Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File:                     ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier:          CasSLOgUI0LlPODtSr2ViwcB24gCByQQXZbPm341zAw=
Subject key identifier:   A9:9A:AD:34:9B:14:5E:A2:C0:BB:3E:57:EE:85:06:57:11:7A:F8:A6
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer:       /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial:       018F8749D484F1AA444D5FB913D963C963C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:01:53 +0000
Manifest this update:     Fri 17 May 2024 16:01:53 +0000
Manifest next update:     Sat 18 May 2024 16:01:53 +0000
Files and hashes:         1: 6aj2R7bmASdUTCciJYqczQkmhuQ.roa (hash: iQEK4lZpStFx+1II/cSDyJcG/VEeWRKBaMNHmYG12zo=)
                          2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: IQtTTCQBTcfgJBXzTSIvtVdhDEQCjYK7kVaiBLUFcV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d4:84:f1:aa:44:4d:5f:b9:13:d9:63:c9:63:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
        Validity
            Not Before: May 17 16:01:53 2024 GMT
            Not After : May 18 16:01:53 2024 GMT
        Subject: CN=a99aad349b145ea2c0bb3e57ee850657117af8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:26:12:7f:83:d9:0f:89:98:ea:a8:4a:c7:fb:
                    5b:7a:cb:eb:34:7d:5c:b8:0b:97:02:3a:48:de:f8:
                    fa:ae:db:cd:96:b4:a0:85:69:70:f4:55:bd:bc:5e:
                    ea:e1:a3:75:dc:5f:05:d7:66:99:bd:40:da:dc:91:
                    bb:8a:2b:6c:2b:ee:cd:81:35:41:30:e1:b1:39:7a:
                    47:24:8c:c1:cd:24:4e:02:f2:9f:2e:6e:57:67:35:
                    b6:7b:91:c2:e9:3e:84:bb:b1:6e:37:ec:7f:46:07:
                    e3:a1:e0:11:d7:51:47:ab:f1:c2:8f:65:84:81:30:
                    6c:dd:a7:73:d1:03:fd:b7:75:a2:7a:d3:e2:01:4c:
                    48:4a:8a:c9:af:47:5e:0d:c9:f5:a5:6b:fb:dc:5a:
                    cc:29:8f:44:46:97:4e:56:d3:31:8b:b1:a9:6c:0b:
                    03:34:25:d3:7a:aa:9b:6c:c3:bd:87:59:9d:17:de:
                    0d:ec:0d:7f:9a:b8:df:bd:ca:05:d7:70:1d:ae:9a:
                    e7:00:4a:4e:a9:00:5a:f9:9b:55:b1:07:ce:bc:9d:
                    14:28:a2:e3:2a:1b:42:83:27:79:d3:d5:b4:be:9c:
                    91:d9:07:e7:f8:b8:42:b1:b6:3e:65:41:8d:80:ee:
                    de:8a:c1:0c:a3:16:83:f5:13:84:8d:25:46:8e:1f:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9A:AD:34:9B:14:5E:A2:C0:BB:3E:57:EE:85:06:57:11:7A:F8:A6
            X509v3 Authority Key Identifier:
                keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e7:10:e8:08:3a:6c:d2:96:39:c7:e1:22:18:9a:b5:97:ed:
         25:34:2f:eb:c7:ce:3f:98:ad:c9:7d:78:a7:e6:2d:03:f5:c7:
         79:99:80:a1:78:0a:12:0f:68:5d:3b:be:ca:a8:6c:f8:f8:a2:
         00:cf:04:a2:80:da:f8:1b:2a:05:98:c6:cf:90:f9:e1:15:9b:
         90:cd:56:31:75:b0:d1:c5:41:ef:5b:76:2b:48:ce:46:6d:02:
         bf:04:d4:2d:1a:35:5a:e8:f8:0c:62:2a:a6:72:9a:ef:c3:8d:
         0a:54:45:70:dc:cf:8b:5e:65:68:89:d7:42:ad:18:c3:84:91:
         18:1b:05:21:a5:cc:59:f9:5b:2e:2a:d6:83:ed:12:61:9d:39:
         35:42:6d:a1:92:3b:79:0a:19:19:ff:ab:f2:86:86:4f:87:9b:
         12:de:46:ba:a3:ac:1b:40:c0:62:31:02:7d:a8:23:ed:4d:ca:
         82:20:4e:cc:37:3b:e6:82:21:a8:9b:d7:80:0f:fe:81:91:4b:
         95:ef:68:04:63:87:e9:39:2d:d6:c4:44:79:ea:c2:39:6b:e9:
         e1:6e:f6:e3:f6:37:c0:47:22:4e:89:2c:9c:98:6d:fd:da:a1:
         92:6e:4a:65:b1:58:a3:39:69:dc:60:c1:b6:93:57:5d:4b:34:
         72:39:5a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:36 2024 by rpki-client on console-ams.rpki-client.org