Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File:                     qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier:          YfRdf/AnXYSEwS5QU1KS+0HfcsyncETQ39K0YcFx0Oo=
Subject key identifier:   27:89:4E:B8:16:0E:EF:51:5D:2E:71:4D:EF:1C:E1:3B:B9:E9:C9:79
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer:       /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial:       01901B57C2A48ABCB4F722FD87EA13008846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 10:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 10:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 10:00:54 +0000
Files and hashes:         1: 7WR1etNULqqDS3QC1dhMpxpbYBA.roa (hash: 2kSJSpOSATOJE0N6/y9AewJ/9m/eG8wbe4po/lzJW/I=)
                          2: d-0MWdhC-xTWKyP25VCeFZSFjs4.roa (hash: VNHIq0Dyk5SMeisZYGQ6ZHxQbLq9wdmNTqz3Dd8AJOc=)
                          3: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: 1i5YQd4HlGkGHrQEKlxIV3zYvf3J6vaK5lZpiF0rgTI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:c2:a4:8a:bc:b4:f7:22:fd:87:ea:13:00:88:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
        Validity
            Not Before: Jun 15 10:00:54 2024 GMT
            Not After : Jun 16 10:00:54 2024 GMT
        Subject: CN=27894eb8160eef515d2e714def1ce13bb9e9c979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:6b:0e:16:78:39:06:8b:d7:10:3b:03:7d:
                    bf:52:04:55:2d:9b:58:6e:be:08:a5:ea:0c:83:e4:
                    98:ca:66:65:86:68:01:3a:48:20:b7:74:cb:80:c9:
                    a6:35:7f:db:aa:df:9b:ff:5c:c4:80:b8:57:01:b8:
                    e2:93:1f:13:6b:97:90:f5:6d:17:f5:82:70:1b:42:
                    88:0c:87:5c:5e:b9:03:05:51:ce:2f:53:2c:49:96:
                    1f:05:4d:20:be:16:66:68:05:66:ad:90:5c:35:86:
                    73:7a:47:76:b0:14:34:a3:31:f6:79:e8:f3:88:0c:
                    23:a2:d9:5a:a4:c4:6a:45:4e:a2:27:5f:0a:d8:ff:
                    e9:c1:c2:7c:15:d4:5b:65:fa:03:6d:06:dc:cc:4d:
                    1d:6c:61:16:36:93:73:56:26:ac:37:08:5e:7c:65:
                    6e:ff:52:b3:55:42:47:40:62:88:67:4b:2e:35:10:
                    86:db:22:30:a2:ad:fa:43:1d:b6:39:1b:06:f6:67:
                    74:86:99:f0:ee:e3:9b:14:aa:2b:ba:75:44:a5:b6:
                    07:9c:a3:c0:48:16:de:56:50:dd:f2:ee:2c:56:ee:
                    68:d1:85:2b:8f:09:44:95:bf:61:51:cd:01:85:a7:
                    29:26:cf:93:57:41:92:6b:ec:40:0b:4e:2a:16:a0:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:89:4E:B8:16:0E:EF:51:5D:2E:71:4D:EF:1C:E1:3B:B9:E9:C9:79
            X509v3 Authority Key Identifier:
                keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:3f:94:99:b4:7c:45:55:04:5f:5a:e0:56:5a:aa:ee:39:2c:
         2b:43:a4:59:e2:e0:bb:6d:8c:42:26:ee:4b:ac:55:03:00:7e:
         77:56:16:f7:5a:7d:ab:de:8c:ac:95:89:fe:e7:58:40:ac:b4:
         95:6b:ab:a5:b5:a8:b3:9e:6d:f9:52:a1:1e:16:fa:5e:b8:f1:
         aa:2e:57:32:a5:f4:91:c8:91:c6:18:61:b4:21:cd:54:51:71:
         8d:bd:5f:15:58:e5:4f:7f:c1:b6:de:73:09:d8:b4:6f:93:cf:
         9f:04:5e:52:05:ef:69:1b:25:2e:c4:31:15:3c:b9:1d:4f:50:
         05:ff:97:30:56:f2:2c:f6:a3:43:3b:22:7c:11:c2:ef:c2:02:
         05:16:5e:2c:02:12:d9:a5:36:5a:23:98:3a:44:c8:ca:20:1e:
         57:69:d4:4f:ca:89:ea:78:b3:23:33:c3:bb:27:71:e4:3c:fa:
         e2:a6:54:d0:a0:10:4a:66:b7:ab:b4:25:01:f3:00:b3:13:c2:
         19:40:7f:eb:fc:78:d0:84:42:9e:f3:42:75:fc:1e:39:7b:e4:
         5c:83:3d:df:b1:8e:b5:76:c2:5f:d7:d0:06:b0:f8:18:ea:a2:
         ae:83:c8:14:43:37:38:d4:96:c2:5e:08:24:58:e0:60:cd:46:
         6a:02:f9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:45:15 2024 by rpki-client on console-ams.rpki-client.org