Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File:                     iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier:          H0bFpFt9q4/izKKNj3F8OhfifXGD6Rp5XXSWiz+U9L0=
Subject key identifier:   05:3F:B3:DE:89:54:74:76:F6:0F:38:62:E7:1D:EA:A9:6C:4F:5D:C1
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer:       /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial:       019074D1E184A5E9AEFA1B0C82D88CE4A320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number:          11F2
Signing time:             Tue 02 Jul 2024 19:00:30 +0000
Manifest this update:     Tue 02 Jul 2024 19:00:30 +0000
Manifest next update:     Wed 03 Jul 2024 19:00:30 +0000
Files and hashes:         1: 01AyMExIlYL6q19fPwzkpm_Ot3k.roa (hash: o0c7hxeR/sAzUbV6apyLfWUwsYXCAwiJyuDTyYpLehA=)
                          2: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: /o1iQUDyclZdKmaqzAGGAJX+Kxkxe7U7vw0ItzVTojQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:74:d1:e1:84:a5:e9:ae:fa:1b:0c:82:d8:8c:e4:a3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
        Validity
            Not Before: Jul  2 19:00:30 2024 GMT
            Not After : Jul  3 19:00:30 2024 GMT
        Subject: CN=053fb3de89547476f60f3862e71deaa96c4f5dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:8c:22:b3:8e:fc:33:94:d2:dd:67:e3:4b:
                    cf:f3:16:92:2e:94:f1:e8:b5:0a:a1:79:dc:03:d6:
                    47:c1:e4:40:12:00:c5:cc:71:4c:45:94:a9:c2:94:
                    25:9e:2e:ae:71:a0:7b:a9:54:26:31:f8:fe:ca:2e:
                    a1:a1:f7:7c:80:b8:ea:96:82:ee:9e:93:a3:55:95:
                    2b:42:ff:58:bc:74:33:cb:2c:76:99:67:b8:0d:16:
                    0b:f4:60:d9:a1:dd:49:a1:21:f9:4b:ce:e4:9c:3c:
                    a0:70:89:e9:f3:32:36:8a:63:c2:1a:f5:10:7b:c0:
                    1c:48:02:d3:ae:ef:6a:1a:0a:38:bb:f1:ab:da:fc:
                    74:3c:0f:3b:25:f4:a9:40:94:62:7f:e4:bb:5d:01:
                    4e:b2:44:3c:3b:37:a2:fb:22:84:ec:ac:73:f4:ce:
                    a0:53:a0:f0:b5:5f:ef:8b:45:ac:33:45:81:be:30:
                    1e:00:4b:cc:ea:15:f9:00:09:30:7f:e4:d7:1e:24:
                    13:73:d5:ce:68:0f:33:07:f3:ea:a0:2c:19:5b:89:
                    1e:22:a2:9a:81:e7:aa:14:85:3b:5a:ce:70:d9:da:
                    c7:30:9e:1e:89:70:4a:fd:8d:68:46:ab:4c:c4:9b:
                    78:31:05:0e:54:63:b9:ee:0b:32:85:cc:1a:8e:ce:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3F:B3:DE:89:54:74:76:F6:0F:38:62:E7:1D:EA:A9:6C:4F:5D:C1
            X509v3 Authority Key Identifier:
                keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:76:ba:85:37:6b:91:93:97:33:44:52:a1:ca:40:01:2a:34:
         af:1d:b0:1f:00:06:01:07:4e:ef:7a:a9:fa:48:eb:cd:09:4c:
         b9:7c:f9:e4:52:59:11:13:8e:1e:19:9f:ee:38:ec:dc:03:e1:
         a7:45:f0:c2:8c:c0:11:9f:10:99:88:38:41:6c:9e:bf:4a:94:
         19:d3:97:4c:50:7c:29:36:1d:1a:d8:d1:4d:86:ba:b7:03:38:
         e2:a0:14:79:28:bf:68:f3:7b:c4:07:3c:86:f5:02:18:02:b8:
         15:32:ab:14:cf:7e:0c:de:7a:13:a3:3f:e9:e0:a9:0a:36:d9:
         a2:5d:3d:f9:22:fb:d0:59:a0:da:f8:83:38:a1:3c:82:4f:4f:
         75:d0:47:dd:1d:02:34:5a:58:e4:da:4d:4b:9f:62:43:95:45:
         18:b3:78:27:92:09:7b:b2:34:8c:69:61:0e:59:90:96:cd:21:
         74:d9:d8:de:14:2d:9e:1a:4a:c8:ad:ce:37:1a:34:0c:2f:1b:
         db:86:0a:50:19:40:4a:5c:87:e4:91:32:8e:ba:3e:f1:cb:a5:
         78:b8:04:5b:ea:c8:03:ba:73:e4:60:ed:4e:97:89:8f:cc:ee:
         54:8d:24:59:4b:dd:15:0c:6f:22:41:b5:1c:6d:1c:65:69:63:
         a0:d9:54:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:45:22 2024 by rpki-client on console-ams.rpki-client.org