Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File:                     Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier:          lhhXmrVgR3g2hoEvdeiZJs7HE7nQyb2n+kt5vdY68Cw=
Subject key identifier:   1D:55:6F:96:E8:13:EA:63:ED:0E:0F:25:0A:EE:95:13:2E:AA:56:1A
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer:       /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial:       019040AF9F25D073C03408A26D9359917D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number:          06B9
Signing time:             Sat 22 Jun 2024 16:02:49 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:49 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:49 +0000
Files and hashes:         1: PQpBpYcWhvrvRd4bGDnN8pY1Y5c.roa (hash: EOyWcntDPe4fIqfe4aQc1XW6TZ6kvZgJGtWsOmIS0Ak=)
                          2: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: +xDqNybaQ+7XSYVczTXiquPcztwfVPeSg9bYFm97dv8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:9f:25:d0:73:c0:34:08:a2:6d:93:59:91:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
        Validity
            Not Before: Jun 22 16:02:49 2024 GMT
            Not After : Jun 23 16:02:49 2024 GMT
        Subject: CN=1d556f96e813ea63ed0e0f250aee95132eaa561a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:32:23:cd:01:fb:5b:a3:45:69:d7:28:d0:
                    63:41:30:27:76:2a:1d:a8:c5:54:3d:9e:a4:2c:16:
                    0f:92:6f:6b:a3:af:a5:95:90:9d:a5:d2:f9:23:ac:
                    1e:52:07:18:6e:47:cb:e1:87:e8:d5:77:b1:e9:67:
                    3e:67:d8:4b:3a:18:3b:b7:49:56:68:6d:29:61:2b:
                    17:6f:26:7f:6e:56:f5:a8:a6:17:16:4a:c2:73:84:
                    81:5a:17:3e:d1:43:11:a7:45:8e:e9:df:e1:b5:2b:
                    fc:9b:ad:35:78:64:67:9c:c8:af:8b:f9:5e:e3:2e:
                    b7:b2:99:90:7b:85:b9:9a:41:6d:2d:ee:74:92:95:
                    6f:b5:a8:da:da:8b:21:a8:e0:c7:77:d4:e8:42:57:
                    fb:52:84:98:46:39:e8:54:cb:73:bd:b3:52:e1:28:
                    3c:89:f9:c8:5e:bf:c8:62:c4:8f:f9:77:b2:5f:32:
                    c4:79:a3:52:01:b2:45:95:62:42:76:92:16:52:66:
                    c0:98:ef:69:c5:90:7b:d6:fd:ed:1a:60:e2:bb:84:
                    2b:e3:8b:71:98:35:f3:32:a6:b9:6d:da:23:d1:e1:
                    c0:36:bf:61:39:de:3a:5f:6f:66:82:58:a5:19:0b:
                    71:7f:31:ec:1e:47:c0:01:9a:ba:83:94:b8:13:ce:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:55:6F:96:E8:13:EA:63:ED:0E:0F:25:0A:EE:95:13:2E:AA:56:1A
            X509v3 Authority Key Identifier:
                keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ed:5a:47:13:22:d6:4a:29:5b:ea:80:13:f7:2f:19:e9:6c:
         88:7c:c6:cb:68:17:a9:5b:36:35:79:38:e9:6e:78:a6:72:de:
         33:91:41:25:a9:9a:2d:e4:d7:06:08:5b:bc:15:c1:74:8e:22:
         9c:ca:a8:ce:a1:0f:39:2b:e8:31:30:ac:ba:28:b9:9f:e1:7f:
         2d:a8:af:60:26:45:92:d7:1e:5a:e9:81:67:87:5b:7b:db:84:
         fb:7b:75:e1:df:1c:26:38:b6:75:69:2c:87:73:c9:84:0b:2f:
         3a:1e:31:16:e3:2b:19:c3:08:84:2f:0d:18:0c:f7:4b:f8:be:
         9d:c2:f4:83:cf:fc:6a:44:9c:2d:81:c9:6a:65:b1:06:bb:a3:
         71:44:7a:20:fe:cb:82:56:44:c5:95:4c:b4:84:1d:54:11:ca:
         70:e7:8f:c4:ea:6c:77:98:e0:a0:e0:b9:66:19:13:be:4b:6a:
         49:71:ce:bb:10:73:a1:55:fa:8f:87:65:17:4a:78:57:5b:dc:
         11:37:33:10:53:43:11:c9:6d:12:47:97:1f:77:71:f8:df:5f:
         c2:12:6d:39:25:ef:5e:1e:5c:b4:e8:7e:36:7c:57:9c:f0:3d:
         68:95:0a:83:43:66:56:73:f1:92:57:fa:98:2a:97:98:34:94:
         60:70:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:00:54 2024 by rpki-client on console-fra.rpki-client.org