Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File:                     iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier:          SZJIFny+66nDAUfkFOowm7eUUSiMbRqzTkEqdj9LUPE=
Subject key identifier:   C8:EF:18:1B:46:90:0B:73:0E:9F:A0:77:C8:34:BE:76:DC:22:06:6A
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer:       /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial:       018F86DA4E3DA2BAD38812AE2B46EEABA9C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number:          104D
Signing time:             Fri 17 May 2024 14:00:04 +0000
Manifest this update:     Fri 17 May 2024 14:00:04 +0000
Manifest next update:     Sat 18 May 2024 14:00:04 +0000
Files and hashes:         1: 8QxX58LGwmGQ2m6v52VAVTsLIRM.roa (hash: CByZ7tVcU3yONGO+TI9t+ETXK67Nhm/vsR6+y81aHKw=)
                          2: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: uOqTQBTL0Gm8pAxqTqT1urztv8UCOvNUT+vUkhTNsJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:4e:3d:a2:ba:d3:88:12:ae:2b:46:ee:ab:a9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
        Validity
            Not Before: May 17 14:00:04 2024 GMT
            Not After : May 18 14:00:04 2024 GMT
        Subject: CN=c8ef181b46900b730e9fa077c834be76dc22066a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:55:61:38:2e:54:37:1f:91:b1:bf:ae:06:
                    d2:8c:ab:ee:05:63:50:9e:4b:6c:34:5f:51:55:86:
                    96:9e:dc:aa:d3:79:fd:35:c2:73:e2:22:5a:76:7b:
                    45:28:73:90:ac:57:a3:fd:57:9e:9f:9f:ab:21:1d:
                    df:4b:25:80:f7:6b:d6:88:5d:7b:f8:4d:97:d1:13:
                    3e:2c:9b:0a:57:a9:7b:37:d5:39:ab:0f:eb:d6:be:
                    2e:76:be:31:d0:ba:9c:47:bb:3a:e8:8d:e0:45:79:
                    77:79:e4:d8:ab:9b:b2:7b:79:a6:d9:a6:7a:e8:de:
                    7c:77:87:65:e0:4e:f0:3c:cb:55:a5:4c:a0:23:cd:
                    48:7d:8f:f9:b7:d7:43:1d:4c:5f:ee:2a:86:32:05:
                    f5:54:35:0f:a1:44:a3:ee:fc:49:fc:b4:5a:7a:e5:
                    98:94:ee:f5:d4:a9:7a:77:31:99:92:92:47:97:3d:
                    2e:50:49:2c:7b:5b:7c:01:65:a5:a4:fd:fb:ce:1d:
                    38:c9:b3:52:40:e3:03:79:4d:0a:6f:96:72:37:bb:
                    34:71:4e:44:7c:74:20:df:29:65:f3:5f:4b:61:51:
                    7f:22:43:71:56:ae:44:6b:3c:ee:b7:7d:03:d4:68:
                    6d:c5:6b:6d:ee:5e:92:f8:39:32:c9:4e:85:70:f1:
                    ff:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EF:18:1B:46:90:0B:73:0E:9F:A0:77:C8:34:BE:76:DC:22:06:6A
            X509v3 Authority Key Identifier:
                keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8c:e7:ba:d0:3c:cb:55:85:bc:8a:68:e1:a3:85:73:1e:d6:
         9e:7b:a1:92:bf:09:a8:55:d4:41:03:2b:31:c3:cf:db:e3:f7:
         eb:db:77:de:dd:b9:68:4e:ac:40:22:7e:87:73:88:ce:f9:7f:
         f0:b4:32:8e:95:a4:7a:ec:1d:29:2b:3d:ed:12:a9:08:75:1d:
         66:eb:87:61:43:e2:49:2a:9d:e2:b3:95:2c:84:04:b5:4c:74:
         23:21:7e:9d:c9:05:de:55:44:cf:b1:03:10:1d:9e:9e:57:64:
         2f:43:db:9e:b5:41:b0:8a:bf:a7:7e:af:87:96:74:ba:0c:b3:
         9e:7f:dd:63:e9:79:11:20:da:3a:eb:57:c2:e6:52:79:af:75:
         8a:25:a7:23:7c:c1:ec:80:09:dc:97:dd:80:85:65:66:38:21:
         38:55:78:3b:5f:8f:c3:03:a8:04:85:8f:61:45:d9:d4:79:35:
         52:6e:ec:b0:c9:51:a4:e6:de:33:a6:57:26:7b:ac:18:78:2f:
         12:af:a8:5e:48:bb:0b:50:de:5d:c8:ed:01:3b:93:12:b4:f5:
         2d:ab:eb:4d:12:c6:b2:ec:83:2c:dc:da:78:26:e2:e2:df:b0:
         ee:a0:4c:d4:28:08:9f:b0:81:e9:5e:a8:8a:4d:a1:78:c9:3d:
         c7:83:c1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:47 2024 by rpki-client on console-ams.rpki-client.org