Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File:                     iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier:          y06LfGTRhoETwFTu6Ql7KFbCZlmjQSNiN+18vyskIzA=
Subject key identifier:   BD:A7:00:DB:26:85:65:A9:6A:24:C5:9C:74:A4:A6:A7:FE:B5:5B:8E
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer:       /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial:       0191F96BA98E2A6ABAE46096ADED26FA085E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number:          A9
Signing time:             Mon 16 Sep 2024 06:01:08 +0000
Manifest this update:     Mon 16 Sep 2024 06:01:08 +0000
Manifest next update:     Tue 17 Sep 2024 06:01:08 +0000
Files and hashes:         1: eB4N6zI1pYcuh9LmWrRBm9ChMx0.roa (hash: e6DdzfemKrrjow8uvhhk2VSVVA1cF9FWlxTGdFQw+E0=)
                          2: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: 7pmmgGSaR+eaBfylVTwogkDsdJ9to2pwVrZQ+Hvd+UY=)
                          3: leZId3qh5lXM6gh3mAcClZt_mlU.roa (hash: qNjv6ySuaNExLh1rul7xCvcVYumLhuN77dMYvOqEgZw=)
                          4: wxpCxGKamaKDXZOLLW5m1A63SjE.roa (hash: Z78vzAghDG54YvR2MLdlPVQhwFE4Kvhni7g7k+GOjbw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6b:a9:8e:2a:6a:ba:e4:60:96:ad:ed:26:fa:08:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
        Validity
            Not Before: Sep 16 06:01:08 2024 GMT
            Not After : Sep 17 06:01:08 2024 GMT
        Subject: CN=bda700db268565a96a24c59c74a4a6a7feb55b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:34:90:be:62:53:1d:ff:3d:50:83:40:29:
                    fa:65:8f:c8:47:4b:6a:63:ba:a8:e2:3b:0c:eb:71:
                    2e:d3:27:cc:39:68:5e:cf:d4:0c:c3:fd:41:d8:8d:
                    91:4e:7e:9a:ac:20:06:d8:47:36:8b:f9:b9:cb:9c:
                    1b:03:7d:b1:a7:f0:05:13:4b:7b:0f:25:61:03:57:
                    ab:50:0a:d5:08:e3:cb:fc:20:ad:df:2b:f2:1d:0a:
                    65:6a:26:c5:59:ae:b9:96:03:4c:2e:29:39:a0:b8:
                    de:87:42:21:d7:38:de:c8:63:bd:6f:4d:f7:7d:ef:
                    83:e8:5f:3b:1a:44:55:d9:5c:ab:e1:43:18:67:7a:
                    af:a8:5f:d7:c0:34:d5:39:1a:43:8d:65:ca:7f:c8:
                    40:5d:bd:59:43:7d:1b:03:3f:3f:7f:ee:33:22:62:
                    96:93:8d:4e:72:b8:1b:40:9f:60:19:63:e4:ba:c9:
                    44:cb:96:14:fa:3e:2a:d7:24:ad:21:b4:57:54:dd:
                    f1:24:c6:b1:7a:89:b9:03:1f:58:bf:b3:ad:2e:bf:
                    c1:77:52:7b:83:41:15:61:c0:ef:1d:63:1d:3a:1e:
                    0b:3a:a5:bb:14:ca:76:27:5d:51:4a:74:51:23:57:
                    43:c1:69:cc:c8:b2:0e:07:f1:aa:e3:b4:36:40:44:
                    9b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A7:00:DB:26:85:65:A9:6A:24:C5:9C:74:A4:A6:A7:FE:B5:5B:8E
            X509v3 Authority Key Identifier:
                keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:11:b5:ef:a7:49:cc:2b:fb:ee:40:f0:56:a8:05:5f:04:fd:
         a8:bc:59:6d:b2:cb:b6:1f:1b:74:e6:b8:23:a6:7c:ff:50:2b:
         5e:9d:4e:dc:73:96:bd:40:64:75:6e:93:af:4d:88:74:39:19:
         47:be:8e:0b:35:e4:13:cd:f1:d4:fe:ae:c3:f7:7e:f3:13:ea:
         e9:f0:19:35:bf:b0:10:cb:a7:39:ec:a9:38:bf:83:8b:84:ea:
         09:6f:bd:0d:75:18:7c:a3:23:65:27:d9:ad:1e:f3:e2:9d:0b:
         53:df:f8:27:98:43:cd:df:10:67:16:f5:e8:2e:a0:dc:b4:cc:
         eb:56:f8:87:0c:25:b8:c8:5f:f9:b3:43:49:56:62:06:45:49:
         ad:cc:ec:8d:e1:d7:3a:8b:4d:9e:c1:01:02:a2:c6:46:25:5e:
         12:50:d4:13:03:5f:b2:1e:7d:24:34:48:0a:72:fe:99:5b:7d:
         b2:91:d6:97:25:67:e3:73:58:3b:a2:fb:84:b1:58:fc:03:b8:
         6b:ff:fa:aa:89:01:6f:63:79:ec:5e:9e:01:3b:fb:9c:89:3c:
         ed:27:f2:ab:6f:b1:7e:3f:d6:87:4d:bc:3b:a6:04:bc:89:ed:
         b4:9d:92:a3:47:66:89:56:11:aa:66:3d:34:6e:c0:a8:89:0b:
         67:61:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:19:22 2024 by rpki-client on console-fra.rpki-client.org