Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File:                     iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier:          lCd2gi+VDDYzoIm3t6wm7nAP4Hg/q1YlpY349FshJcg=
Subject key identifier:   F3:48:66:A4:11:76:23:48:A1:56:ED:0A:D2:50:BE:4C:39:51:8F:25
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer:       /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial:       018F8748D15AF41CAB9220F07AED976CBBC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number:          0848
Signing time:             Fri 17 May 2024 16:00:47 +0000
Manifest this update:     Fri 17 May 2024 16:00:47 +0000
Manifest next update:     Sat 18 May 2024 16:00:47 +0000
Files and hashes:         1: JE8EpcXspCsRNvmbqsB6Mi6Q19s.roa (hash: m/p3DVWoj8SE5gyxZIpvroOx7iZBcTkyugyZ5UZrb8k=)
                          2: UtVCIRjXBxSUrq-GfxluhJ4xQe0.roa (hash: eZt3U3qzswT1Y55JKkwMywy6bE6PM1fhuE6aiDwBo8E=)
                          3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: p9T30zYIVBqktKVQbfVxxVWkKfcggiNa9bBJ7EkPafM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d1:5a:f4:1c:ab:92:20:f0:7a:ed:97:6c:bb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
        Validity
            Not Before: May 17 16:00:47 2024 GMT
            Not After : May 18 16:00:47 2024 GMT
        Subject: CN=f34866a411762348a156ed0ad250be4c39518f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:96:72:fc:de:2e:5f:d3:be:cb:a8:38:3a:
                    25:8d:14:1c:16:b8:eb:e1:0c:ad:09:2a:d5:b9:7e:
                    31:5d:6c:6a:e0:9f:49:96:07:e2:79:e8:bd:50:19:
                    c9:5a:86:91:5b:f9:18:04:11:6c:52:a1:99:e4:d7:
                    2c:f4:7d:0c:c7:55:7f:e1:b2:38:ab:41:6d:8d:d1:
                    a9:f2:84:da:aa:58:fc:64:e1:eb:b2:16:d6:4e:dc:
                    99:45:95:d1:d0:6d:fb:10:72:2f:07:98:c7:01:a2:
                    6e:72:48:88:28:cb:01:48:bd:7a:f2:21:87:94:ca:
                    6e:13:b6:44:37:ee:7b:b4:ad:11:58:a7:97:6b:4a:
                    d7:ac:5c:e0:6f:6f:c4:3d:70:c8:15:b4:ed:90:7d:
                    e9:35:81:63:c9:83:3e:a6:6b:30:06:71:ab:da:32:
                    2c:8e:99:78:f0:ec:dd:7a:4f:84:7b:90:97:2c:19:
                    b8:59:08:4f:01:d9:82:02:fb:6a:e8:55:f3:e1:3f:
                    78:a3:ce:ab:88:d0:19:30:94:ca:91:6f:15:4d:b5:
                    36:d3:5c:cd:99:41:7b:e3:5c:bb:e5:d6:f1:ca:62:
                    0b:b0:46:06:c9:ae:86:dd:12:b2:ac:7d:e7:9b:13:
                    1d:d0:f4:82:72:20:a0:f1:90:15:aa:3a:e9:44:da:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:48:66:A4:11:76:23:48:A1:56:ED:0A:D2:50:BE:4C:39:51:8F:25
            X509v3 Authority Key Identifier:
                keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:25:a6:23:dd:79:b4:da:d9:8b:30:7a:39:b8:fd:94:63:83:
         8f:74:43:93:00:f1:0b:2b:3f:77:2b:c7:b8:19:87:a9:df:b4:
         e9:ad:e4:84:4b:88:18:8b:5c:e2:6e:c1:39:e5:7c:94:97:db:
         74:9b:26:90:7e:8b:a3:ac:ca:78:79:07:a7:22:3e:61:10:e9:
         bc:66:18:e8:69:d0:66:d3:8e:f8:ac:ea:5b:80:c9:fb:56:c3:
         5b:2d:1c:98:15:f2:99:ce:0d:60:10:8f:d9:83:9c:fd:9e:62:
         af:57:83:7e:73:f8:86:b6:5a:fd:88:3a:5b:9b:8c:df:56:b4:
         da:8d:39:6d:1b:93:3a:3a:7c:b9:bf:a5:ad:ca:9f:e8:bf:84:
         e1:87:cf:40:66:27:d9:72:5a:cf:c3:75:17:59:18:0d:28:89:
         00:a6:81:cd:63:a5:a7:62:1d:11:60:eb:04:10:22:90:72:35:
         02:e6:b5:05:1d:87:24:0e:09:18:31:86:dd:17:e5:44:75:70:
         e8:ea:9d:37:5e:69:9c:93:d3:0e:4b:d3:ff:ae:91:83:9e:75:
         b4:05:f7:61:7c:a2:8f:1a:d2:8e:f3:9f:47:ff:0d:47:fc:d6:
         d4:93:ae:7f:b9:90:ac:98:15:a2:54:bf:c0:62:ad:bf:fc:76:
         32:eb:9f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:50 2024 by rpki-client on console-ams.rpki-client.org