Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
File:                     qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft (raw, json)
Hash identifier:          HvRoYBUEneRiw55a3ptNbT7WUHCfSGoSqWzFc5KaE50=
Subject key identifier:   BF:5C:D8:00:49:CC:35:BC:F2:5F:E5:AD:04:8A:FB:93:AA:B8:26:09
Authority key identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
Certificate issuer:       /CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Certificate serial:       0190411BB38B8DB01FFA2CA67A0FF9DBAB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
Manifest number:          90
Signing time:             Sat 22 Jun 2024 18:00:52 +0000
Manifest this update:     Sat 22 Jun 2024 18:00:52 +0000
Manifest next update:     Sun 23 Jun 2024 18:00:52 +0000
Files and hashes:         1: bhYdrdzjKeTLowEPNhY72zFE-j8.roa (hash: YdeFQ7ebewDV+6UeeahEnKtrO/waDj7Ako7nf/mLkk8=)
                          2: qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl (hash: i3v8AfCOL58yiU9TPgIoLR86kwxTOsi9Dx3rnqJnY3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:b3:8b:8d:b0:1f:fa:2c:a6:7a:0f:f9:db:ab:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
        Validity
            Not Before: Jun 22 18:00:52 2024 GMT
            Not After : Jun 23 18:00:52 2024 GMT
        Subject: CN=bf5cd80049cc35bcf25fe5ad048afb93aab82609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:9a:9c:65:0c:63:11:17:3b:a3:46:ac:f0:
                    6e:c2:52:b1:31:31:35:28:82:65:4e:5c:a0:2f:1c:
                    b5:88:9e:c9:7d:54:0b:f0:f8:b5:56:7b:8f:a1:e1:
                    74:23:7a:7d:ce:1f:58:25:11:4a:74:05:f2:67:23:
                    67:39:49:bc:d7:ca:51:ce:c2:67:9d:b7:a8:bf:b8:
                    f0:93:51:a2:3a:a8:2f:b6:8f:4f:92:7d:04:f8:a7:
                    49:80:56:b4:a5:37:2d:d4:e3:5a:46:b0:56:79:8d:
                    a0:e9:19:a3:9d:98:46:56:96:fd:9c:a7:46:c0:e0:
                    23:30:57:84:e4:9f:e2:74:65:b7:89:f6:16:96:d9:
                    e5:4c:3a:c5:cc:15:f5:b5:7b:91:b5:eb:87:19:f9:
                    03:a7:3d:ce:d2:20:af:e7:f6:31:47:58:ec:b6:cc:
                    c3:8d:14:bf:5b:58:67:9c:51:0a:40:ec:ef:8d:ec:
                    3b:7f:f0:19:01:01:95:47:7b:fa:8f:e3:a7:d0:77:
                    26:08:d5:8c:f9:59:6b:5c:22:b9:c6:f3:4e:c8:33:
                    fe:cd:84:5a:19:8e:65:a9:85:da:a7:75:c8:53:36:
                    4b:05:13:df:ad:45:bb:73:9e:68:24:b2:ab:41:ed:
                    12:22:19:cf:1c:bb:b8:46:c6:65:fb:8e:d2:fa:8d:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5C:D8:00:49:CC:35:BC:F2:5F:E5:AD:04:8A:FB:93:AA:B8:26:09
            X509v3 Authority Key Identifier:
                keyid:AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:bd:0e:29:8b:92:6a:bd:b9:c8:0a:77:20:f8:6f:b0:69:
         a2:a4:3c:23:e5:74:87:28:4e:34:37:f7:20:12:64:1d:0f:1e:
         cb:bb:0d:aa:3d:82:bc:be:35:0a:d7:a8:61:45:be:d6:b1:c3:
         83:c5:54:90:2d:2b:ed:89:a1:28:73:a1:d1:51:8b:91:06:e7:
         cf:09:39:1b:2f:4c:f9:a7:77:60:a5:26:95:7d:4f:65:77:9a:
         f6:a8:71:89:45:a4:40:c1:e4:20:85:95:6e:56:68:8c:29:86:
         17:cc:b4:05:90:51:ea:a8:d7:ca:48:41:f3:f9:90:91:a9:ad:
         d6:72:3c:3e:04:87:e8:4a:99:9b:63:b7:c8:45:2f:43:8d:52:
         ae:2d:99:30:4d:49:cc:bf:af:41:22:01:62:de:91:72:0b:b5:
         e7:65:17:1f:17:3c:2f:e1:6d:e3:b2:83:fd:84:1d:99:eb:b9:
         ca:a4:07:f2:00:fe:fa:fe:2e:0d:0d:30:16:f7:d7:07:49:5c:
         e4:f8:7b:76:31:e2:5b:73:aa:cd:a7:4b:04:0d:58:6b:54:e4:
         56:ed:2e:31:cf:d0:07:c9:73:a6:c0:06:79:65:19:7f:e6:bc:
         a6:8c:88:60:74:4b:64:4b:d7:1b:13:ef:b7:59:6d:ad:4e:06:
         8e:41:37:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:10:46 2024 by rpki-client on console-fra.rpki-client.org