Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File:                     ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier:          sNmwc1NvPV+WossOY736YrsD6ILfqdStqQYofP8J2Mw=
Subject key identifier:   E4:56:C8:40:1A:6D:83:5E:83:F1:0A:F1:F1:14:3C:BF:91:52:7C:C2
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer:       /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial:       018F866D07BF8E333DE13BC254B12611AC36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number:          02BA
Signing time:             Fri 17 May 2024 12:00:43 +0000
Manifest this update:     Fri 17 May 2024 12:00:43 +0000
Manifest next update:     Sat 18 May 2024 12:00:43 +0000
Files and hashes:         1: XXp6F8JDwRb4bOTSr_HLqZJaqmY.roa (hash: X3h45+h8wzSeQLAEWG5mrqx9o6InwE5BaoDAMv4WJRE=)
                          2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: +9361rGsdRavGepKKl90RIZD0gTxlyWjLhgcmKSXuGw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6d:07:bf:8e:33:3d:e1:3b:c2:54:b1:26:11:ac:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
        Validity
            Not Before: May 17 12:00:43 2024 GMT
            Not After : May 18 12:00:43 2024 GMT
        Subject: CN=e456c8401a6d835e83f10af1f1143cbf91527cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:83:e4:ee:91:33:15:71:5d:9a:72:c4:1f:
                    ad:cb:8d:58:75:59:87:70:84:20:ae:94:24:ff:3d:
                    03:0c:36:33:54:dd:1f:eb:bf:58:b3:4e:3e:66:10:
                    60:8f:58:a7:6e:ff:41:d6:67:81:88:83:45:4b:b4:
                    db:46:a2:bf:a8:b2:65:24:5f:e9:60:00:c4:69:81:
                    63:52:ad:dc:04:65:a2:40:51:a4:a4:9e:81:7c:e6:
                    16:df:da:f5:02:64:df:06:0c:58:26:1d:77:99:09:
                    b4:db:28:c8:c3:c6:91:95:38:55:d6:62:08:69:b1:
                    e2:1b:61:c5:81:fe:fd:b4:d5:79:11:1d:78:c3:70:
                    8f:23:51:b7:e9:ba:f2:f4:44:66:ef:d5:88:5c:63:
                    c5:49:2a:42:e3:0a:8c:23:f7:c8:c5:ce:b4:89:c9:
                    dd:5c:d6:17:be:7e:0c:94:13:b8:00:37:59:4b:04:
                    1b:14:9d:7c:44:c1:39:ed:25:f6:b5:80:d8:fa:b7:
                    a8:b0:50:72:54:ff:44:e6:89:e6:53:e5:5a:f7:e4:
                    62:2f:3f:8d:90:4a:ee:93:90:26:29:6e:1c:e5:aa:
                    fb:fe:ca:e0:46:58:04:4d:b8:b8:0a:0b:e4:92:8c:
                    ea:c2:91:ae:52:a0:80:c1:1c:35:32:3e:da:b4:08:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:56:C8:40:1A:6D:83:5E:83:F1:0A:F1:F1:14:3C:BF:91:52:7C:C2
            X509v3 Authority Key Identifier:
                keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:a7:97:e0:c6:21:e0:77:d4:56:0f:cd:57:0f:76:8a:4e:
         24:5d:29:1d:fe:b2:47:ca:e0:4e:df:61:04:12:88:08:88:3d:
         9e:b9:3d:41:a0:ce:14:df:b6:39:33:3a:a9:fb:d0:03:9a:b1:
         ee:51:79:3c:9c:7d:55:98:fa:fd:90:72:74:06:c1:82:a7:d6:
         cb:b5:2d:c5:ed:51:2f:89:ad:14:5b:6f:35:77:3a:56:a2:51:
         a0:a9:3e:1d:60:10:93:e2:a0:0f:98:8e:a5:a4:2f:96:c0:c8:
         d9:0d:9e:ef:6b:36:fc:15:99:06:fd:7d:7d:b8:e5:78:7a:d6:
         29:6b:3e:b5:3d:37:9b:16:c4:76:4e:d1:e4:61:ba:aa:a4:b3:
         9e:3c:97:91:80:6a:11:84:04:72:5c:29:48:4c:c3:0c:b6:b6:
         7c:6a:3a:87:61:d7:89:d6:2f:a1:56:07:e4:a5:66:28:a6:5c:
         ed:98:43:7f:53:e6:c9:f4:f9:06:6c:9f:e3:b0:f2:cc:23:a4:
         73:2a:3d:35:61:e6:92:2a:f6:d6:e6:bf:e0:9d:42:aa:3a:d9:
         f0:d1:12:da:39:bd:40:5e:ff:23:50:a0:85:0e:b7:59:2e:21:
         dc:15:66:f3:ef:de:75:31:a3:2d:ff:14:4e:da:c3:9a:6d:d6:
         91:86:72:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:24:10 2024 by rpki-client on console-fra.rpki-client.org