Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File:                     qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier:          o193klxBetrknrX1LznOepBw8aSpWZhzFyot1lEKNnk=
Subject key identifier:   3B:1F:28:59:C2:9A:E2:FF:12:AF:01:D3:75:93:B0:AE:D6:59:6D:E8
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer:       /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial:       01901CA1B75665C147399D8F52724BDDD767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number:          02AB
Signing time:             Sat 15 Jun 2024 16:01:18 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:18 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:18 +0000
Files and hashes:         1: OllyXAcLSxx0S6sOWUGPFB13GNg.roa (hash: +Wr96qUh5RqiH71Pdc/jDhjvl/S8nBH4xkSrVBs7NC0=)
                          2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: LJs64+mqSr5uysXdUP+xe2c4gIGB2NegW058jy/aTCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:b7:56:65:c1:47:39:9d:8f:52:72:4b:dd:d7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
        Validity
            Not Before: Jun 15 16:01:18 2024 GMT
            Not After : Jun 16 16:01:18 2024 GMT
        Subject: CN=3b1f2859c29ae2ff12af01d37593b0aed6596de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7a:a8:fb:e9:53:7c:95:70:76:9d:02:05:05:
                    87:3b:b4:f8:bc:14:7a:04:9f:c8:a9:fd:60:d9:0f:
                    2c:b1:4b:48:26:0f:01:4f:56:eb:b9:d8:db:d6:fa:
                    e5:7c:cf:9f:f9:12:6a:b7:30:2b:18:84:ac:e6:37:
                    20:05:78:e0:29:0b:1c:6e:90:8b:b4:3d:78:ff:ce:
                    7f:78:c1:c1:76:90:b1:63:5f:76:3d:75:3a:c7:34:
                    2a:e2:bd:1e:d5:98:3d:c6:d6:11:76:f4:dc:26:0c:
                    3e:85:4d:d6:f5:ba:bc:a3:27:51:e5:71:f8:a2:05:
                    2a:b4:5f:08:b5:d8:45:40:e2:14:b0:73:06:fd:25:
                    cf:61:31:61:4d:53:ed:b0:0f:f4:9c:9a:bf:ae:66:
                    21:71:7f:c4:62:98:be:bf:15:66:d9:38:45:24:8c:
                    d2:11:06:df:e1:13:08:74:2a:7d:7c:05:d6:72:0f:
                    6e:ff:1d:a5:40:15:d7:54:06:92:2e:d0:3d:15:66:
                    50:90:20:b4:e9:36:55:57:7c:a8:9c:cb:8e:e0:d7:
                    5e:cd:ea:f5:58:63:42:9d:b3:95:3c:1f:0f:1c:1c:
                    fd:8b:b5:54:8d:48:ee:48:7a:70:b9:ef:a5:57:2f:
                    75:ce:e9:3e:10:d0:ca:98:e4:30:8e:6e:7a:df:bb:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:28:59:C2:9A:E2:FF:12:AF:01:D3:75:93:B0:AE:D6:59:6D:E8
            X509v3 Authority Key Identifier:
                keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:96:93:56:65:21:d2:d1:d6:61:09:44:ac:14:b3:68:47:4b:
         fe:b8:2e:02:69:7a:c0:a7:46:4a:b3:19:c3:42:19:04:de:e8:
         b1:77:77:aa:10:8b:1c:6b:e8:5a:6e:7e:4f:3a:21:24:66:54:
         c1:ae:ed:0d:81:9c:59:df:80:0f:e6:0f:e5:8f:9b:5b:8f:d4:
         88:2d:b8:8c:0f:57:69:2a:48:b7:0f:c1:f3:f0:94:21:be:34:
         a5:0d:aa:b5:bb:27:eb:65:70:f9:7c:a3:69:e5:e9:d5:c4:03:
         84:db:48:ad:aa:f8:e3:64:64:ce:8b:04:9b:be:a7:30:53:62:
         9c:0e:4b:53:fd:f9:2f:72:50:76:2d:0d:b1:9d:7d:fc:1e:99:
         79:1e:e1:fd:26:7e:7a:05:93:19:d2:19:45:63:90:73:06:64:
         40:ff:f6:5d:e5:cd:46:45:54:23:1d:d0:20:d1:f3:05:25:89:
         dd:fd:db:7e:59:b5:0d:76:4e:5b:d3:f5:a3:25:ff:a8:0a:db:
         50:4f:a2:f5:8b:ab:d4:a8:76:57:c5:3e:44:40:8e:1e:8f:45:
         fb:fe:9b:a1:45:86:50:0f:08:72:92:19:a0:94:72:ca:49:ac:
         64:57:1d:b6:1f:7d:01:8f:a3:4d:e6:a4:c7:aa:02:71:ae:e9:
         64:77:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:57:20 2024 by rpki-client on console-fra.rpki-client.org