Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
File:                     QlQ5sMp_FNqpthsRvRe9zBunOGw.mft (raw, json)
Hash identifier:          7WVh7KeOaz1GB6BM6Zbj8FSSsXCfCBPy0+8PjXRuPJE=
Subject key identifier:   BC:F5:8C:FF:2B:40:17:0F:16:F6:2E:9B:B7:AC:25:DB:AD:67:3C:33
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Certificate issuer:       /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial:       01901B20D49ADBC84B8184BBAD69001EDFC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
Manifest number:          01A8
Signing time:             Sat 15 Jun 2024 09:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 09:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 09:00:54 +0000
Files and hashes:         1: N0GH0GGA7o-u48K7SjXx2C5X93s.roa (hash: ujvN9KajRKRyg1jf7rUeOKtasD0izEz5m5HvsdfyVRI=)
                          2: QlQ5sMp_FNqpthsRvRe9zBunOGw.crl (hash: kd3ASlYFtBwgoznOcsD6V8hZPI4Fj2/0W96YlJBDA9c=)
                          3: V3ogYqfUbQF1tGO2GAP1GFBFRtw.roa (hash: 4xCHhcsainWu+kAp13rZxHbhzEYJUNwBy9GA7rgoiYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:20:d4:9a:db:c8:4b:81:84:bb:ad:69:00:1e:df:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
        Validity
            Not Before: Jun 15 09:00:54 2024 GMT
            Not After : Jun 16 09:00:54 2024 GMT
        Subject: CN=bcf58cff2b40170f16f62e9bb7ac25dbad673c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:07:11:be:fd:60:b2:a1:3b:f2:ab:5c:ec:
                    e0:b5:03:04:c6:ec:be:85:d5:29:d7:60:01:04:df:
                    8c:35:18:0e:f2:d8:80:77:a9:67:ed:65:a8:ea:af:
                    02:e9:73:ea:3f:3b:64:db:7d:0e:93:8a:f1:94:a1:
                    a2:93:3c:4d:ff:87:b4:6f:b3:0d:d1:db:18:9a:32:
                    31:59:a5:37:a9:85:cc:16:e3:3d:e7:06:a0:8b:18:
                    8a:52:0a:56:79:95:87:ea:21:62:58:57:68:e5:32:
                    12:75:c9:9b:d1:f0:4f:c6:33:a4:72:ad:98:40:9b:
                    21:c2:49:43:02:c2:66:2a:5b:cb:a2:f1:09:c5:cb:
                    ad:c1:48:4c:c2:15:54:65:fc:85:a6:14:d9:02:b5:
                    51:fb:b7:2e:87:45:c7:76:c0:5f:50:4f:ef:17:8e:
                    69:2f:2a:3b:8d:32:77:97:d0:82:e6:9f:a7:96:d2:
                    d5:cd:75:f4:52:13:51:44:d2:da:da:6b:e0:a6:2f:
                    a6:5f:da:bd:88:34:3f:f0:f1:53:cc:e6:e5:80:76:
                    de:25:ab:73:fa:a8:a1:59:8c:0b:97:0e:89:4a:5b:
                    84:35:dd:5e:cc:a2:76:cd:ee:99:e0:2e:39:ae:2e:
                    37:10:f0:b4:8a:00:03:44:74:5a:47:d0:1b:ff:24:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:8C:FF:2B:40:17:0F:16:F6:2E:9B:B7:AC:25:DB:AD:67:3C:33
            X509v3 Authority Key Identifier:
                keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:cf:0f:65:f1:49:12:ff:40:3e:74:82:60:05:2b:2f:8a:32:
         59:27:55:02:9c:8e:53:da:ac:03:c6:6b:10:f2:9c:ff:30:35:
         2a:61:1a:0b:58:d7:ef:6f:09:62:55:a4:2e:cb:d2:57:d1:d0:
         02:0e:56:f9:02:19:ee:99:f8:70:fb:ac:7b:44:b8:38:3c:d6:
         0f:cf:a0:68:f0:b8:01:a0:55:f7:86:82:07:02:d4:68:c2:d0:
         9f:45:2e:5c:75:da:b2:3b:37:7c:83:e3:e6:69:24:82:94:0e:
         8d:0b:64:e3:17:f5:9f:db:5e:0e:fa:b5:91:cb:43:b2:f1:07:
         81:df:ae:c8:be:8f:1b:9e:0b:4b:30:ca:3d:cd:14:f3:e1:ec:
         e0:a0:1d:a8:e8:5c:56:bd:8f:b6:43:a7:57:2b:52:5f:e5:40:
         43:43:ad:e5:63:f6:8e:b2:34:16:59:e4:99:32:84:55:b1:25:
         66:7f:37:f3:c2:82:6f:90:4c:ad:38:2c:c8:46:a1:77:bd:73:
         02:21:4a:0a:64:11:f4:03:e7:df:e8:17:0b:fa:42:cd:59:25:
         d6:6a:d2:1f:bb:89:c5:7d:20:05:c8:da:8a:5d:40:62:25:52:
         f1:b1:14:93:db:eb:6e:a8:0f:cd:dd:c9:49:23:66:13:3c:52:
         fe:e0:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:54:52 2024 by rpki-client on console-ams.rpki-client.org