Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File:                     ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier:          bioasiAvpyfvkGOZ0K1KY936vdbLXIrOfVvJdbPVHo0=
Subject key identifier:   A1:5B:8E:FE:84:F3:DD:29:76:8C:AE:E0:8B:22:CF:2D:CC:28:C4:94
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer:       /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial:       01901DEC2EB7E8355159EC853D1CAB700654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number:          04D9
Signing time:             Sat 15 Jun 2024 22:02:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:15 +0000
Files and hashes:         1: UeSYQPGbNbvyqiVX9l-wl7_UvG4.roa (hash: 67siw6pCAH4WfkC8kLM65x7GXg0O4v0zvP8EnKkzDMQ=)
                          2: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: 1/9xgZisbybIybZbZBOQwqjnnqfn792W3Sm8Vlsf65A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:2e:b7:e8:35:51:59:ec:85:3d:1c:ab:70:06:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
        Validity
            Not Before: Jun 15 22:02:15 2024 GMT
            Not After : Jun 16 22:02:15 2024 GMT
        Subject: CN=a15b8efe84f3dd29768caee08b22cf2dcc28c494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:dc:0f:47:3a:10:97:53:0c:d7:8e:f9:d0:
                    6d:00:08:93:9d:5a:3e:a5:cc:8d:b3:8e:db:d2:e5:
                    88:41:0e:88:0c:fa:47:db:2d:9d:fd:fd:be:76:e0:
                    5e:b6:ef:80:e5:a8:6e:7d:20:ba:65:95:83:53:3c:
                    49:cb:a8:b9:98:8f:ce:de:9e:5c:08:26:0d:87:2e:
                    e9:6e:ba:42:f8:a1:f0:93:f0:b8:bf:0d:bb:40:96:
                    39:a4:84:3f:e5:93:ec:42:df:37:19:42:71:35:72:
                    a4:7c:7b:19:f1:85:43:92:3f:5a:45:3c:ad:72:bd:
                    1a:f4:bf:5b:0c:dc:e9:34:4b:38:8a:47:2e:4e:68:
                    89:43:6c:3a:6c:90:39:5c:7a:29:65:14:10:20:a6:
                    34:dc:39:bb:89:bc:ea:0c:6f:d2:b3:8b:f4:4a:66:
                    89:fc:47:f6:d0:e5:4f:e9:59:1e:bf:a5:56:4a:4c:
                    b0:58:81:9d:c3:d4:60:53:5e:a3:30:75:7b:3b:7b:
                    6f:32:ba:79:82:43:41:b9:17:93:16:86:f9:33:df:
                    f9:6c:3f:03:22:47:16:4e:9e:f2:75:ac:9c:a7:9e:
                    1f:06:df:38:f5:be:2a:46:a9:6c:d7:12:d0:51:7c:
                    2f:64:9d:d1:3f:76:b0:fa:0e:41:9a:3b:a1:12:b2:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5B:8E:FE:84:F3:DD:29:76:8C:AE:E0:8B:22:CF:2D:CC:28:C4:94
            X509v3 Authority Key Identifier:
                keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:46:80:eb:46:2b:74:b3:f8:e2:47:73:45:69:10:04:1d:
         3c:fd:25:ce:81:27:8d:17:13:b4:69:8d:6c:4f:c9:39:4a:20:
         a1:3a:b0:c6:ee:63:62:aa:29:9b:92:f9:6c:44:b5:fc:64:ed:
         1b:44:1c:5d:f2:c0:31:62:b0:04:3d:10:83:2c:f9:53:8e:8b:
         99:45:cb:7d:ee:04:af:1b:81:93:a0:bc:4d:21:92:ec:27:06:
         0b:6c:6d:d4:bd:b8:63:55:bc:00:05:98:3b:0d:85:bc:d5:fb:
         20:a9:b3:1e:e5:a2:f5:3c:4e:6b:65:36:de:64:ba:a7:26:91:
         f9:bb:33:f2:ff:20:e5:57:49:18:b3:4a:b4:91:28:6f:63:7b:
         48:10:70:97:fa:66:f6:48:28:ff:7e:76:b6:b5:b9:98:76:4e:
         11:eb:68:18:11:c1:1f:ec:ad:c6:6a:fb:32:92:6f:9d:42:b6:
         37:41:3c:1e:6b:9e:bd:3d:5d:30:a3:39:21:37:63:7f:f8:bf:
         19:3d:26:4b:96:7c:f7:34:18:06:9e:51:7c:bf:0d:9c:26:53:
         86:95:da:48:5e:8d:75:a1:03:bf:3c:11:7d:71:16:b4:fd:77:
         de:41:3a:bf:ef:0f:3b:20:3a:87:8d:74:f0:10:a9:09:40:35:
         14:c4:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:12 2024 by rpki-client on console-ams.rpki-client.org