Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File:                     qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier:          qjCKZGfMacISh1BPpmae6wIIz8Iq0TmYnGpHbK996tQ=
Subject key identifier:   18:46:5B:A2:1C:3F:86:12:24:AD:E4:91:3E:00:40:74:61:FC:05:61
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer:       /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial:       01903B87ECECF9DC981F6FCD4AC87AA57F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number:          0260
Signing time:             Fri 21 Jun 2024 16:01:22 +0000
Manifest this update:     Fri 21 Jun 2024 16:01:22 +0000
Manifest next update:     Sat 22 Jun 2024 16:01:22 +0000
Files and hashes:         1: FtXfD5XSewGJdJB7ny8yJSyvbyU.roa (hash: ctgw/aQJQSUhoTPZf2lfy2wZxDmIdkJUpjQ5HjY7J40=)
                          2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: NkuDdyAFxuhQDKtDgwv51pC6ASilWBHnepahAniGnQU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:87:ec:ec:f9:dc:98:1f:6f:cd:4a:c8:7a:a5:7f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
        Validity
            Not Before: Jun 21 16:01:22 2024 GMT
            Not After : Jun 22 16:01:22 2024 GMT
        Subject: CN=18465ba21c3f861224ade4913e00407461fc0561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:5d:20:f9:5c:4e:42:b2:b7:bc:2c:df:dd:
                    a9:19:cc:b5:bf:67:12:d9:e2:8e:d6:ca:e0:3a:56:
                    69:1a:2b:63:31:82:3e:ed:bb:4f:05:ec:01:40:77:
                    14:60:3f:5b:7c:26:15:b7:20:76:8c:f3:4e:93:dc:
                    4f:ba:43:2a:d4:3f:c5:9c:ac:60:f5:95:70:17:b0:
                    29:9a:fc:c2:1d:9c:e8:1b:a3:c2:66:8c:71:f4:13:
                    0d:fc:b0:fc:8a:00:82:59:41:f1:09:73:c7:84:40:
                    c4:e5:a8:63:c6:ba:1b:17:01:76:0a:01:f0:6a:e6:
                    53:2f:c3:b5:75:26:e0:b4:c3:f1:f9:19:d9:60:54:
                    f7:f6:63:8c:a3:96:fe:09:4e:c0:c7:fb:0d:63:ba:
                    ab:50:b9:37:61:b1:50:bf:fe:d4:34:a5:4f:f0:d4:
                    fc:90:49:95:d9:11:ff:01:1d:06:a1:2d:dd:fd:64:
                    2a:7a:c6:95:53:02:fb:d6:54:36:4f:74:21:c4:9f:
                    8b:60:b3:ef:f6:dd:87:68:7c:4d:bd:d6:d5:b1:cd:
                    06:7c:6c:36:b4:ac:2d:f2:7a:76:b7:84:76:36:7e:
                    69:16:27:03:fc:e6:87:10:1e:2f:6b:a6:f1:b5:9b:
                    e7:f0:f3:a6:70:c9:f4:4e:93:8a:7c:ae:23:fe:85:
                    05:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:46:5B:A2:1C:3F:86:12:24:AD:E4:91:3E:00:40:74:61:FC:05:61
            X509v3 Authority Key Identifier:
                keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:af:7c:c8:01:ca:76:c2:1d:a4:a2:df:cb:38:a8:8b:97:c7:
         0e:e4:82:58:ff:a8:f0:bb:5a:63:f5:1d:c7:2e:99:10:dc:18:
         64:23:e2:ac:b0:58:da:10:d2:ac:c3:7e:df:6e:7d:c5:66:ed:
         b7:c4:48:01:da:3e:f9:20:9e:25:52:51:d2:1d:3e:57:ab:3e:
         0d:20:96:e4:2b:fc:f8:51:7a:ac:47:2f:33:e0:e2:6f:cf:22:
         99:52:bc:de:81:02:bb:95:e6:76:6f:ba:fc:a4:80:9d:34:b9:
         23:aa:26:cc:1b:49:ff:31:33:c7:ef:e9:52:8d:2e:31:8e:2b:
         b7:30:79:25:48:97:4b:7e:01:6d:2e:75:63:16:5b:f0:08:df:
         2c:42:7b:9d:4a:4b:02:76:1d:56:ef:38:1f:e0:09:8c:8b:19:
         07:72:8b:b6:62:53:fa:21:15:2b:d9:e9:ca:f7:37:eb:ea:d0:
         3d:d0:46:85:8c:71:0f:da:44:6b:85:cc:c7:9c:39:b1:98:4a:
         ed:ba:a7:93:8f:9e:a7:b8:19:88:9f:5b:10:6f:4d:e5:a3:27:
         43:f7:2c:62:9b:c7:fe:2e:91:d8:e4:52:30:69:a5:0f:1a:42:
         9d:e9:b9:fd:2d:d0:70:52:83:8b:3b:cf:db:58:05:ff:52:42:
         cc:31:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:04:47 2024 by rpki-client on console-fra.rpki-client.org