Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File:                     qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier:          etr4ioICk0tDl4EHoG6FSP8SQPW/KHMpuRrF0bgcKqQ=
Subject key identifier:   03:B9:D7:C0:23:B3:FA:60:CB:9E:5A:D4:99:FA:F0:18:FB:BC:E5:29
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer:       /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial:       01901DECF35B8F0883BE1DF513DFA8322AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:06 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:06 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:06 +0000
Files and hashes:         1: Yf5GxfJvDJ3ocf4445R7kQ9ueIY.roa (hash: m60ufR7EtBjX9240ETpPUgzIQIloqh0A1+8Mf0c8Kcs=)
                          2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: oEUDj79uTDOnRzVFT60+9O4sxawxXBqDF5dqI22cfoU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:f3:5b:8f:08:83:be:1d:f5:13:df:a8:32:2a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
        Validity
            Not Before: Jun 15 22:03:06 2024 GMT
            Not After : Jun 16 22:03:06 2024 GMT
        Subject: CN=03b9d7c023b3fa60cb9e5ad499faf018fbbce529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6f:da:c8:c9:84:ee:0c:7a:1d:90:e2:b2:20:
                    2d:f8:f6:e1:1e:80:0e:31:16:c2:73:15:e6:ca:40:
                    32:1b:cb:46:3e:90:09:c6:ab:96:d6:bf:9b:c5:45:
                    98:3f:c5:6a:5d:49:56:a8:3d:2f:10:ee:ae:e5:5e:
                    2f:c3:fd:70:8b:ba:5b:b8:99:a1:02:56:77:ea:14:
                    78:e3:d5:9f:7f:42:21:c5:b0:c6:9e:d6:0d:ab:47:
                    25:11:2c:c1:ee:64:e1:1a:cd:08:2a:99:e9:42:a4:
                    3b:14:36:3e:98:56:7f:fd:ea:92:9b:67:00:e3:26:
                    94:15:d6:13:d5:0f:ed:4a:4e:10:d0:a3:03:bc:3a:
                    19:0b:ee:6d:a2:85:eb:9f:9f:60:11:d5:7d:17:73:
                    89:73:ac:0a:d8:3a:5f:32:5b:42:17:5f:0f:49:ac:
                    93:c6:4e:20:65:fd:13:a7:4f:df:0e:a2:08:0e:d7:
                    85:4e:16:a4:2a:25:ac:32:bf:c4:51:fe:23:60:ba:
                    a5:82:9f:7c:8e:dd:48:4b:7c:50:81:78:af:5c:64:
                    4a:97:69:8a:68:f6:50:d5:3a:6c:3b:64:9c:18:f6:
                    50:91:3d:9d:e7:69:7a:7f:b2:7d:fa:1e:0a:47:cf:
                    a5:ac:b4:74:a1:65:a1:75:b1:4e:b1:4c:78:d7:46:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:D7:C0:23:B3:FA:60:CB:9E:5A:D4:99:FA:F0:18:FB:BC:E5:29
            X509v3 Authority Key Identifier:
                keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:5d:2b:eb:bd:62:ce:cc:13:ef:87:cd:61:45:4a:59:1f:4f:
         a2:35:9e:69:83:4c:d6:34:cb:e4:2b:a2:8f:8b:b4:2e:0a:8e:
         a1:16:14:a4:1d:f7:a2:f0:54:ee:b1:95:fe:c8:90:f2:58:a0:
         0f:db:9c:3d:f8:b9:ab:74:42:5c:d2:47:0f:dd:e6:bc:15:fc:
         22:fc:09:f5:70:e1:c9:9f:26:a3:91:8d:29:0e:9a:06:19:50:
         3e:5e:4f:ad:14:0a:89:93:e3:7f:fc:19:f8:c2:3a:5c:6c:b1:
         e1:93:a7:3f:6c:04:c7:9b:2d:cb:15:c9:66:4f:85:58:69:b3:
         da:3b:6f:6b:b8:01:d0:39:9f:52:80:ff:e0:c3:b2:f4:a8:dc:
         cd:07:1a:97:84:35:f6:13:fc:7b:f0:58:3c:22:03:fd:c5:b2:
         a7:9a:a1:11:5b:03:4e:24:c3:21:52:95:14:60:f0:f8:eb:49:
         6e:df:c3:b3:96:ef:c4:82:9e:3f:1d:0e:2b:58:63:9f:3f:65:
         74:6b:60:d0:1c:34:b9:d7:6d:36:f6:7f:03:18:47:6d:5d:73:
         e2:5e:6a:23:a2:d8:dd:a8:37:42:e7:03:9d:08:e8:c9:17:cf:
         b8:e6:0d:61:1a:b2:d5:2d:28:a3:cf:0d:1e:e9:08:fc:b9:b8:
         ca:75:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:40 2024 by rpki-client on console-fra.rpki-client.org