Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File:                     qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier:          lLW9rjTHwzdkeRFo55ceQAUEFomTwUjOqgbDahr9SeU=
Subject key identifier:   F8:09:D2:B0:03:39:9A:54:75:85:C7:A3:D4:5E:24:03:CF:CE:82:A8
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer:       /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial:       01901BFE42409D54C3CF69EECE6A38248892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number:          0E56
Signing time:             Sat 15 Jun 2024 13:02:46 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:46 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:46 +0000
Files and hashes:         1: oSMiOgD-IMxTX3UKXS86soSk8dE.roa (hash: /e6NBmdJFRdkPJgzkIhDzsIYxEjqAkyQJeob6MnkRUY=)
                          2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: T6x9guNLbqlHHgkKvi30hZ0F48g4rXsINFVReB/e40g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:42:40:9d:54:c3:cf:69:ee:ce:6a:38:24:88:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
        Validity
            Not Before: Jun 15 13:02:46 2024 GMT
            Not After : Jun 16 13:02:46 2024 GMT
        Subject: CN=f809d2b003399a547585c7a3d45e2403cfce82a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:29:aa:1a:cc:b9:a2:80:d1:ea:29:74:27:
                    d4:dd:bd:6f:1c:89:ba:d4:2c:78:25:4c:25:ff:c7:
                    3d:e6:9e:cc:ac:ff:ea:4b:76:37:37:66:40:dd:9d:
                    75:84:c4:f6:5a:19:79:97:af:05:db:1d:e4:5f:33:
                    53:5a:90:01:5e:09:ea:cf:f7:56:53:1a:30:6f:d8:
                    c2:83:06:b8:da:d2:8e:3c:e2:c8:ff:31:89:6d:71:
                    c2:9e:fe:da:b2:09:5c:e5:7b:16:5f:e6:58:9f:81:
                    45:1e:42:72:53:ac:31:65:07:5c:56:ae:bc:58:d9:
                    5f:67:a4:cd:59:01:aa:0a:ef:b1:0e:03:3b:85:a2:
                    86:7a:7e:b6:e3:0e:6e:f7:26:62:12:a8:f4:ec:70:
                    3d:89:f9:8a:12:da:c6:6e:82:ac:c8:07:f7:f9:75:
                    5f:51:4b:34:7d:81:fa:da:89:92:fc:2a:ba:3e:09:
                    4a:ee:cc:07:cb:cc:34:98:fa:c9:39:b8:1b:2f:57:
                    b0:2d:2b:56:7d:92:d3:51:75:71:1c:de:ca:52:ee:
                    cf:e6:78:96:c1:5b:c8:43:6c:38:8e:07:1c:b3:e9:
                    ba:1f:c6:b6:ab:3e:9c:6d:db:85:fd:de:d8:4e:6b:
                    bf:ed:2d:97:b1:cd:8b:86:08:ac:5d:99:44:4e:90:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:09:D2:B0:03:39:9A:54:75:85:C7:A3:D4:5E:24:03:CF:CE:82:A8
            X509v3 Authority Key Identifier:
                keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:78:21:0c:4b:cc:e9:d5:96:38:e2:e1:37:59:f4:77:12:cb:
         ba:6e:c5:d4:a7:0d:b4:d8:4e:c0:49:e8:6a:0b:0c:9e:fa:49:
         48:d8:18:dc:2d:85:87:bd:d5:b0:e2:db:cb:7e:86:03:5c:09:
         20:d7:70:ab:94:a1:32:b6:9c:2f:18:59:c3:7c:d0:10:62:77:
         9b:40:ed:02:01:70:fd:15:6b:c5:43:25:d5:b6:83:bd:f5:de:
         d8:48:b6:94:34:a9:8a:be:30:45:82:a1:3f:07:20:8f:d6:cc:
         fd:72:27:12:42:b5:22:a4:02:2c:f3:6b:56:47:aa:8f:7f:46:
         3a:ef:b1:9e:fa:9a:74:9f:eb:ef:03:37:c0:20:e7:d9:a7:9d:
         fc:47:19:d8:04:42:eb:64:eb:33:c7:5d:b6:f2:b0:04:71:14:
         47:bd:85:ef:36:eb:f1:bf:9f:e7:37:3f:55:ce:f2:5e:2d:83:
         93:2b:8b:31:e9:02:06:69:f8:17:93:aa:37:1e:19:c1:f3:ed:
         05:3a:be:df:bd:35:b8:98:e4:44:4c:10:d7:63:64:1d:10:6a:
         11:fc:81:37:d6:67:eb:ae:fd:76:81:d8:c7:b9:e9:03:4e:8a:
         26:bd:e8:35:3d:73:ec:76:25:de:fe:01:a5:11:08:cc:8c:d2:
         8e:38:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:28:16 2024 by rpki-client on console-fra.rpki-client.org