Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
File:                     fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json)
Hash identifier:          1F+sZP4t6eHxleqjBTF4KwNZ1lDp5ND/yW5vKRGVQJg=
Subject key identifier:   A1:22:34:69:B8:AE:C0:C9:CE:9F:9C:5F:FF:A4:1F:CB:2C:01:9A:94
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Certificate issuer:       /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial:       018F8749424BC9033681CAC21FB9E43AAFB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
Manifest number:          1187
Signing time:             Fri 17 May 2024 16:01:16 +0000
Manifest this update:     Fri 17 May 2024 16:01:16 +0000
Manifest next update:     Sat 18 May 2024 16:01:16 +0000
Files and hashes:         1: 6kJ96XMY799y6vtmrn9rx3kYmhs.roa (hash: PNSRje8fwUirW2TXsczyQ2jOuSaEbsxbw87OdQ35Jrs=)
                          2: IREguOomczhl9YfxG5YSPsPS_W4.roa (hash: m+QuBZtjdNzVFKgBcYUiD1amQA/uKQDQ+l8NlyxETzA=)
                          3: UzT2L2zieEzygfAZBsfnKXzillo.roa (hash: d4DJIv7gwoJAgQk3DlfD7vhyLwqoo8Ij0yUfTBnjhbw=)
                          4: _bBDK1nUQdsI5Vhj546N3ABb9f8.roa (hash: 8TWPO4hI51cVFijwej2pk6cT1UBE6HMej65AQk5QpzU=)
                          5: dW5AzCDkth1zapjkUSsbaaGQU7E.roa (hash: aPV1UY5WaJOmG2/BN1+Yn8KtMdB+LDJeDLGjhh8kCV0=)
                          6: f1qcqJmojmjm9tN--vJ2FUipzUg.roa (hash: 97ORGdvoZSob+gt0h3AQ6tlmlIjkq/+QDwWAR4hCgMQ=)
                          7: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: kkZTSx3AeB0rUOuFEnmzkoKW/ISGCl4PjFSXryWmzV0=)
                          8: lzqQLxCOgbmMsFjIF9l6yOZ5_lM.roa (hash: NYvys6J3TneEgOXNsSuYqj8xqnd3SH7BGXlv5Qny2EY=)
                          9: omNvqowQWiFcHzJmArraPXsTckw.roa (hash: ud2vkFB3oPXxZN8PY4iD97HcEJqFoVfzq7PHNHYE8R0=)
                          10: vZHFhIaZCEkZwYylPh9pBWCedbM.roa (hash: PFlsx86ehYKUMA6fSJe1wqKv3SeOZdsbRcfAmNYLmVA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:42:4b:c9:03:36:81:ca:c2:1f:b9:e4:3a:af:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
        Validity
            Not Before: May 17 16:01:16 2024 GMT
            Not After : May 18 16:01:16 2024 GMT
        Subject: CN=a1223469b8aec0c9ce9f9c5fffa41fcb2c019a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:6f:57:13:80:fc:6e:51:75:cb:bf:b4:ba:
                    07:74:41:d1:cf:45:ff:72:e8:54:0f:f5:c2:4e:8d:
                    45:8d:e6:c0:b9:d8:f9:9b:aa:2d:25:9d:02:29:0c:
                    6d:e8:17:6e:cc:53:d8:54:c2:4b:be:41:22:d0:79:
                    63:9c:0c:35:1d:14:6a:cd:83:b7:fe:f4:8e:79:7c:
                    9f:9f:26:28:c5:28:0c:ea:d1:55:18:d6:7e:b3:fb:
                    71:b1:9b:40:8e:76:bc:47:ec:75:2d:be:97:20:c3:
                    88:d2:22:bd:60:40:36:31:04:24:eb:6e:c8:0a:88:
                    c0:0f:cf:1a:d5:04:67:2e:0a:e1:08:90:ec:bf:cb:
                    13:81:73:75:3a:cd:70:38:2f:2c:8c:7e:5f:37:4e:
                    7b:fc:2e:e2:6d:8e:ae:ad:45:3c:8e:99:1c:bd:f9:
                    56:22:25:14:f1:3b:20:88:8c:79:18:55:f6:f7:6a:
                    da:aa:97:5c:0f:bc:e0:d2:65:a3:d7:d3:27:f4:e1:
                    6c:db:4a:bd:ef:d2:80:5b:93:a0:b4:91:8f:89:43:
                    4e:78:c7:4d:21:0d:81:26:4b:aa:52:b5:e7:53:44:
                    2a:ba:ac:e4:9b:29:b1:72:59:e8:de:8f:56:62:ab:
                    52:88:c0:34:a5:ac:7c:65:31:42:ee:56:86:cf:dd:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:22:34:69:B8:AE:C0:C9:CE:9F:9C:5F:FF:A4:1F:CB:2C:01:9A:94
            X509v3 Authority Key Identifier:
                keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fe:26:7f:88:a8:7c:90:da:36:81:bb:2f:48:17:9b:be:7a:
         94:b7:47:fc:10:03:11:fc:8c:d1:20:e9:10:5b:8a:20:8a:13:
         7e:1d:05:27:d6:a0:26:b1:ef:4b:20:69:76:85:2f:5c:f7:fe:
         3f:82:42:51:2c:5e:fa:bf:20:13:58:59:f8:de:89:ce:f4:a2:
         13:7d:e7:f5:ff:ab:3b:e0:e8:71:de:32:ff:02:1f:10:82:3a:
         e7:ef:92:fc:db:8f:8f:69:eb:2c:b0:19:af:dd:94:0e:2c:d0:
         66:99:bb:7a:44:a5:d0:a2:ac:00:14:a5:91:27:95:99:cb:46:
         fa:b3:2b:cf:59:b8:d5:9a:59:32:f9:69:c0:c8:a8:27:be:60:
         d7:b3:3c:44:9b:78:02:99:3d:58:e6:d0:bd:c5:f3:fb:67:7c:
         55:57:50:46:c5:a3:c4:70:7a:12:ac:48:3f:3f:c5:75:fc:81:
         76:5f:e0:0e:79:65:e1:9a:9d:5a:eb:78:f7:29:fc:95:c6:26:
         a5:cd:00:5c:f0:26:77:22:51:7b:31:85:b4:57:98:2d:a1:3b:
         a6:9d:55:a1:79:33:57:df:6d:48:0c:c5:7f:50:57:2d:ca:3e:
         05:9f:35:1c:f1:8b:0c:28:50:ea:d0:fb:00:07:d1:d6:f2:79:
         f4:aa:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:27:27 2024 by rpki-client on console-fra.rpki-client.org