51:34:61:90:fe:72:bb:90:4e:38:f1:
                    29:44:19:9c:f3:ac:32:bb:46:18:44:b7:f2:1a:5d:
                    37:76:88:ac:8c:dd:95:a9:7c:9c:34:7f:c3:03:17:
                    11:7b:4e:70:da:d9:14:c7:6d:0b:fd:f3:8a:56:95:
                    27:8b:67:46:84:01:3b:c4:0f:c8:22:fb:41:6b:41:
                    c9:2d:09:1c:87:a6:f6:af:bb:d3:c3:31:f5:07:fa:
                    4b:77:56:ef:9c:46:b9:6b:69:a7:1c:8f:2f:ab:0d:
                    78:3f:82:53:69:56:e2:ce:6c:45:05:6b:6f:f2:8f:
                    c9:46:ef:f0:fc:b0:cb:ac:38:a9:9e:bb:3b:5d:de:
                    73:27:81:c2:31:db:7c:41:4c:ad:d7:87:c3:f3:ed:
                    87:6b:ab:c2:78:72:42:74:0a:4e:6f:53:b8:0b:b1:
                    0b:4f:3c:26:b5:64:9e:0f:56:39:3d:69:25:0e:4c:
                    db:3e:2b:f3:cf:dd:67:79:44:58:fd:8d:1e:af:e9:
                    fc:df:86:b9:c5:6b:3f:67:c6:c9:4b:98:aa:e5:9b:
                    7e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4B:5B:C8:0C:37:43:FD:45:FD:63:F0:3B:09:0D:B9:9F:E2:76:60
            X509v3 Authority Key Identifier:
                keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:bb:2e:ed:88:b5:29:48:9e:dc:4a:e0:de:51:05:d6:81:a3:
         e5:ce:ad:81:9a:9c:1a:16:7c:55:1e:77:e3:ea:0c:84:64:fd:
         17:02:e7:f2:a3:5e:38:15:e6:4f:c9:d9:44:e7:e7:cd:52:35:
         ed:51:e1:bd:2f:7b:8c:f7:ca:55:1b:5d:40:09:e2:df:0d:76:
         5b:f3:6c:6f:34:43:8f:46:03:e4:63:d1:54:ee:c6:88:95:d8:
         de:29:bb:b3:d4:6b:59:87:d9:04:50:ba:06:90:b6:4f:23:6d:
         b4:5c:6a:40:77:b1:82:5f:8e:dd:3f:89:10:44:d8:e9:77:a1:
         7d:85:31:02:e9:dd:d7:e3:d5:37:0e:5e:7f:d5:79:d7:c3:0a:
         c6:cc:70:33:d9:98:44:50:47:28:03:bd:da:e8:4f:7f:87:cd:
         23:19:d1:92:e0:bf:65:8b:36:6b:a7:03:43:1f:73:c6:d3:89:
         8f:81:ed:56:29:ee:db:ca:85:ba:7f:9e:ff:01:48:0a:6a:d1:
         5b:46:5a:1a:2e:13:39:0e:fa:1d:e4:0f:af:05:8f:bd:55:30:
         a8:55:fb:41:ee:61:ba:ac:41:11:61:22:1c:e9:0f:6b:ce:74:
         bf:2e:fc:f1:ad:3c:a0:c9:7d:75:df:28:a4:15:c6:70:5b:ce:
         2b:01:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:54:11 2024 by rpki-client on console-fra.rpki-client.org