Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
File:                     qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft (raw, json)
Hash identifier:          o45Mva9QXAcaGc80Fj35PJ6cc+WzgBb7IB9rivgwwkQ=
Subject key identifier:   D6:81:77:2B:2C:1F:57:68:FE:02:3D:99:29:C8:19:E6:DD:C3:62:DD
Authority key identifier: A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5
Certificate issuer:       /CN=a8707679223c883fed7f7c79ff2f293bff8730b5
Certificate serial:       01901CD887DA3590969963CEFA6B36D0D557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
Manifest number:          0358
Signing time:             Sat 15 Jun 2024 17:01:10 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:10 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:10 +0000
Files and hashes:         1: Vyik9yO_Ztfe-vZv_ebuJaC0KTU.roa (hash: c7qROSs7osAwaqMA55Sklh3tzmKYuee+SA6aTcGSDTE=)
                          2: qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl (hash: sIKQnaZSA7LlA0MW/KFY3gDe18wlJiNnppRhsuVxqJ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:87:da:35:90:96:99:63:ce:fa:6b:36:d0:d5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8707679223c883fed7f7c79ff2f293bff8730b5
        Validity
            Not Before: Jun 15 17:01:10 2024 GMT
            Not After : Jun 16 17:01:10 2024 GMT
        Subject: CN=d681772b2c1f5768fe023d9929c819e6ddc362dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:7d:6c:68:e2:73:47:8c:25:7b:3a:07:6a:
                    45:af:88:f3:86:87:87:30:94:cc:1b:08:d6:d1:f9:
                    d3:7f:45:66:e0:eb:5b:3c:8f:72:93:33:94:9e:f4:
                    ff:c4:69:d7:a8:84:b4:d1:a8:5a:f2:51:8f:6f:1d:
                    e2:cf:46:69:00:1e:48:c7:0a:15:c0:d5:e5:3e:04:
                    bb:ab:f0:55:65:bb:82:b7:00:ad:e9:07:7f:8b:a9:
                    bd:e5:62:2b:1a:98:6e:89:96:e9:3d:de:d1:a4:1e:
                    98:18:59:be:16:3d:01:d5:88:5c:72:c3:73:7e:2b:
                    25:98:5d:2c:c5:74:67:26:41:4e:1e:88:0f:73:a0:
                    7e:e9:2f:4c:b0:dc:47:69:c6:88:43:1f:8c:be:68:
                    f8:36:e5:a9:3a:b2:4f:04:90:c0:00:b4:e7:02:de:
                    8b:fa:31:f6:38:bc:83:23:15:d3:b0:ef:8f:9b:ea:
                    64:25:dd:2e:5b:bc:7a:7e:58:0c:72:af:b9:08:43:
                    39:c3:1b:e7:d6:7b:b3:df:3d:08:a0:c6:3a:65:85:
                    0f:bc:12:bd:4a:1b:7c:c9:6e:a5:0d:f1:f7:e6:f4:
                    63:a7:c3:65:fc:92:15:c1:2a:22:05:31:23:94:c5:
                    2f:cb:2a:21:35:5b:94:b4:aa:65:6b:31:9d:9b:60:
                    e2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:81:77:2B:2C:1F:57:68:FE:02:3D:99:29:C8:19:E6:DD:C3:62:DD
            X509v3 Authority Key Identifier:
                keyid:A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:03:c2:c9:ff:03:92:85:07:3c:bd:ff:5f:58:95:ed:97:
         cd:74:b7:88:2f:3e:26:3d:21:8f:84:d2:e4:39:86:78:da:42:
         87:6e:1b:d9:7d:31:8f:8d:6f:74:a6:2f:19:8d:e8:2d:a1:0d:
         ea:9d:6c:19:4b:e7:0f:35:80:77:49:a1:e4:9a:c6:23:d3:71:
         39:62:6d:54:2c:94:74:d7:be:65:38:d3:00:a9:bd:6f:4e:40:
         9a:f4:76:79:66:7e:e4:86:db:c3:fe:82:53:3f:9f:6c:fe:3c:
         4e:28:14:89:d1:df:7b:c2:80:84:b7:29:a1:24:8c:6d:c6:e2:
         86:ba:04:d9:7c:a9:96:a7:9b:20:18:8c:db:6e:aa:aa:78:72:
         9a:0a:21:94:85:d3:2e:d3:b0:fd:58:7e:7f:76:04:ed:95:17:
         46:06:c0:0c:74:d8:0f:aa:2f:8d:af:65:0d:d5:ca:5a:19:b8:
         10:1b:56:e8:fb:72:98:94:ec:92:80:d4:55:05:07:d3:f6:2e:
         a9:c7:20:8e:6b:f1:f2:7a:a9:e4:de:e7:f6:61:be:5a:86:fc:
         b8:f3:5d:25:4b:f2:b7:0e:41:2c:1c:00:25:b6:69:ef:5e:1c:
         82:03:c6:45:4e:86:e1:e1:75:32:05:de:d6:0b:a1:78:fd:6b:
         22:f9:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:05:52 2024 by rpki-client on console-fra.rpki-client.org