Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft
File:                     QG8BSivHauBObTBNBqrL_I6F1RQ.mft (raw, json)
Hash identifier:          6tjXMbipBjz2e8fStOVLiQzennS7jg9dAsRBMCpRgiw=
Subject key identifier:   40:C3:01:95:7D:D9:2D:CD:DD:45:94:96:18:43:E6:D2:C6:61:F2:3C
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Certificate issuer:       /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial:       01901DEB58E5B7272A2C97E789FCD0C69829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft
Manifest number:          0FBA
Signing time:             Sat 15 Jun 2024 22:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:21 +0000
Files and hashes:         1: 6rEstb-qApzigvsFg3UbJOJcFlY.roa (hash: GX7UssVR/Tg/KdsWzWnKsERUbKToyzgNF2BsWoKeqKA=)
                          2: 9_LsePrRnG3kWS66LWp7tDq-FQs.roa (hash: caDvpkAIRw4WyP3h0qsJjj4oImK0ugTxWGGPqvkEvJU=)
                          3: Mxd-3hzbMgrofSbAlf1PCLAOx9E.roa (hash: +UNe16m3v6kAWsTmo+BSfNubz54T8NoWKFzGOYyBRD4=)
                          4: QG8BSivHauBObTBNBqrL_I6F1RQ.crl (hash: wJmyAQwKD6nssgs+bpICJwuHFd95BshWYSe/iwPdU5Q=)
                          5: lipYy7_Qkl0X6_DIpmw5w0iMk9g.roa (hash: aI1iTWCogAd5UYBTD2Z81sFjpXHsTB6VnJ2YAZsgqho=)
                          6: mj96qHKA5MOHG5Eh77KoCDPC2Ts.roa (hash: gT53mnUVfnbnP/Y8k2IbSkYM3CdIBHspM4X6skC/9iE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:58:e5:b7:27:2a:2c:97:e7:89:fc:d0:c6:98:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
        Validity
            Not Before: Jun 15 22:01:21 2024 GMT
            Not After : Jun 16 22:01:21 2024 GMT
        Subject: CN=40c301957dd92dcddd4594961843e6d2c661f23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:68:8f:84:00:55:55:a1:fa:a2:0c:f7:cb:e1:
                    02:57:85:28:31:22:d5:b1:b6:c3:28:fb:3c:46:90:
                    82:f8:1b:0c:14:46:72:bf:a6:59:6a:fa:38:b4:c2:
                    b0:b9:13:ee:d7:15:5a:25:9a:9f:b3:8b:f5:01:1c:
                    c4:0d:8a:a3:17:41:f9:12:51:a0:05:32:e9:cb:a3:
                    bd:cf:1d:2f:13:c0:2e:7a:56:37:7e:38:25:37:52:
                    fa:87:e4:38:2c:a4:e1:fa:25:13:2a:55:27:2d:a1:
                    55:37:e7:6b:dc:d5:ab:1d:c6:dd:8e:3e:9b:a8:c1:
                    17:6c:26:b4:d7:0a:b8:c9:1b:35:df:ec:63:81:96:
                    f4:8e:46:92:9c:ce:9e:05:cf:f2:7e:f8:23:83:42:
                    82:79:6a:9d:ba:d8:ce:4e:4a:0a:a1:24:c7:0b:36:
                    80:d0:a5:a5:ea:bf:4f:76:41:93:b4:af:82:9e:32:
                    10:06:cc:86:fe:7a:74:33:aa:62:4e:40:98:65:c9:
                    64:ea:f3:27:21:7b:98:2c:82:c8:3d:82:c5:ce:a1:
                    33:05:f5:5d:f2:99:ce:30:8c:8e:97:c4:14:cf:4e:
                    e1:50:65:7b:44:73:ee:0a:20:f0:77:c5:4a:ce:dd:
                    75:cd:f6:58:e6:61:47:94:80:a9:bd:7b:92:8f:e2:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C3:01:95:7D:D9:2D:CD:DD:45:94:96:18:43:E6:D2:C6:61:F2:3C
            X509v3 Authority Key Identifier:
                keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:57:ba:9a:c0:ad:e7:e1:62:fe:62:1f:5e:cd:70:88:c5:
         ff:ca:a1:26:8a:38:1a:fb:95:ce:15:60:d7:d4:c2:eb:2f:ad:
         fb:31:cd:cb:25:9b:78:94:34:70:cd:41:22:40:ab:13:c1:39:
         0c:b2:c8:cc:d1:57:08:8b:1b:74:96:ba:2d:27:be:73:95:a6:
         f2:c0:b3:2b:63:4f:d6:61:f6:ee:de:b8:0b:d6:14:f7:a3:28:
         bd:45:f2:5b:b6:ca:6a:c2:5c:ee:df:5f:7e:5b:d2:17:4a:1b:
         27:39:b0:db:8a:97:87:58:18:76:68:3b:e1:2b:36:ce:fb:c6:
         87:47:13:d7:05:bc:0f:e7:42:3b:69:d2:54:fd:40:b2:13:0e:
         66:55:a5:b0:4f:d6:85:72:b1:09:7b:80:fa:c1:c7:74:6f:45:
         5e:dc:9d:9c:ca:dd:a9:47:7a:10:24:01:f4:27:a3:2c:cf:83:
         f4:82:b4:7d:28:83:5d:67:f9:3f:35:0e:62:62:07:66:01:42:
         14:99:ad:5e:3e:5d:9b:a8:0e:de:5f:f1:49:9c:ac:97:7a:8c:
         56:51:19:82:02:2d:1f:29:66:b8:6a:3f:34:62:0d:66:a3:2f:
         9a:5c:d3:46:7a:9b:9e:e1:97:e1:73:6a:6f:2c:0e:b8:4d:67:
         76:0b:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:32 2024 by rpki-client on console-fra.rpki-client.org