Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File:                     qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier:          cTN9ClfjJK+o1jZwgW+rXpozbwbH7vSjjDhXuUo4V3s=
Subject key identifier:   EE:F2:F6:56:65:E1:E0:7B:CE:88:A7:BD:47:C9:04:EF:C9:39:32:30
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer:       /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial:       0190441C8456145C8CA89A6D515738935D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number:          0D5C
Signing time:             Sun 23 Jun 2024 08:00:37 +0000
Manifest this update:     Sun 23 Jun 2024 08:00:37 +0000
Manifest next update:     Mon 24 Jun 2024 08:00:37 +0000
Files and hashes:         1: 1tt1t2H9FWBttBdPE9kv1Kzm2AM.roa (hash: 3APSN9UuoytedEeOIFcqYwly4bgx3SKAU1Lk5AoPM+Y=)
                          2: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: Ty3+FYyPy5dhftP244y2SVZFRp60wTlfdFn19WjAUOw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:1c:84:56:14:5c:8c:a8:9a:6d:51:57:38:93:5d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
        Validity
            Not Before: Jun 23 08:00:37 2024 GMT
            Not After : Jun 24 08:00:37 2024 GMT
        Subject: CN=eef2f65665e1e07bce88a7bd47c904efc9393230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4f:e9:39:eb:5a:75:af:1c:b0:db:8b:b8:0b:
                    f5:f6:a8:b4:f5:31:c1:a8:ad:93:35:eb:bf:98:9c:
                    ae:e3:76:85:a1:65:45:16:ed:f4:2f:1e:94:11:c7:
                    b0:d4:0d:2c:85:53:f5:7c:85:eb:d5:4f:ca:4d:38:
                    36:81:19:63:09:f3:9b:59:f4:3c:06:33:d2:3b:49:
                    80:a3:04:55:4a:33:64:ed:45:a4:85:ad:47:78:91:
                    29:27:68:b3:65:39:31:87:17:64:b1:6a:d4:92:3a:
                    bb:fd:44:78:9b:3b:de:75:b0:44:fc:75:92:85:fc:
                    0a:87:2c:bb:8f:c9:a3:20:c6:e1:1c:8e:43:af:03:
                    3f:8c:94:66:f5:e9:a6:25:a7:47:26:20:e4:68:77:
                    8b:fa:34:a7:0b:3e:03:1a:3e:56:d9:cc:9d:86:e5:
                    82:71:c7:59:82:98:eb:fd:2f:d3:ba:be:a7:00:72:
                    c6:43:19:76:11:4f:aa:d0:c1:f0:2b:cd:6b:38:38:
                    86:98:1d:22:1b:aa:49:20:66:84:2f:0c:42:a7:e4:
                    b0:48:49:e5:2f:24:40:b0:40:9b:98:b6:6a:1a:ce:
                    53:78:cd:38:a1:6c:aa:db:fa:0c:49:09:58:83:b9:
                    fc:cb:45:d4:5f:a6:98:76:1d:97:23:b5:85:20:98:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F2:F6:56:65:E1:E0:7B:CE:88:A7:BD:47:C9:04:EF:C9:39:32:30
            X509v3 Authority Key Identifier:
                keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:66:51:5a:b6:24:70:4d:22:20:1e:26:8e:32:d8:63:fa:
         b6:4d:cf:de:48:db:9c:26:74:94:7b:dd:59:9c:12:f8:3e:15:
         17:dd:9c:23:6b:af:f6:b4:b6:7b:37:49:ac:ac:d1:26:fe:c3:
         59:68:fb:79:c4:a7:1f:21:56:c5:00:b1:cd:33:ea:09:14:4f:
         df:92:ea:be:b3:e2:b5:e3:f0:98:24:a6:a7:4e:39:46:0f:00:
         ac:24:66:ef:70:f3:03:52:4e:c2:40:ce:66:f1:e0:4d:2c:ca:
         8d:47:98:da:fc:79:47:ba:f7:e9:f7:99:47:1f:5f:cd:77:4f:
         2c:f5:29:41:2b:13:10:57:b2:75:45:73:6b:9b:9c:26:fe:f5:
         ae:4e:67:09:fb:41:c0:c1:7a:b4:a9:3c:96:d4:e9:be:ec:f0:
         51:c9:51:06:bc:74:89:5f:a2:77:97:53:d4:61:fa:13:fb:dd:
         89:bc:76:6b:2c:3b:7f:fd:92:48:05:b1:a3:59:3b:22:7b:6a:
         28:76:ec:1f:a3:f5:66:7b:b8:d4:88:5a:2a:ac:f3:2c:58:0d:
         ce:38:cf:cc:95:f3:07:88:75:8e:c1:71:29:14:c0:92:0f:4c:
         fc:2d:94:35:05:a2:38:ea:ee:5f:9b:d5:54:e1:f8:0f:c8:71:
         37:61:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:51:14 2024 by rpki-client on console-fra.rpki-client.org