Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File:                     iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier:          BFT6z3B92hKx1A/llfvx1iiTlrdN5c09FRFJtm71mP0=
Subject key identifier:   79:61:5A:35:FB:AA:C8:1E:AE:9D:30:F6:AF:D0:10:0A:C7:C6:0A:21
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer:       /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial:       018F88249ECD90A396F3C4822F8102802B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number:          0926
Signing time:             Fri 17 May 2024 20:00:52 +0000
Manifest this update:     Fri 17 May 2024 20:00:52 +0000
Manifest next update:     Sat 18 May 2024 20:00:52 +0000
Files and hashes:         1: JrWJFn4eLBO6KH3UjZcBsRTwAv4.roa (hash: AHQWQYRiHl0+R/sSDmd2BU0VIGeAhIuPQ38AMocoTR0=)
                          2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: pkE9zdZvkAMP6hd7syHTictV5Tqj+oHyOMfJA2L0Zv8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9e:cd:90:a3:96:f3:c4:82:2f:81:02:80:2b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
        Validity
            Not Before: May 17 20:00:52 2024 GMT
            Not After : May 18 20:00:52 2024 GMT
        Subject: CN=79615a35fbaac81eae9d30f6afd0100ac7c60a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c3:75:ca:d1:51:d2:e0:13:79:22:b3:67:c2:
                    1b:37:c8:09:19:06:19:86:68:2c:7d:49:93:58:fc:
                    94:be:cf:57:c1:6e:06:77:e4:85:d3:e4:a5:d5:22:
                    1f:db:b6:6d:a6:ae:d0:0e:d1:7b:b6:47:9a:84:95:
                    dd:d9:25:dc:80:eb:ab:95:80:76:3a:9b:78:da:16:
                    ab:01:55:a1:d1:cd:c0:a1:de:81:3d:b5:99:23:a8:
                    ea:8f:11:87:46:a7:22:90:a5:e6:60:bb:24:63:72:
                    a5:76:af:a9:c0:2c:31:b0:72:cb:1e:dc:7c:0d:8a:
                    c8:23:6f:8a:2b:71:13:38:38:1f:7e:f8:f6:b9:6b:
                    32:5d:b7:30:a7:13:62:da:2d:e1:d8:3a:d9:0d:67:
                    6d:57:01:45:5a:af:6e:2b:9e:28:3f:e1:61:5b:e0:
                    c1:7e:5a:63:69:d2:3b:22:32:f0:cb:10:dc:00:1e:
                    26:ff:75:9b:e6:05:93:33:e5:e9:21:00:3e:bd:df:
                    8c:c6:b5:69:bc:9e:86:7b:b9:75:c6:7c:c2:f0:4b:
                    e0:f0:37:d7:72:07:ca:be:ca:2d:e0:35:90:a0:b1:
                    0f:f0:d4:20:32:02:c8:2b:b0:b2:5b:ac:dd:37:0d:
                    7d:1f:bc:da:b5:29:2f:e0:ca:e0:80:f2:3c:90:20:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:61:5A:35:FB:AA:C8:1E:AE:9D:30:F6:AF:D0:10:0A:C7:C6:0A:21
            X509v3 Authority Key Identifier:
                keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ea:6d:7d:1f:3d:32:26:88:77:06:73:f5:c3:5b:56:8a:c3:
         f8:53:2d:07:e0:9e:c0:e0:cf:9e:05:e9:02:01:42:ad:39:3a:
         1d:0f:02:a1:70:1a:05:1b:18:4c:cf:12:31:54:ec:89:58:25:
         d7:c5:16:8e:5f:d1:05:7d:56:66:a3:06:fa:cc:ff:18:86:6a:
         04:9b:01:06:ba:b8:2e:6a:4c:7a:98:71:46:11:06:9b:9c:b9:
         9e:b5:4b:87:21:4c:e5:36:13:c9:92:1d:be:b8:ed:c3:d4:e9:
         af:32:72:89:c7:20:ae:e7:27:90:ba:71:7f:05:92:b1:10:e7:
         86:64:53:91:45:75:1c:28:b0:fd:fc:6b:2c:56:a8:82:8e:12:
         f2:2a:78:aa:02:f7:8a:af:6f:74:8d:73:7c:49:e1:30:88:86:
         45:25:03:5e:88:76:f1:55:7b:39:8f:ef:d6:38:3f:a5:ff:a7:
         83:e0:a5:6c:6b:38:76:e7:dd:d4:10:aa:cc:3b:01:bb:b8:b1:
         3d:1e:aa:19:14:f9:8b:9e:87:57:35:2b:c0:6b:56:71:20:c3:
         b3:51:02:8d:cf:12:b3:20:97:11:23:b5:e3:67:c0:32:27:91:
         e7:18:14:d1:91:35:19:c5:eb:24:0b:7b:be:42:e7:52:d3:83:
         1a:c0:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:48 2024 by rpki-client on console-fra.rpki-client.org