Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
File:                     Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json)
Hash identifier:          hblKDUCTBI+U0PER8PMsa51gXHtMhP92g4RM8K1HDGQ=
Subject key identifier:   68:E7:A6:4A:7A:7A:7A:04:A7:F1:7B:EB:81:3A:33:32:8A:78:7E:94
Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
Certificate issuer:       /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Certificate serial:       01901E58B0D33CCAFE0A47FD814B07CD5276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
Manifest number:          0A9A
Signing time:             Sun 16 Jun 2024 00:00:47 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:47 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:47 +0000
Files and hashes:         1: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: ZE/+H4KbAAn6xqI/BmAgNTaAEbKUQooegHdFCEvC6Ug=)
                          2: cXArmWJx85DwgTOCKg8vaPMl7Zw.roa (hash: BopIMIHneoXp8TkKAtWBGEfByhv+bRrd31SKv4RB1ZY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:b0:d3:3c:ca:fe:0a:47:fd:81:4b:07:cd:52:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
        Validity
            Not Before: Jun 16 00:00:47 2024 GMT
            Not After : Jun 17 00:00:47 2024 GMT
        Subject: CN=68e7a64a7a7a7a04a7f17beb813a33328a787e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:e6:e0:04:3b:35:b1:34:c9:54:d8:9e:77:
                    44:db:e5:6d:ee:36:8c:32:e0:c0:0b:03:34:3d:bd:
                    da:cb:c7:db:11:2c:16:70:52:05:8e:cb:68:c0:a5:
                    9b:70:ab:e9:64:57:ec:f2:b5:0e:f8:a0:28:75:09:
                    72:16:b8:97:30:ef:eb:d5:de:cb:27:5d:4e:b7:8d:
                    c3:1a:21:3c:81:ee:ea:56:1f:3e:cf:7a:1b:22:8c:
                    7c:cb:30:18:ba:b3:e2:15:8e:42:a6:9c:55:8e:93:
                    f4:8e:87:12:5b:de:62:7a:31:1e:5f:f6:e3:98:5f:
                    e5:29:05:25:94:58:76:0b:49:b8:c4:e8:93:31:d6:
                    4f:2c:3c:67:85:ad:52:71:9e:b2:da:42:2e:b8:97:
                    41:15:21:b1:57:dd:04:c7:37:9e:25:eb:df:a8:55:
                    5a:d5:81:54:43:ff:43:6a:e6:65:b5:f3:40:ca:16:
                    59:26:de:bf:97:8a:c9:b7:ae:f7:ec:8d:00:53:21:
                    e0:db:cd:f7:b1:45:f3:9f:86:b2:75:86:8f:90:5f:
                    f0:e6:25:a6:60:a3:03:c9:77:c9:b0:7d:dc:97:f1:
                    03:35:5e:e1:37:59:ca:fa:0c:c7:0d:d6:25:bf:94:
                    aa:2e:04:a2:dc:0f:15:7b:39:21:ba:de:0e:f9:f9:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E7:A6:4A:7A:7A:7A:04:A7:F1:7B:EB:81:3A:33:32:8A:78:7E:94
            X509v3 Authority Key Identifier:
                keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:12:80:37:e2:18:53:45:bc:03:3f:dd:5a:a5:aa:8b:29:27:
         10:7b:f1:d5:80:43:2e:b4:55:51:53:89:4e:f1:1e:59:7a:77:
         ed:2b:c8:00:3e:6f:de:08:32:d3:c6:f5:dc:c5:b2:65:95:1a:
         4e:de:a1:64:0a:0f:28:16:05:e7:10:5b:d5:48:e2:2b:8c:c9:
         f6:77:db:ee:2b:f9:9a:c6:86:cd:c4:eb:ce:a3:0f:5b:a9:f7:
         d4:3d:35:48:a2:71:61:bf:01:1b:a6:9f:e1:d6:fb:2e:c3:02:
         b3:61:9b:b0:56:b8:56:af:ca:f0:46:32:89:61:5d:58:06:8c:
         fa:d2:12:7c:a2:57:cc:14:a4:e8:ea:e6:35:fd:75:fe:13:9c:
         d5:88:e2:d5:10:7a:92:be:64:c0:ec:07:a8:3c:f2:77:1a:f1:
         c0:5d:fe:05:b3:96:13:74:82:6e:85:2a:c3:a7:a4:1d:dc:f5:
         7d:e5:25:5b:23:f2:3c:41:3f:96:90:ef:14:b6:68:01:7d:90:
         4b:13:89:ff:b5:8e:0f:73:85:e4:14:ec:a0:69:d3:c6:e3:01:
         6d:9c:b8:08:a0:52:50:ce:2d:86:6b:e8:a3:c0:12:58:95:55:
         19:ab:57:cb:96:c0:41:68:0f:d5:35:e7:a6:a8:72:67:a3:84:
         8f:b7:3a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:27 2024 by rpki-client on console-ams.rpki-client.org