Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
File:                     qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json)
Hash identifier:          ewLmwh0f5FW+WO2WTh6YuZ94VfdqE7b5mFUMhE+3vZI=
Subject key identifier:   23:76:20:3E:CA:A2:07:57:33:7C:61:B2:C5:F4:C3:9D:90:53:BB:E5
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Certificate issuer:       /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial:       01901EC682C5809DC07C0479357227B18D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
Manifest number:          11D4
Signing time:             Sun 16 Jun 2024 02:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:44 +0000
Files and hashes:         1: dN5jQ6sPWP3VmiRUUrYoUtaH6rk.roa (hash: jjGIiUWBfB5PmAG+WExXQD+dpwZ2U1b8mPZ+rxcbayo=)
                          2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: R3ThDBKB6SLl/jptb6OQjeA5ShEK5G9d3xPJ8cTfo7M=)
                          3: u07v9GMDs0CG-iOGiBTleE6O6lU.roa (hash: CU6QwiXvddT1wmqVjOFE6KSo83KesS03xmXq97PNHEI=)
                          4: wV2hMqn8--wHpBEbgaRSZAS6VEw.roa (hash: NE7dVcimL4Aoaoq8ftpQKtBVb7Y7IQeKfPD0Yypog2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:82:c5:80:9d:c0:7c:04:79:35:72:27:b1:8d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
        Validity
            Not Before: Jun 16 02:00:44 2024 GMT
            Not After : Jun 17 02:00:44 2024 GMT
        Subject: CN=2376203ecaa20757337c61b2c5f4c39d9053bbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:c7:bf:43:50:10:c3:ae:c6:dc:d8:ee:b9:
                    ca:df:aa:5d:fb:00:e1:65:4f:3f:4c:cd:db:b6:47:
                    3a:cd:59:13:cb:7c:d7:4e:16:2b:0e:ef:b3:df:35:
                    eb:73:fa:e0:90:12:21:b7:3a:7b:df:53:55:bf:19:
                    09:cf:e7:43:21:5b:19:61:48:4e:f6:74:72:58:3d:
                    96:f7:2f:79:30:71:d4:90:28:20:e2:23:b0:28:a8:
                    9c:63:9e:d9:b0:92:f1:5f:1c:b3:69:6d:ac:20:a7:
                    7a:fd:bc:a1:a6:75:44:06:fa:72:09:bc:bb:4c:96:
                    de:7b:57:a7:f4:fc:da:a0:a0:97:6c:76:ad:3e:08:
                    59:71:71:bc:c6:0c:b6:59:37:3f:85:a2:89:6b:87:
                    11:d7:f0:7e:80:39:4d:3a:ea:67:cc:4d:3b:ab:f4:
                    96:b5:f2:49:1f:5d:b4:10:6b:8e:6e:ab:10:ae:a8:
                    cd:6e:2f:8e:c5:86:e6:c5:28:6e:b9:b9:61:ba:cc:
                    c1:9d:b6:92:29:09:a7:e2:18:e6:fd:d5:98:0e:83:
                    be:3b:fa:5b:17:3e:a2:b5:f1:e1:8a:c8:77:26:c6:
                    d2:82:04:28:43:8e:39:88:9f:6b:22:c6:35:05:4b:
                    6b:63:ed:28:f9:45:a5:36:31:d9:8e:6e:22:2b:1a:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:76:20:3E:CA:A2:07:57:33:7C:61:B2:C5:F4:C3:9D:90:53:BB:E5
            X509v3 Authority Key Identifier:
                keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:36:e5:4e:98:6e:e9:73:6c:e6:3f:50:37:36:f1:c2:e8:b0:
         aa:89:06:22:b8:e8:ed:bd:41:74:f6:27:2a:14:80:df:86:7c:
         a0:b3:38:e2:85:d6:91:ff:6b:09:23:50:91:a7:22:5f:79:cf:
         28:da:b9:87:ab:ea:78:7a:da:83:1e:68:fb:45:c3:10:46:e1:
         f2:fc:d4:64:ca:29:c7:f7:6e:bd:01:db:2a:25:4f:f0:8c:06:
         1f:58:30:bb:c4:6c:ae:4a:69:63:19:07:31:ff:62:91:8b:f2:
         aa:20:cf:3b:95:d7:08:2f:e9:37:53:4b:33:93:0c:1f:a6:a3:
         28:db:9f:16:09:20:4a:e3:1e:ab:cf:35:a3:a0:cb:f9:e9:eb:
         02:1a:2a:e1:83:0c:1a:93:84:ba:c7:82:b2:4b:9b:96:e0:c5:
         f5:01:e1:bc:98:aa:86:cb:61:ee:50:1a:0c:cf:83:2a:e0:39:
         8a:d1:13:60:fe:6a:8c:09:dd:e4:1c:66:17:d1:17:7e:c3:54:
         3d:dc:89:40:3b:50:7d:b9:b0:17:ff:ef:4b:23:48:03:6e:b7:
         80:3f:cd:53:4b:72:3b:49:a2:4b:bc:92:aa:e1:bb:54:8d:a5:
         9e:3e:ff:c1:ae:b4:8f:45:b9:e3:1a:d9:0d:d1:32:6d:83:77:
         c5:25:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:46 2024 by rpki-client on console-ams.rpki-client.org