Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
File:                     IuKOVQMUE4-dg6KLLWZum4dEtRA.mft (raw, json)
Hash identifier:          /ggclyY/I6EAkTTDeJMJ7kSVVr6Bvld0W6CRUfV2hT4=
Subject key identifier:   76:FF:AA:8F:F0:0A:B5:EB:C5:2D:F6:58:BD:E3:6C:60:D6:CD:65:26
Authority key identifier: 22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
Certificate issuer:       /CN=22e28e550314138f9d83a28b2d666e9b8744b510
Certificate serial:       018F4B6D49411C26974C202FDB2EAE24D7D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 01:03:24 +0000
Manifest this update:     Mon 06 May 2024 01:03:24 +0000
Manifest next update:     Tue 07 May 2024 01:03:24 +0000
Files and hashes:         1: IuKOVQMUE4-dg6KLLWZum4dEtRA.crl (hash: UYM3qCEn5aLyH5GQxBd1vgTCFFV5I6iPjILzeNwQ+Po=)
                          2: LxvbXLM16NFzoWlPUiAKSZUdWco.roa (hash: +VLmaCdcbuBkA3YxDo86OGuwbRYQfLjl7iBnrjtx7Qg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:49:41:1c:26:97:4c:20:2f:db:2e:ae:24:d7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e28e550314138f9d83a28b2d666e9b8744b510
        Validity
            Not Before: May  6 01:03:24 2024 GMT
            Not After : May  7 01:03:24 2024 GMT
        Subject: CN=76ffaa8ff00ab5ebc52df658bde36c60d6cd6526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:20:61:14:f7:ce:49:62:c0:a2:c6:16:ea:
                    13:2d:d9:ae:60:dd:39:8d:ca:0f:21:90:37:5b:eb:
                    56:84:07:98:f7:59:e9:17:04:16:2f:aa:5b:52:c8:
                    6b:c9:2e:43:4d:8b:71:11:cc:c8:54:58:79:22:75:
                    89:52:94:96:3f:89:85:12:51:8e:36:f7:29:c3:59:
                    7e:7f:3d:17:e2:da:d6:29:48:9e:40:50:28:21:b3:
                    cd:88:53:a1:e0:d2:99:18:90:4f:b9:a0:3a:e0:c8:
                    b4:6b:ba:ac:bb:66:c4:79:38:a3:21:04:95:78:e5:
                    f7:32:da:a9:f1:b3:98:8f:8f:39:40:f9:4d:e2:67:
                    50:e3:e1:c2:41:99:b8:f8:0f:8f:bd:a6:19:18:9b:
                    ac:b1:b9:bc:b9:ce:81:c9:46:69:1b:8d:e5:f5:ce:
                    50:24:72:f2:1f:dd:c8:68:05:2b:e1:15:c3:fb:05:
                    be:46:33:e3:c9:b4:14:eb:e6:1b:61:df:23:b4:cd:
                    e8:42:15:4a:89:c1:db:5b:ee:a2:0a:46:4a:75:89:
                    f8:c7:22:e9:a6:70:d3:58:54:3d:5b:8f:d2:0a:26:
                    42:29:82:8b:c7:19:9e:54:35:29:0f:82:13:5e:46:
                    7c:18:83:5f:03:73:a2:6f:29:7a:20:15:f5:47:1d:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FF:AA:8F:F0:0A:B5:EB:C5:2D:F6:58:BD:E3:6C:60:D6:CD:65:26
            X509v3 Authority Key Identifier:
                keyid:22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d5:0d:4a:22:f1:c6:ec:06:db:df:83:9f:5c:bb:65:3a:39:
         db:c5:37:0c:9f:cb:e5:91:71:49:6c:72:c1:94:68:51:15:9a:
         30:cf:12:b3:c8:58:5a:8f:7a:aa:1e:0c:04:be:75:22:a5:fe:
         f9:df:02:37:12:c2:8b:20:a4:f5:51:3b:79:d0:c7:b1:7a:0f:
         25:92:ef:05:74:72:be:df:99:c8:de:24:1f:cc:69:dc:aa:92:
         26:4a:40:47:0a:54:ed:98:0a:b1:c9:92:b6:62:7b:4d:0e:16:
         5d:b4:17:58:cb:5a:2f:6c:bb:fa:e1:22:97:17:bd:ce:56:82:
         f0:10:4c:31:83:29:ff:44:48:09:8f:2b:15:fe:fd:9e:ce:09:
         46:b3:92:4e:3c:96:cd:2a:77:ea:29:69:19:4f:22:b6:a1:8c:
         29:c3:e9:0a:a4:8a:51:00:d1:f3:2f:85:83:e8:05:35:11:6f:
         92:97:ca:9d:da:1a:0a:de:3d:ed:32:d5:af:2a:fb:6b:a7:fc:
         d7:18:3a:39:6f:3a:59:7b:72:21:a6:aa:42:27:05:0f:8c:f5:
         29:9c:e2:cb:45:ef:99:03:13:80:11:82:e5:54:ff:0a:a8:b0:
         68:44:7f:26:48:92:e1:e1:56:c3:bf:07:d3:c2:f8:2a:fc:6e:
         ba:01:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:24:23 2024 by rpki-client on console-ams.rpki-client.org