Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File:                     QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier:          k3McUMjvSCV7rBHTT4zHgBP1R98DXb7oiSYeVmsWpjs=
Subject key identifier:   D5:5B:6F:BF:46:E3:F1:6B:8E:E3:2B:D9:8E:0D:23:6F:F4:DC:BA:32
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer:       /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial:       01901DECED2168F7F96C51A7BBD8B1259C20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number:          075A
Signing time:             Sat 15 Jun 2024 22:03:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:04 +0000
Files and hashes:         1: DViIKfg4Jag1eSqxqRzbARxP5No.roa (hash: 7cAXt0ge8AwdNoxn3kzpH5WnqaQ1U3NmmlMMZw3JlCM=)
                          2: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: CV+g1i0Dkcj7UdlgYOSJQ7Xi+Rw/IHprasLpIwqft40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:ed:21:68:f7:f9:6c:51:a7:bb:d8:b1:25:9c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
        Validity
            Not Before: Jun 15 22:03:04 2024 GMT
            Not After : Jun 16 22:03:04 2024 GMT
        Subject: CN=d55b6fbf46e3f16b8ee32bd98e0d236ff4dcba32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:8a:e2:3e:96:0b:01:bf:6d:7a:24:6f:f2:
                    07:92:d4:6f:54:45:9a:f3:33:ba:aa:96:1b:73:67:
                    f0:a2:1e:02:ec:85:1e:9f:31:bb:f0:bf:9d:1b:47:
                    11:3f:64:05:82:0c:6a:35:31:62:55:66:08:70:bf:
                    cd:85:aa:17:c6:a9:73:08:07:5f:5d:3d:0f:cc:e7:
                    68:be:5c:00:d8:7b:88:ea:3f:0e:a4:be:88:37:19:
                    c0:b6:50:05:5e:ec:cb:89:f4:ad:12:e3:0b:aa:05:
                    c7:7d:85:f2:5e:41:ba:cb:c1:3b:dd:07:2f:7d:d7:
                    2f:a5:5c:ba:d1:01:75:e7:f8:a4:e2:b8:b1:8c:92:
                    38:5b:76:dc:9e:9d:25:f1:77:9d:3e:c7:d3:1f:1c:
                    7f:39:11:b6:ce:40:83:1d:d2:03:c0:cd:88:12:99:
                    04:9f:ff:77:cc:97:d2:2d:b6:4a:bf:42:b4:55:4b:
                    fb:14:e3:ee:df:0f:a1:c9:7c:91:2c:9b:f0:d4:74:
                    db:f2:ba:29:44:9e:3a:22:6b:c8:83:fb:23:a0:36:
                    25:ab:76:8b:44:fe:cc:14:b0:b1:5e:aa:89:7c:cb:
                    64:9e:4d:de:f1:b8:59:45:32:e0:fb:38:76:17:ea:
                    b5:ac:9f:9e:62:3c:9b:62:b7:da:97:67:4e:06:bc:
                    e2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5B:6F:BF:46:E3:F1:6B:8E:E3:2B:D9:8E:0D:23:6F:F4:DC:BA:32
            X509v3 Authority Key Identifier:
                keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3e:0f:a3:e9:06:ba:e1:7e:76:03:01:d2:d2:af:33:bd:51:
         f3:6a:bd:b7:fe:45:99:d9:3b:b4:e9:19:7d:75:29:4d:54:d7:
         93:0c:c6:b2:47:0c:cb:5b:7e:4c:2a:dd:10:91:db:b1:4a:03:
         13:ac:7d:3e:6a:66:a5:0c:6c:4c:aa:b8:0a:e3:d9:3b:3d:6a:
         6d:34:4f:5c:b0:d6:43:de:81:5f:03:e9:09:40:11:11:02:1d:
         88:eb:6a:2c:84:b6:7b:1e:a3:6a:d1:5e:5e:4c:91:b5:31:c5:
         2c:27:62:22:48:10:78:c3:87:31:4a:2f:db:8f:e1:ac:80:a6:
         9b:4e:04:b2:92:a1:2f:24:6e:2d:10:3a:7e:88:73:24:f3:86:
         4f:16:4f:dc:a2:ef:c3:f7:21:88:3f:be:9f:f4:24:eb:6e:fd:
         0f:8e:bd:2d:c7:ce:85:7c:00:49:f9:cf:f1:85:5d:2e:bf:9d:
         66:70:84:d4:e2:db:46:5b:06:f6:bc:97:10:c2:ad:ee:95:db:
         71:de:f6:d4:4d:10:da:ff:bb:94:61:97:3d:80:16:16:71:70:
         1c:84:f4:2d:51:43:84:3b:f1:b8:bc:d5:00:5f:b3:68:1f:7c:
         67:2a:82:df:cf:a6:af:b5:c3:1e:89:e1:ce:78:fc:21:87:5d:
         2c:43:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:36:46 2024 by rpki-client on console-ams.rpki-client.org