Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
File:                     Iyrza5wHnaCRgn2j0HycilI2y1Q.mft (raw, json)
Hash identifier:          AEQr8ZTxCpwAgkThFTgg1xG1scCpJ/7LFyZaaD8ZN8g=
Subject key identifier:   1E:06:C5:EA:9B:52:25:B2:91:EA:F9:D0:D2:48:20:4D:C1:CF:30:79
Authority key identifier: 23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
Certificate issuer:       /CN=232af36b9c079da091827da3d07c9c8a5236cb54
Certificate serial:       01905F94F0C5BD31886E221FA44C04B53D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
Manifest number:          0A02
Signing time:             Fri 28 Jun 2024 16:01:54 +0000
Manifest this update:     Fri 28 Jun 2024 16:01:54 +0000
Manifest next update:     Sat 29 Jun 2024 16:01:54 +0000
Files and hashes:         1: Iyrza5wHnaCRgn2j0HycilI2y1Q.crl (hash: NcutkPK93Xm6MUK966qp/ueiVN9Tvki2vswZDSOAXkw=)
                          2: yvRwsOSFZZKsFbEMPLgWT7pnqqM.roa (hash: WvObjivsL6W97ymu7x6shoJ2Uv7iZ8DHg9Nx+NUcY5w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5f:94:f0:c5:bd:31:88:6e:22:1f:a4:4c:04:b5:3d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232af36b9c079da091827da3d07c9c8a5236cb54
        Validity
            Not Before: Jun 28 16:01:54 2024 GMT
            Not After : Jun 29 16:01:54 2024 GMT
        Subject: CN=1e06c5ea9b5225b291eaf9d0d248204dc1cf3079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:1b:67:cd:a9:19:dc:fc:44:92:01:f6:65:
                    e3:33:df:01:10:2c:e8:a0:a9:76:85:87:3b:4c:70:
                    66:c2:00:0e:7a:dc:a0:f7:13:97:14:84:e2:ee:06:
                    da:4f:fe:1f:59:27:a1:e0:0f:9f:5b:34:4e:6c:06:
                    84:7c:48:96:4a:b2:a8:19:79:e2:81:34:a5:f4:2c:
                    fc:b6:98:40:62:08:f4:48:4b:de:c4:c3:1f:a2:a2:
                    4b:ff:b0:87:6f:8a:f5:93:80:70:3e:65:62:c0:0c:
                    d2:8f:2f:a7:48:fd:5a:5a:fb:4b:8e:53:6f:29:79:
                    35:57:a1:79:a3:84:69:2b:35:26:a1:5b:da:98:18:
                    f5:3d:a1:d4:81:7a:47:6b:0d:9e:40:06:8b:b3:e4:
                    a8:eb:63:33:dc:30:52:87:48:d0:a5:c6:4f:13:a4:
                    80:7f:c3:a0:e7:41:79:e4:46:e1:73:e9:37:c6:85:
                    6a:82:0e:05:3c:13:dc:5f:7b:9b:af:5d:6f:cb:bb:
                    43:62:da:47:53:03:9d:aa:bd:7d:0c:66:2c:5b:2f:
                    bb:c3:50:02:4b:5b:f1:08:ab:a1:0b:3a:f3:86:5b:
                    a2:83:05:4a:a0:4d:e1:2e:37:c6:0f:23:02:fd:51:
                    0a:80:48:48:05:3c:fb:98:39:7c:ea:d8:2e:97:7c:
                    7e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:06:C5:EA:9B:52:25:B2:91:EA:F9:D0:D2:48:20:4D:C1:CF:30:79
            X509v3 Authority Key Identifier:
                keyid:23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:07:17:d2:63:78:ae:00:06:ba:78:25:b1:a9:f0:d7:63:91:
         86:b6:5a:a1:fb:b9:88:af:8d:4e:2b:bb:4b:8f:38:77:63:ec:
         31:50:76:81:f8:15:2a:92:4a:6e:50:c8:fe:b6:c6:d2:de:94:
         db:6b:92:b4:a7:62:e8:89:2e:ac:a6:0e:d1:9c:2d:05:5d:84:
         22:94:af:e4:a8:5f:a7:18:df:73:cf:33:9e:6d:81:37:45:e7:
         28:a0:a6:f0:75:e5:48:79:fc:87:e8:5e:cd:f2:4c:4e:8e:06:
         25:88:e4:01:ca:39:08:f4:d5:f2:cc:d5:61:af:7a:32:c2:ca:
         75:90:3d:ac:e2:f5:50:da:74:48:30:c0:15:e1:7c:0e:a4:c5:
         d2:89:92:a3:60:7b:60:76:b0:52:e3:c7:16:e4:ef:93:08:74:
         9e:22:0c:c2:0d:2f:2b:d6:6e:79:2c:d3:be:fd:f8:50:90:a3:
         81:c6:23:2c:b3:c1:b3:fd:dc:63:49:0a:b4:b7:55:54:53:61:
         9b:6d:3f:65:1b:59:86:7f:94:f7:4c:c5:1d:e0:37:f1:42:8f:
         1d:21:99:b4:d0:64:b2:32:a7:ae:2f:7d:8a:9c:72:b3:10:f7:
         15:b5:ef:25:2a:dd:45:19:5e:c7:d6:2f:69:7e:df:24:12:7b:
         bd:65:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:13:24 2024 by rpki-client on console-fra.rpki-client.org