Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File:                     QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier:          hNadfiXob9A09QAtVcTACihT25hQapXXwYIU0KrYLkQ=
Subject key identifier:   A0:B8:A6:69:E7:05:E2:6D:0B:4D:49:75:F6:3F:63:2E:B2:97:D8:BB
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer:       /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial:       018FA140108BB48471001116B2D51D2AD4E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number:          0E75
Signing time:             Wed 22 May 2024 17:01:21 +0000
Manifest this update:     Wed 22 May 2024 17:01:21 +0000
Manifest next update:     Thu 23 May 2024 17:01:21 +0000
Files and hashes:         1: 294Q1xAZx-8i9AIz4EXQkmB-MxQ.roa (hash: Ti5U8c8kdCWAHPRpyYCMAjHbGo2ssgQ6ZuBNONr3+LU=)
                          2: MnaUkxH7xvziy5s5EAgmfsu6IgI.roa (hash: W8wwBQ/OwYIZPy8lkItjLMQt8Gq8yMtLREcyqOvOFuQ=)
                          3: QF3EyusI_k8mrwYCXqKRH9751tA.roa (hash: PZFkbpSNmM2N/AJzNI0KmNIajGQ9lc7V/9T6i3l/mJE=)
                          4: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: 4wxzgVMfFm8OuOMlkThaFs5/iCZbPm5Iue1gFK1ziuk=)
                          5: Usx3zOIIZ-azrRU-NmaoSl0TB0g.roa (hash: Ngxx+oynCGzW8PJPWi8MCdFvcczyJCwtxMhOIsVJZnE=)
                          6: m-JU1RwWRB1DBTjnz5LefUtNwDs.roa (hash: xC78iJcSOnwPXs2FZ5+Ow/TaIy2jUipp4r08S9BprUI=)
                          7: mE_KA_jdB4_skqw-gHcsKxBJ__k.roa (hash: aVDfF4QyvH7VRxVvAebgWj8xqPRpJ2gNOlHcl1ocO/M=)
                          8: yiuXhwZ69kDUqaHpZTCCt1ghyiI.roa (hash: XL0ITo62kEmuKh+f5QJhazDe/syA0mtl0h3SuESpm6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a1:40:10:8b:b4:84:71:00:11:16:b2:d5:1d:2a:d4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
        Validity
            Not Before: May 22 17:01:21 2024 GMT
            Not After : May 23 17:01:21 2024 GMT
        Subject: CN=a0b8a669e705e26d0b4d4975f63f632eb297d8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:57:9b:ae:30:bf:69:7b:87:6d:6c:ac:07:28:
                    7a:6e:91:f5:f5:75:9a:9e:96:ac:6e:be:7c:67:45:
                    95:7a:4b:71:b9:c5:ec:4d:4a:09:45:16:f7:82:c5:
                    05:f9:e1:cb:39:d6:7a:36:b4:0a:ba:65:78:18:94:
                    d9:db:e3:ba:4b:1a:7c:ae:e3:66:95:6e:e3:6f:08:
                    b4:3a:63:75:b2:83:a9:7f:b7:e8:fe:00:0c:6c:0c:
                    a1:ad:95:40:be:1c:d3:24:88:0f:d9:93:b2:09:07:
                    ec:cb:08:41:60:2e:d1:59:d4:fd:b7:ca:34:86:0f:
                    6e:57:d7:2c:9e:24:1e:41:95:63:c9:3d:cc:92:19:
                    0e:dc:8f:6f:43:9b:42:10:0f:41:c6:f7:9c:d2:ea:
                    35:20:87:b0:8a:15:26:0c:5c:b9:72:6d:15:9b:12:
                    8f:b8:d9:c6:c8:17:d3:73:a7:98:23:a5:8a:e8:1a:
                    e7:1f:c1:57:6b:e9:f8:95:55:e8:94:b7:71:2d:20:
                    ec:fc:f8:79:98:27:59:f3:53:be:2c:74:08:d0:27:
                    78:42:74:bf:2a:dc:da:5a:1d:16:34:50:0f:2f:8c:
                    d3:6e:fd:2e:a9:1a:88:9e:d5:4f:32:5d:13:11:39:
                    8d:d1:13:2d:d0:af:96:a6:c7:4e:59:e4:ca:da:75:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B8:A6:69:E7:05:E2:6D:0B:4D:49:75:F6:3F:63:2E:B2:97:D8:BB
            X509v3 Authority Key Identifier:
                keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:71:0b:f0:2b:1e:7c:0d:69:b0:fe:11:df:1f:1a:16:64:12:
         e1:f4:25:2f:79:9d:31:3c:80:8e:fd:a3:6b:90:8e:7f:8d:3b:
         74:49:96:43:df:81:49:d7:a9:12:32:b0:e5:55:63:a1:84:1d:
         60:c5:1d:20:7d:e8:b5:30:1e:b0:6b:63:e0:e3:3f:02:9b:25:
         97:74:31:b0:43:c4:e5:3f:9b:69:83:f3:29:b6:68:e2:f7:e7:
         96:5c:0f:72:aa:63:90:a1:9b:c1:68:93:90:63:65:cf:3b:34:
         b6:ce:8d:0f:ad:e4:2e:e2:b9:12:e1:77:be:8b:2e:fa:0c:ef:
         5b:b6:75:36:d3:24:2f:f2:c1:11:f6:1c:95:e5:29:6d:1b:5e:
         6b:5f:99:a6:3d:c1:57:8c:10:8a:b8:01:a3:8e:f5:54:f6:ca:
         15:01:33:c5:79:c4:c4:2b:f2:ee:3e:91:d8:29:3a:3a:43:fd:
         27:70:25:c6:fc:4f:19:a9:10:5c:47:79:47:3a:75:22:25:01:
         00:43:93:77:cb:5c:b1:3c:92:59:dc:c5:c9:a4:6d:09:2e:6d:
         00:4b:fd:bf:b5:75:25:dd:8a:bc:a0:fa:ba:9b:78:3f:97:4c:
         50:83:8d:79:21:9e:5f:bf:a5:9a:a5:94:af:89:69:e0:44:81:
         70:8d:f0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:35 2024 by rpki-client on console-ams.rpki-client.org