Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File:                     QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier:          XCyEpGdKfcxHXMpiTvIwql9NuNMjYyhh8sEqL85qCsI=
Subject key identifier:   C1:B3:00:36:42:A1:D7:42:BB:7A:43:30:F8:77:08:04:5C:34:01:0D
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer:       /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial:       01901DED2E25493A98C7B119C6466ABB0AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number:          08AC
Signing time:             Sat 15 Jun 2024 22:03:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:21 +0000
Files and hashes:         1: AZKrSJ4KuuBNkd2upK6LMO4PyaI.roa (hash: OOoX+rdfxR1kfXCoDhntYQq0HAJlkP1lMPUm0vDH5qE=)
                          2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: y7VX4uGcRgVrgtagVKQtD3UoUi28X4LfU8QKk3di0RE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:2e:25:49:3a:98:c7:b1:19:c6:46:6a:bb:0a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
        Validity
            Not Before: Jun 15 22:03:21 2024 GMT
            Not After : Jun 16 22:03:21 2024 GMT
        Subject: CN=c1b3003642a1d742bb7a4330f87708045c34010d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:c8:d7:af:7f:64:2e:2f:4a:75:bb:80:ef:
                    3e:97:9e:f6:f2:8e:c8:8b:2b:c3:05:2e:7d:ae:e5:
                    2d:0b:94:ef:4c:dd:65:fb:5f:f5:1d:24:d9:71:a8:
                    3f:ee:6e:41:73:83:30:70:d9:d7:dd:ba:e0:fb:6c:
                    32:dc:e8:22:0c:65:95:c2:b8:98:f8:05:33:9b:6e:
                    58:4f:31:71:2b:9f:b8:11:2d:48:17:b1:6a:bb:a6:
                    7f:36:5d:fa:d0:90:8a:cb:3c:3b:3b:f5:3e:3d:9f:
                    c6:ce:9c:71:2c:59:c9:b2:19:30:86:45:72:7a:84:
                    7a:50:81:77:92:cb:52:59:8e:05:a6:b2:22:96:b2:
                    13:27:1b:bd:a6:e3:aa:f7:88:e6:69:42:ca:29:0c:
                    38:86:7b:56:fe:bc:1d:ff:cf:6a:53:e1:ad:69:2e:
                    d2:d4:b4:06:b6:33:7b:44:57:5c:67:24:05:df:f0:
                    04:05:71:f9:38:96:a2:3a:6f:db:44:72:2f:97:c8:
                    d1:cd:33:e6:0e:23:3b:f0:70:54:24:e7:69:8e:5b:
                    cb:8e:4f:8f:04:01:08:9c:e6:42:87:3e:fa:62:b3:
                    4f:bb:19:76:e1:ff:7c:a0:4e:af:01:44:81:bd:ea:
                    e6:9b:6b:04:4d:55:60:fd:36:6e:53:e9:7e:2d:8b:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B3:00:36:42:A1:D7:42:BB:7A:43:30:F8:77:08:04:5C:34:01:0D
            X509v3 Authority Key Identifier:
                keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0f:58:de:4a:68:c0:bf:fc:9c:f4:34:6c:7a:fb:e7:9b:55:
         5a:a3:c5:32:47:6e:74:38:dc:61:71:a7:63:c8:9a:a0:bc:c3:
         1c:0d:3c:74:fc:b7:38:3f:25:ba:e2:0f:e8:13:68:27:3f:30:
         36:1c:65:1a:1e:60:56:5b:22:4b:1e:c6:cb:b9:7e:a2:ca:3b:
         46:7d:54:89:34:14:e9:dd:c2:79:f4:cb:b4:5f:46:83:c4:13:
         bd:95:35:da:e0:d0:2a:27:5d:43:83:16:26:c8:b9:64:a8:9d:
         5a:d1:db:12:28:28:cd:87:f9:26:cd:26:8c:97:f8:17:9a:11:
         6a:75:66:2b:57:39:db:9d:ea:6a:fa:ce:42:66:17:62:6b:30:
         99:81:4d:0f:25:b9:1b:76:8d:05:72:41:89:80:5d:ef:f0:6d:
         f9:53:54:f8:a2:8e:69:e9:41:09:cb:06:a6:77:ff:f3:2b:af:
         44:09:c9:51:91:a1:e5:e7:bb:64:db:b1:7b:8a:31:e4:ce:13:
         5e:a6:d7:7a:77:6a:8e:d4:4b:25:39:c3:26:36:de:c6:0f:06:
         06:21:66:35:7c:63:0d:b8:83:2b:52:39:b7:12:b0:89:59:ba:
         2f:c9:10:d8:15:31:7e:eb:ac:d7:eb:fe:51:4c:8d:79:29:53:
         e0:cd:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:35:49 2024 by rpki-client on console-ams.rpki-client.org