Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File:                     q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier:          2x7sgm0j/du6Rzm68n+tzxCRub2jkZnbD7Sc341BeDQ=
Subject key identifier:   AA:0C:87:6E:EF:65:D9:DD:20:8E:C3:96:0F:D1:4F:E5:08:75:EB:E4
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer:       /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial:       018F89A4D0232B3AE62467C5F2B6EF80A560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number:          11CC
Signing time:             Sat 18 May 2024 03:00:30 +0000
Manifest this update:     Sat 18 May 2024 03:00:30 +0000
Manifest next update:     Sun 19 May 2024 03:00:30 +0000
Files and hashes:         1: 1_sC_dFMZeLIllxzzCom8m3oC24.roa (hash: hHyEwXOx5apAecqLil1HW8G3SfPzzCRgg7SGbki0S9c=)
                          2: 3xK9VYzR7Qf_MPw8G-5ZmcUQh90.roa (hash: 1+5KIgdBDp0KcfrgcX31GjPnPlfrCGgRodvJ/c8jSHs=)
                          3: AQsEHnFCH5rVPWcKh2RBIVIA01Q.roa (hash: 4390srgu6UL/kkGnudRxQh09f3MbGXUhbfEY8FI2pjw=)
                          4: N1WRcAt2UyQZxeeAiDLzWQovy-M.roa (hash: dq22St/jwc2UCMwwTBuCZIUNw185Sa2XJUZ8JDQu5co=)
                          5: SBzbD2WFabtAM1fi2qbLZUYGYwM.roa (hash: 6XXTOI0aNFYc2ZtlJzm2yslzyJ9nnubFZ+1P8apGgHo=)
                          6: _DNu35fOuTEpmLweKNXRez9gVzo.roa (hash: G2HzbBiq0H79ScFjZ8OiL/jcb9g85Hu35rpS9IJRy9Q=)
                          7: asMeuVAxfFSHsGBRv1USFv9iKo4.roa (hash: 3sUJ1OnR6MPAPiN5/s3pm37f1wpveBiHrBAOXjYIMiE=)
                          8: dSpfeapexZk0yB_oYPhbO4F7_Zs.roa (hash: jRymuhxbuHiHZAfONTp0X0gyIyknRvFmPqb/Pa09Keo=)
                          9: i_R5NFdbWeknkgZLuOms5ToxkZI.roa (hash: X7NAFthP8vpxsvPjpduIMTMaJ1JJp7ldwbSJtILzLEs=)
                          10: isGjn6X8-nPwbIuk48gKuialh5Y.roa (hash: SLWkC6stP0gqahDyhCTwnSZRJj4mMC42nKqAFv14EzQ=)
                          11: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: GKMFI7PcK8USsFXCiaIrJ4NEkO/OqDbAJMjLxgd1yGM=)
                          12: tZYGOeJ7aJqvKIYPUrcLi4O_Kcw.roa (hash: KvHR5P0hooFnukInlmlb6NP0DWOtAGeHIbmSGVZ8HOc=)
                          13: zj094OV_qBK0jWBO9tCRsVpw3kk.roa (hash: LHQcst11InOMumWMXpg6McjHu4Bnz6c/YOOxyo4X8KE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 23:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:a4:d0:23:2b:3a:e6:24:67:c5:f2:b6:ef:80:a5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
        Validity
            Not Before: May 18 03:00:30 2024 GMT
            Not After : May 19 03:00:30 2024 GMT
        Subject: CN=aa0c876eef65d9dd208ec3960fd14fe50875ebe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:ff:e8:47:fc:99:72:eb:18:18:e4:48:cd:
                    8c:40:b1:18:d2:3a:23:ed:03:60:3e:e9:28:22:e3:
                    c8:3c:e2:e9:61:d0:c0:ef:0d:76:38:65:d0:b6:43:
                    9c:b3:59:f4:fc:6d:82:33:b2:fe:14:1f:aa:12:e6:
                    0f:93:8b:f2:12:36:6f:8d:1f:cb:d1:12:5c:f9:6a:
                    11:fb:a0:a5:9d:d5:52:50:4a:e8:62:06:69:33:b3:
                    83:66:55:15:25:eb:41:60:4c:15:1e:00:f5:d7:60:
                    e7:e7:66:94:fe:69:70:62:b1:12:3f:f4:24:c6:2e:
                    04:17:f8:b9:6c:3c:77:89:41:cc:12:da:13:08:81:
                    be:a5:44:ff:fd:3b:78:e9:04:09:02:a7:99:31:70:
                    29:e9:46:3b:ab:b7:34:0d:4a:88:a7:af:73:2f:9a:
                    5b:00:f0:c5:4f:cb:c3:7c:59:9c:a2:8c:f3:94:6c:
                    a4:b4:92:0c:95:e5:b2:d9:6c:79:b1:42:aa:ae:5e:
                    c1:3c:c6:92:43:d7:9d:59:26:70:54:fb:b5:41:ec:
                    06:f8:48:fd:be:f1:91:f9:15:94:a9:51:6f:1e:8c:
                    72:73:e7:b5:90:e7:09:f5:bf:eb:5a:30:37:9c:ea:
                    16:20:85:4a:1b:f3:c4:9f:d7:cb:36:0b:7d:a7:1d:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0C:87:6E:EF:65:D9:DD:20:8E:C3:96:0F:D1:4F:E5:08:75:EB:E4
            X509v3 Authority Key Identifier:
                keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:54:56:e7:de:cd:43:89:19:bb:d2:66:2c:1b:10:db:ec:73:
         aa:a6:83:84:34:bf:ab:75:90:0f:04:aa:13:83:ab:bf:80:47:
         2e:74:3a:a7:09:87:59:95:31:93:07:f8:96:de:c7:13:6f:76:
         48:13:2a:36:47:94:3a:9d:73:62:82:1c:0e:f1:43:61:e6:a3:
         66:6c:60:52:85:d6:7a:90:1a:7c:6b:a9:07:6c:22:d4:a9:0f:
         4e:f9:2b:da:58:16:f8:af:c9:25:a9:2e:34:28:19:6a:0e:e4:
         6b:29:0a:00:92:9e:29:66:ed:85:37:52:46:73:e3:a6:fa:84:
         d3:c0:47:92:8b:b3:2e:ce:b4:df:5d:04:bb:46:36:85:09:8f:
         5b:e1:85:ed:cc:1a:2b:24:f3:87:89:84:61:e3:f5:92:2a:d9:
         c9:68:c0:fc:c5:2e:70:27:26:c6:ca:c6:30:25:7d:02:31:57:
         c1:a0:c1:50:fc:97:fc:48:92:e5:98:c9:5f:ce:e8:3e:e7:f0:
         0f:73:df:56:09:52:ef:d1:ed:60:a3:08:93:2f:6d:8d:26:5a:
         e2:ec:45:ad:cf:2a:c0:56:ea:51:95:23:58:e9:d9:7b:0d:e0:
         85:15:85:27:a8:c3:5c:27:31:1b:81:6c:3f:98:f4:dd:74:48:
         a0:00:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:09:35 2024 by rpki-client on console-ams.rpki-client.org