Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
File:                     Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft (raw, json)
Hash identifier:          xn/lEDaouyIqN1roi3ImV7wdiAm4/1rEgCdgBl8tfuU=
Subject key identifier:   9A:C0:3A:40:88:2D:34:BE:E9:61:0D:6B:C1:9F:3F:2B:CB:A4:AF:31
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Certificate issuer:       /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial:       018F343F613D31EBC5AA99560456DE606DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
Manifest number:          086C
Signing time:             Wed 01 May 2024 13:01:59 +0000
Manifest this update:     Wed 01 May 2024 13:01:59 +0000
Manifest next update:     Thu 02 May 2024 13:01:59 +0000
Files and hashes:         1: DjaGdy4UGD0LzuyWwc6L42Zv_F0.roa (hash: 3/0SJRaZypqmlPtL3B1QMpU/oFKO/L/izRYmq+RgToU=)
                          2: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl (hash: lwYfO6p9u+pk4eVtTtEwj2UnmGBFColcysfIi7X9Ikg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3f:61:3d:31:eb:c5:aa:99:56:04:56:de:60:6d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
        Validity
            Not Before: May  1 13:01:59 2024 GMT
            Not After : May  2 13:01:59 2024 GMT
        Subject: CN=9ac03a40882d34bee9610d6bc19f3f2bcba4af31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:85:ce:a7:a3:a2:c9:15:b6:46:ed:34:58:3b:
                    62:66:af:c5:38:7f:72:85:2b:ef:53:88:36:73:99:
                    ce:92:65:73:18:6b:c6:e8:bd:62:5c:2d:d8:b4:6a:
                    70:c2:bd:50:99:bd:7f:90:f5:92:5b:9a:60:83:36:
                    38:22:48:7f:f7:c2:a1:c7:b3:9e:4e:6b:af:b4:77:
                    3e:49:99:b3:56:70:9d:2c:4f:e7:49:59:39:bf:c4:
                    54:7d:db:18:0b:3b:ec:6e:10:cd:cc:9b:b2:ee:a0:
                    e3:b0:3e:4a:38:1b:eb:f5:84:c3:09:cb:e6:93:33:
                    38:2e:b1:b0:c5:bb:e8:35:7f:37:4c:e4:29:81:a5:
                    00:74:c0:c4:ab:d0:83:a2:3d:73:7d:05:19:dd:b8:
                    6b:5d:9c:53:f7:34:b4:58:a4:25:ad:15:63:d7:95:
                    ed:d1:6c:c4:f6:a7:5c:52:03:e4:3f:1b:90:58:19:
                    19:7b:39:ee:fb:b5:fc:69:35:14:d8:ff:cc:a3:31:
                    e3:c2:68:bd:23:bf:8c:7f:61:f5:6d:0c:ca:09:16:
                    c7:65:3e:09:25:58:66:c0:b0:7c:be:7e:f4:77:b2:
                    71:0b:d8:34:0f:80:10:fc:3b:47:00:70:da:19:09:
                    92:9f:43:eb:63:19:10:82:85:df:9f:2f:f9:0d:24:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C0:3A:40:88:2D:34:BE:E9:61:0D:6B:C1:9F:3F:2B:CB:A4:AF:31
            X509v3 Authority Key Identifier:
                keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b8:3c:b7:d8:31:dd:ec:69:e3:cb:e2:0e:18:3f:d0:06:5e:
         d2:6e:ec:da:e1:bd:81:d2:19:f6:d3:5b:7c:d8:eb:b8:43:32:
         c1:7e:d8:93:0a:18:f0:6f:8b:bb:46:29:4d:18:28:cb:30:27:
         f7:1d:5c:fe:ba:4e:b2:5a:35:c1:30:c5:5b:4a:53:f2:0d:2f:
         c1:0c:e3:38:7d:f6:f3:ea:a4:7a:6d:a0:be:93:9c:8b:67:97:
         dc:79:66:4d:8e:ff:b5:f9:09:79:9b:61:3f:ea:62:32:75:31:
         52:78:4f:86:a3:83:5b:d6:54:06:87:cf:1e:19:f0:7a:7c:16:
         e6:51:c9:12:de:44:43:3c:a3:cf:3d:a6:9d:a1:0e:a0:16:3e:
         03:da:5d:3d:71:52:2a:10:52:e3:83:d9:23:52:7b:22:44:16:
         d5:20:be:0a:02:40:1e:c0:b5:31:2e:23:2b:26:6b:08:45:26:
         ba:84:94:1e:85:fb:2b:7e:3c:52:3b:04:e0:8b:12:ed:58:da:
         d1:1d:24:e3:81:da:b9:a0:85:ff:93:9e:bf:a3:85:35:d2:26:
         c6:78:c5:88:84:f5:d1:a1:fe:4a:b5:7c:ca:5c:30:12:e1:4b:
         26:74:d4:c4:ed:13:48:9f:9f:a2:4f:ef:1e:8f:6a:a6:53:5e:
         f1:9e:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:00:47 2024 by rpki-client on console-fra.rpki-client.org