Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
File:                     qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json)
Hash identifier:          LWR18hq8FXH1FsKAT0rsjzCngh3mAUXWX3Js38BnKzw=
Subject key identifier:   5C:FA:8F:8A:8E:2D:42:61:DE:D2:EE:CD:73:56:CA:33:C6:3F:F7:85
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Certificate issuer:       /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial:       01901DED8A6692D765EB38D727A6A6CAA901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
Manifest number:          0720
Signing time:             Sat 15 Jun 2024 22:03:45 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:45 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:45 +0000
Files and hashes:         1: GPyQee34Y8mZFlQIteSfIuhRr2I.roa (hash: 8Re8HGn4121lQ42XjCWTd43/gNTaXC8Glhn1w0sMF58=)
                          2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: EOw7A/JZhYzricqEomASctLEE/MXpafNMm6rBEebMbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:8a:66:92:d7:65:eb:38:d7:27:a6:a6:ca:a9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
        Validity
            Not Before: Jun 15 22:03:45 2024 GMT
            Not After : Jun 16 22:03:45 2024 GMT
        Subject: CN=5cfa8f8a8e2d4261ded2eecd7356ca33c63ff785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:21:32:a8:12:fd:b4:74:2b:f5:83:3e:f5:
                    a5:5f:f6:27:6e:c9:ba:40:50:cf:27:a4:03:30:a7:
                    5e:d8:62:e4:6f:e8:79:b1:de:8b:7a:ce:e1:30:df:
                    22:d4:2f:ea:fa:a1:6e:58:9a:01:3e:42:fb:fa:0f:
                    0a:00:25:a4:e8:a4:f0:14:fb:fc:ca:0e:ba:29:ad:
                    c2:c2:a1:c1:ff:00:03:15:4e:29:ba:42:22:de:d4:
                    b7:05:14:67:b8:9d:2e:51:3d:4e:58:9b:cd:56:96:
                    e3:6a:46:85:63:27:20:57:73:fc:7b:48:c0:a8:cd:
                    c1:93:d1:72:24:c8:b5:76:74:c6:d0:5a:06:33:9f:
                    79:3f:fd:96:27:09:7e:56:a7:69:11:5f:34:ee:87:
                    e9:f7:30:e8:86:8b:63:93:cd:05:b5:b3:8b:26:0d:
                    65:3c:fb:a8:29:58:09:38:04:c7:d4:4b:0a:c6:83:
                    77:1b:fd:cc:3a:3e:8e:91:10:5d:3b:19:1d:21:df:
                    a4:56:b1:29:14:4d:c3:34:d3:4c:df:0f:4f:f6:b4:
                    ce:4e:60:1d:9a:c5:8a:b3:3d:e9:c7:7c:dc:f5:26:
                    3d:59:77:ba:d6:e9:81:65:82:5b:fa:5e:a8:79:e3:
                    bb:ec:4f:e4:d1:12:f6:3c:50:a8:06:6f:b2:a0:24:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FA:8F:8A:8E:2D:42:61:DE:D2:EE:CD:73:56:CA:33:C6:3F:F7:85
            X509v3 Authority Key Identifier:
                keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8b:cf:b3:39:2e:48:a3:bd:e5:03:40:b1:34:3a:84:04:7b:
         9a:ce:8c:81:5b:52:e2:c0:df:69:d1:a3:95:b9:6d:ac:1c:ad:
         7f:29:0a:b1:a8:d5:30:a9:1a:4d:77:ef:41:a2:f1:08:d1:4c:
         59:70:31:8e:3c:e2:da:cf:0d:4c:9f:09:79:8b:3d:a2:a2:7b:
         3e:c5:b9:89:39:23:bb:16:1d:6f:65:cb:1b:7f:83:32:73:31:
         c4:2c:b1:08:8f:8b:5e:9f:94:91:be:ba:e2:69:7c:0a:c7:78:
         0e:61:73:cc:1d:a2:a4:ab:fe:2f:6c:81:64:83:9b:05:7a:f3:
         cf:9a:ee:29:88:a6:92:0e:af:c8:27:fd:0b:1c:7b:f4:03:8e:
         fc:43:5c:ce:46:5f:e6:e0:87:b7:ca:c4:ad:79:ff:f4:d7:dd:
         2f:b1:09:2b:1c:e9:82:46:4f:52:ef:f6:38:07:21:07:11:fc:
         19:53:21:58:01:54:38:11:61:f1:a6:be:74:33:90:13:c1:50:
         53:7b:de:1a:41:ab:9d:fc:37:14:d9:29:18:01:a2:6c:0a:5f:
         0e:6f:83:46:d5:de:d7:04:77:69:e7:84:1a:2c:22:93:82:a0:
         64:92:9c:c1:e8:ea:69:26:54:ad:4f:0c:0c:2c:49:f8:23:1b:
         ff:3f:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:53:23 2024 by rpki-client on console-fra.rpki-client.org