Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
File:                     qmWvaX3x9s2vTLvWbePUO-2GnpA.mft (raw, json)
Hash identifier:          vkp+VSwbsTpkYRyc1HFN1deaybDLVvcdHqhB4ifGgLM=
Subject key identifier:   65:0A:59:55:7F:73:59:D9:74:7D:D8:6A:96:F4:27:38:FA:91:E1:25
Authority key identifier: AA:65:AF:69:7D:F1:F6:CD:AF:4C:BB:D6:6D:E3:D4:3B:ED:86:9E:90
Certificate issuer:       /CN=aa65af697df1f6cdaf4cbbd66de3d43bed869e90
Certificate serial:       01901EFDDDD7FD615E2D0EDAC8609037FC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
Manifest number:          07E2
Signing time:             Sun 16 Jun 2024 03:01:12 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:12 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:12 +0000
Files and hashes:         1: kMq9diBowv6nCvabulowQTpN1L8.roa (hash: uU1YDBJdxC8e3v7LbcibWSN88T8Vo0X1lN/gu8i/NO4=)
                          2: qmWvaX3x9s2vTLvWbePUO-2GnpA.crl (hash: tXQ3mtysoJSjqZgyYdWyS6DJuw4u01qEu3bnBR/xHWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:dd:d7:fd:61:5e:2d:0e:da:c8:60:90:37:fc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa65af697df1f6cdaf4cbbd66de3d43bed869e90
        Validity
            Not Before: Jun 16 03:01:12 2024 GMT
            Not After : Jun 17 03:01:12 2024 GMT
        Subject: CN=650a59557f7359d9747dd86a96f42738fa91e125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:95:d6:18:5a:9a:e4:47:57:b8:0d:c4:9a:
                    dd:9d:42:80:95:e2:46:ba:16:3f:44:30:72:aa:18:
                    5a:2e:f7:7b:47:06:cf:04:b8:a0:63:a6:c3:e6:86:
                    89:b4:99:dd:3c:7f:8e:33:97:ee:40:9b:f7:dd:1e:
                    0d:23:90:0c:cd:c8:b2:db:19:09:72:7b:6a:ea:c2:
                    1a:71:bb:cf:30:8c:c8:b4:e7:73:ca:5c:18:b6:24:
                    51:7a:d1:0b:a3:f2:e9:13:15:4b:4c:3b:44:e2:2a:
                    8e:85:43:0f:29:a2:a5:2b:f9:f0:50:d1:a1:2e:c8:
                    1e:f0:1c:56:aa:cf:1d:18:b8:97:46:4c:a4:cd:48:
                    e6:c9:e0:3e:ad:2f:08:fe:64:7a:47:dc:83:29:23:
                    77:7b:11:c2:ac:54:9a:7a:e5:e0:e9:1b:2d:39:5e:
                    9a:98:a9:5a:6a:08:43:17:28:0a:10:b4:4c:37:c2:
                    9c:d8:14:aa:02:a7:50:9d:63:0e:2f:31:93:b6:84:
                    22:fb:69:a8:bb:4d:cc:86:4a:31:05:3b:f4:81:f6:
                    f0:2c:18:9e:8d:8b:ba:ed:22:e0:70:19:20:ae:6b:
                    c9:a7:ca:c2:15:4a:1d:c3:aa:48:17:05:4c:1d:de:
                    10:07:5a:b8:c7:dc:c6:f4:9b:55:60:e1:ee:72:1e:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0A:59:55:7F:73:59:D9:74:7D:D8:6A:96:F4:27:38:FA:91:E1:25
            X509v3 Authority Key Identifier:
                keyid:AA:65:AF:69:7D:F1:F6:CD:AF:4C:BB:D6:6D:E3:D4:3B:ED:86:9E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:04:bd:e2:58:1f:65:41:05:6c:c3:a7:f6:c1:97:af:57:69:
         e6:3c:9a:b7:b4:83:4e:fe:31:17:b8:a5:35:41:27:7e:dd:87:
         28:f0:4e:8c:7f:0e:ac:ec:03:40:8d:70:4d:30:1e:3b:1d:bb:
         95:b7:30:73:f0:8e:86:11:bd:e9:7a:fe:4b:bc:6a:dd:1c:fc:
         5b:74:54:73:cf:bc:bc:ea:ec:31:76:b9:2c:43:84:01:fe:b1:
         4b:fa:a8:33:95:99:51:ed:b5:2e:bc:db:cf:d3:df:22:2b:29:
         a8:68:b9:a9:3c:af:31:60:57:20:85:2d:b9:69:b4:60:73:00:
         af:ee:82:4f:41:fb:79:cc:b9:02:ba:64:63:8e:0e:a6:cf:29:
         87:3c:c5:32:54:dd:f6:fd:0e:d4:90:37:bc:8b:4a:81:b3:1a:
         bc:64:d1:d4:0c:d5:8c:2d:66:6d:bb:71:0f:ce:e3:d5:80:83:
         b0:fa:4c:5a:2c:98:30:68:09:dc:83:c3:34:4a:4c:b5:11:89:
         f9:a5:7f:a6:3e:d5:cf:22:7a:ae:36:1c:f6:7f:0a:80:70:46:
         58:93:a8:10:c6:37:01:4e:6a:51:9b:f1:30:19:11:f9:f4:3c:
         59:03:d7:d2:9e:98:93:2c:95:fe:de:ef:b7:77:f3:5c:0d:40:
         2b:50:17:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:50:12 2024 by rpki-client on console-fra.rpki-client.org