Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File:                     qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier:          gmiSF27edQ5wHP8jn3IKSiESMLv8seloz4JMNiR0yRI=
Subject key identifier:   08:82:64:88:38:89:E5:9C:95:CD:2D:34:A9:63:AC:E4:5F:19:13:00
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer:       /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial:       01901BFED20AC4E9D0C1EC72279ECF61DF17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number:          1024
Signing time:             Sat 15 Jun 2024 13:03:23 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:23 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:23 +0000
Files and hashes:         1: ilDKw7-E1doCFmV5gdTB66ZBwAg.roa (hash: bHDo+bldPttKDhKsvvOzcdyKBOO2cLviC2PvrAW2Xvs=)
                          2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: 5hRsp8OB8311IKvhCDmSFcsMLw1drSyeHTS/eJ7+NSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:d2:0a:c4:e9:d0:c1:ec:72:27:9e:cf:61:df:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
        Validity
            Not Before: Jun 15 13:03:23 2024 GMT
            Not After : Jun 16 13:03:23 2024 GMT
        Subject: CN=088264883889e59c95cd2d34a963ace45f191300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:af:cc:a1:e0:9c:a8:a8:83:fa:e1:21:ab:
                    03:01:49:02:f0:5d:19:04:df:0e:b6:c2:92:fc:b8:
                    7a:cc:b5:fb:a1:65:66:da:b0:7c:91:69:2c:a9:5c:
                    2e:99:55:85:05:e3:98:4f:2b:ba:25:36:2b:f5:d4:
                    e6:c4:d9:27:f0:81:a7:20:70:76:76:5e:b6:4c:10:
                    11:62:81:41:92:98:04:d0:4b:b7:b2:e2:e7:2a:45:
                    31:5d:f4:0d:71:dc:64:00:48:42:bc:85:20:4c:d4:
                    07:fb:6e:7a:9b:02:84:8b:58:bc:af:7e:ce:37:82:
                    0f:e9:a6:ed:1b:62:ed:fb:81:50:c3:d7:f7:ec:d7:
                    95:e1:b4:95:fe:1c:dc:d5:7e:b3:26:51:4e:a4:00:
                    8f:f4:04:f1:52:86:29:82:c9:c9:04:86:b8:b6:3e:
                    fe:72:59:dc:ac:f3:80:66:dc:93:a8:08:4c:54:55:
                    ac:ad:e0:74:6d:16:4a:bd:bf:0f:56:ee:08:ab:cb:
                    8c:66:58:bd:aa:3f:62:7c:e1:cd:2f:ee:98:1f:fc:
                    9c:4e:8d:18:d3:64:6c:5f:89:4f:b7:7c:5c:ad:a1:
                    f1:bd:36:4b:fe:d1:81:26:e3:74:95:38:89:fc:ee:
                    ef:9c:8d:20:05:a4:f0:b7:44:08:2f:fe:bd:26:a8:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:82:64:88:38:89:E5:9C:95:CD:2D:34:A9:63:AC:E4:5F:19:13:00
            X509v3 Authority Key Identifier:
                keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:fd:2d:5e:56:fd:46:89:3c:a8:e4:d9:f5:2f:8b:57:12:50:
         4c:b4:03:da:1f:22:20:9e:32:02:2f:2c:87:fe:d8:83:6b:75:
         e8:99:b6:e8:5f:d2:fd:d8:89:14:67:24:a6:bc:6f:04:59:ac:
         fe:ef:e2:a2:7e:b1:fa:b7:20:6f:b5:d9:bd:6c:e6:80:4a:08:
         67:12:5c:db:e9:0b:e7:f3:c0:9d:79:af:e8:c6:e8:bc:f7:87:
         07:48:b7:79:39:d2:c8:80:ec:75:54:10:be:0e:5a:3c:6d:e8:
         b4:fb:eb:11:6f:76:ea:3b:1d:7f:78:22:75:5e:32:6b:b8:76:
         1d:aa:9b:34:45:4c:63:86:f6:eb:8f:90:d1:72:56:b2:57:23:
         4c:64:e3:8e:1c:7a:a4:4c:bd:14:cf:26:18:c7:a2:0e:b3:0f:
         3b:ec:ea:2a:8f:71:1a:76:fc:50:3f:f7:c3:59:88:9d:8e:1e:
         b1:97:b2:ad:75:67:89:30:26:b2:f9:a7:09:3e:3a:ee:cc:2b:
         7e:f3:5c:ed:a6:67:00:02:95:ac:53:9b:c6:fa:6a:ee:4f:b1:
         53:60:5c:03:27:cc:16:66:11:e2:41:ec:eb:dd:3a:4d:3f:7d:
         3e:82:5d:a2:0d:49:05:69:dd:16:79:3c:65:d3:41:dc:80:57:
         3e:3a:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:22:10 2024 by rpki-client on console-ams.rpki-client.org