Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File:                     qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier:          AnepvaVNCvbBqPZcmpich7hYf8UgPMWw8f9qQxBitt8=
Subject key identifier:   69:5D:8B:42:14:D6:03:C9:92:1A:EF:12:E2:87:7F:3D:25:AC:31:1D
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer:       /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial:       018FB6100402B0A21F639AC5F298F39776F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number:          0D78
Signing time:             Sun 26 May 2024 18:00:53 +0000
Manifest this update:     Sun 26 May 2024 18:00:53 +0000
Manifest next update:     Mon 27 May 2024 18:00:53 +0000
Files and hashes:         1: 656nYURxY3eIKKADyW7vtfz2QvE.roa (hash: WBUvRjg+A6FKpkAnfu2lffuT8cUZiY6w2S0wGvI5L/g=)
                          2: hHmErcH__x5E9mcORvdogMmdR_w.roa (hash: 0umHWRSP+ZBCxm9D15dqF4xRqK2KsVhu/THCSrFk+8w=)
                          3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: 6EqJBCc7B/SOTRH4r+yKsPVnyIOP6hb36ZxDTuY8Gj4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:10:04:02:b0:a2:1f:63:9a:c5:f2:98:f3:97:76:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
        Validity
            Not Before: May 26 18:00:53 2024 GMT
            Not After : May 27 18:00:53 2024 GMT
        Subject: CN=695d8b4214d603c9921aef12e2877f3d25ac311d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:03:40:d7:65:22:97:47:57:41:a6:14:4e:
                    b5:cf:8f:bf:00:b6:db:60:30:2d:c6:cf:95:23:9f:
                    75:3d:dd:e9:1d:b6:98:81:f3:25:34:26:10:45:42:
                    b0:94:3a:28:24:4d:3b:68:e7:8e:f9:02:f4:bb:bc:
                    81:5a:d2:1e:f9:2d:e9:98:07:2d:f3:a3:4e:08:17:
                    d0:7a:7a:6c:18:80:9c:75:2a:e7:16:ef:4d:85:4a:
                    b7:09:63:73:78:08:d1:60:ce:2c:06:a3:ca:d9:73:
                    e5:ea:2e:f8:6a:7f:ca:64:8b:72:7a:fa:21:1b:b6:
                    86:37:30:d4:f4:56:47:ab:db:89:97:28:d5:86:49:
                    0b:c9:0b:20:e2:17:a3:37:38:d0:b9:5e:eb:9e:9c:
                    3d:e1:a6:6a:7a:be:79:23:49:ea:1e:25:b5:d8:29:
                    3a:b3:4c:47:7b:08:57:87:70:c2:3f:94:c0:d5:6b:
                    73:40:88:17:ef:bb:dd:55:ea:44:17:9d:d3:55:f3:
                    64:f1:5a:04:ec:90:76:72:26:32:43:8e:32:4b:48:
                    96:c3:e9:fc:7a:60:d3:c9:ab:66:53:39:13:77:15:
                    5a:6a:12:70:c6:f4:dc:00:71:ac:a9:c8:01:db:f7:
                    13:e0:70:2d:91:19:0a:c8:c0:b7:08:dd:70:ef:6e:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:8B:42:14:D6:03:C9:92:1A:EF:12:E2:87:7F:3D:25:AC:31:1D
            X509v3 Authority Key Identifier:
                keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:df:37:4f:16:72:84:f6:03:b3:97:78:39:82:27:c6:8d:
         e4:97:5e:39:58:7d:67:d8:d3:2c:ad:91:39:c6:f1:e0:1f:af:
         07:34:fb:90:1a:5c:08:6a:ec:a5:57:e5:cd:d0:32:81:a7:46:
         f4:8b:39:9f:11:18:3c:25:c8:fb:8b:a9:d8:f7:13:a3:58:6f:
         90:fe:18:55:a3:68:32:5a:53:26:38:aa:73:11:01:fb:e8:be:
         9b:36:f7:ab:82:b3:e9:d0:2c:4b:65:ef:85:6a:42:09:2f:55:
         c4:2f:5d:c7:8e:62:c6:96:ba:6f:d5:ef:27:2b:fc:e6:a6:05:
         86:b2:e0:ac:09:6d:f9:17:b3:14:1d:5a:70:c2:59:75:81:ce:
         40:63:7a:89:ba:4e:e7:13:1a:54:06:1f:f9:d8:06:41:26:d2:
         7b:6f:29:a4:4d:1d:21:2f:15:c1:e7:6b:c5:48:34:e5:3f:fd:
         dd:92:25:c1:b9:68:e6:e6:76:26:8f:17:b9:01:52:22:37:e9:
         4c:8e:a9:86:1d:ba:52:fa:10:15:4d:3a:e6:cd:68:57:b5:00:
         6d:ba:dd:ba:ab:3e:cd:6e:2f:c3:65:fd:e0:d3:2a:6c:f4:ff:
         a6:2b:f5:be:40:f8:1c:3d:bc:95:da:cf:8f:8d:31:55:0e:0c:
         4a:4e:cb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 20:31:31 2024 by rpki-client on console-ams.rpki-client.org