Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File:                     QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier:          iLH7drptymcLkT6bcsmxZ2rApwk/G3TaJGADFdnnDXM=
Subject key identifier:   0E:1D:E7:D5:AC:90:B2:02:52:CC:6C:56:71:83:CF:B0:FD:20:0E:41
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer:       /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial:       01901D460B0C97A6C87122D7AEA684753D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number:          10B6
Signing time:             Sat 15 Jun 2024 19:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:47 +0000
Files and hashes:         1: GT1dqj5bvtAMqy1gX-Q5HLZvemY.roa (hash: 6PZGyiBkPHzRboXX3zcq1YFVvCdh5o+aek91Tqcp8gs=)
                          2: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: dRdHQXJ4A4JjMmZdK7FWL9paJsrDE4CvfKDVxnbJlQw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:0b:0c:97:a6:c8:71:22:d7:ae:a6:84:75:3d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
        Validity
            Not Before: Jun 15 19:00:47 2024 GMT
            Not After : Jun 16 19:00:47 2024 GMT
        Subject: CN=0e1de7d5ac90b20252cc6c567183cfb0fd200e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:a6:8b:7b:cf:48:4a:c9:e7:d6:26:7b:e5:
                    4e:a0:52:48:b3:ec:ea:bc:68:f2:f7:6b:e0:85:34:
                    e2:fa:79:d9:6d:92:ef:9c:f6:e0:38:a8:ad:0f:c0:
                    70:5e:c9:d0:ad:51:c6:9f:a4:cd:a1:07:a7:6d:1b:
                    16:7e:d7:90:23:7a:db:cc:8a:23:a7:ab:28:31:a6:
                    70:5e:c2:58:34:01:8c:43:8b:d8:a5:e5:2c:f9:bf:
                    02:a4:10:17:e6:b1:af:d3:16:e7:51:07:4f:8c:11:
                    9a:55:66:d8:99:10:38:bd:78:7d:8c:09:1a:e2:89:
                    66:2e:b1:f9:41:1c:68:82:1e:07:86:72:5f:a7:5c:
                    aa:3b:d6:31:96:46:7c:d5:7d:e9:11:15:28:df:28:
                    4b:07:ed:2e:61:4b:c0:19:e7:36:d0:f7:79:59:24:
                    02:21:de:ac:a4:d7:a8:d6:9b:fc:15:bb:b3:4a:fc:
                    bb:95:c7:63:e5:fe:59:3b:d0:52:be:de:68:95:53:
                    f9:bb:98:93:13:6f:a5:32:68:07:84:b2:8c:62:28:
                    55:33:12:a5:53:6f:ef:36:bc:4e:ee:00:24:6f:79:
                    3c:a9:21:6f:08:6a:48:71:f8:3c:4c:c1:1a:17:f2:
                    8f:ff:81:43:2f:2a:1f:af:2a:a1:74:d4:65:89:af:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1D:E7:D5:AC:90:B2:02:52:CC:6C:56:71:83:CF:B0:FD:20:0E:41
            X509v3 Authority Key Identifier:
                keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:3f:7c:91:52:aa:34:2d:5a:95:17:ae:c4:aa:b5:90:05:
         04:33:d9:b0:d0:16:25:0e:d7:c7:4a:87:75:f2:68:19:a5:a1:
         11:8b:56:17:72:33:0d:6d:4d:ae:3a:a8:05:27:c3:84:95:26:
         86:cc:6d:7b:19:99:46:e1:87:91:8b:23:9b:de:c9:fa:51:a4:
         c0:47:c2:ad:2d:70:6b:21:7f:b6:f8:4f:33:33:1b:e4:fd:99:
         cb:c9:14:94:3c:35:62:5e:34:11:32:fc:e0:db:eb:26:01:9f:
         86:4d:86:c3:70:85:0d:72:6e:20:ad:b4:09:a1:cb:a1:24:f5:
         9a:4a:24:d8:69:b3:4c:68:53:e1:3f:f7:13:1e:f0:1e:c5:59:
         3a:d8:e8:c5:b2:4c:dc:51:83:23:be:5a:62:d8:9c:cd:87:09:
         1f:cd:4e:df:b1:c8:00:23:49:9d:42:7e:aa:7e:3c:b1:06:51:
         1e:0b:4c:61:69:2e:ab:49:fc:d7:73:d1:83:b8:2f:a4:f8:8e:
         35:94:fb:bc:a2:41:2b:f2:bd:0e:61:f5:45:ba:fd:dc:dc:db:
         53:b1:c4:5a:e4:08:ac:50:30:22:aa:dd:91:59:7c:88:83:2e:
         03:30:78:e0:a1:57:34:c1:70:2a:d9:3f:37:45:66:6a:76:88:
         63:6a:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:50 2024 by rpki-client on console-fra.rpki-client.org