Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
File:                     qPuDH1vWwMILjgm-URwhvn3F3ro.mft (raw, json)
Hash identifier:          QItYrpp5gOigYpbVzUCnhio6FpQzGxPGUgfe/geJ070=
Subject key identifier:   C4:A8:8A:D4:16:CF:A2:AB:15:5F:6E:56:CB:62:ED:0C:9F:7A:61:C5
Authority key identifier: A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA
Certificate issuer:       /CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
Certificate serial:       01901EC6786FF256885455B53EA4E5111B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
Manifest number:          01AA
Signing time:             Sun 16 Jun 2024 02:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:41 +0000
Files and hashes:         1: YUHdc9sOrd0KEVdRmLCPPgaAS0g.roa (hash: ik61WbcF9h0Av6aGCJHCsLXKZCppDl5mkGScVzoz01c=)
                          2: qPuDH1vWwMILjgm-URwhvn3F3ro.crl (hash: OSBan2kxa81Ccr/uhUI3+Vyp2GyiKJYesqayTR6vEPU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:78:6f:f2:56:88:54:55:b5:3e:a4:e5:11:1b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
        Validity
            Not Before: Jun 16 02:00:41 2024 GMT
            Not After : Jun 17 02:00:41 2024 GMT
        Subject: CN=c4a88ad416cfa2ab155f6e56cb62ed0c9f7a61c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:09:9e:8e:0f:a3:c1:1f:89:07:32:bb:4e:b1:
                    9e:ad:41:bb:32:51:45:cd:db:d1:db:d4:af:2e:41:
                    57:4a:91:2a:be:1f:97:d1:da:ad:21:33:6c:d5:ed:
                    c7:bc:c6:05:92:a9:ca:15:2e:ef:10:09:72:9e:3d:
                    c4:73:f6:cd:7d:0b:fd:dd:48:95:26:ab:a1:a4:64:
                    89:fe:cf:a7:1c:4a:f7:41:69:66:78:38:bf:58:ad:
                    38:cb:d9:e4:bf:23:b5:e9:b7:97:0d:94:e9:f0:b3:
                    c8:17:fb:77:e9:1f:95:29:41:7f:f8:65:47:99:43:
                    cd:84:4e:0b:3d:00:c3:01:2d:a3:ff:8a:e1:66:8e:
                    95:67:2d:72:f8:b6:0c:68:b5:21:ff:11:01:cf:d9:
                    de:af:83:3d:64:74:3e:5d:0b:f5:de:4c:3f:d4:8a:
                    37:60:a1:21:e9:61:34:d1:ef:b3:27:61:2b:fa:c9:
                    d0:ea:44:6c:38:9f:4d:68:4f:50:75:f2:fa:9d:d6:
                    c9:6f:09:c6:50:a4:14:8c:1c:d6:da:64:02:f6:77:
                    9c:1c:49:3f:b2:ae:67:f6:82:2a:ed:62:d2:ae:65:
                    e5:35:71:b8:48:13:89:3f:22:c5:94:64:1c:76:3c:
                    bf:56:6a:0a:c4:29:18:0d:4f:bd:a2:55:14:74:b8:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A8:8A:D4:16:CF:A2:AB:15:5F:6E:56:CB:62:ED:0C:9F:7A:61:C5
            X509v3 Authority Key Identifier:
                keyid:A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:35:b5:44:3d:e8:58:7c:40:b8:38:62:9b:e9:16:a1:e8:9e:
         95:a9:94:9e:31:b9:3c:0d:a1:8d:84:6b:d2:39:7b:98:dd:df:
         81:e4:40:16:d1:54:b6:d1:fa:90:18:70:e3:7d:f9:ec:3d:f7:
         0d:e3:0e:ee:46:de:c7:cd:9b:a5:46:0f:64:e3:63:d6:ed:98:
         3f:70:3f:a9:6d:0f:b0:b2:0e:41:a0:48:b7:e1:16:83:21:f9:
         cb:b8:7e:6f:b6:f7:62:4c:32:1c:48:43:54:83:43:5e:9d:23:
         ff:77:78:51:fd:b7:fe:29:91:30:da:11:f6:c0:9b:18:74:63:
         62:c5:03:91:f0:e3:0d:cd:57:1f:16:a3:7f:b9:1a:87:f8:10:
         fa:59:62:34:26:f7:48:30:d1:9d:6b:be:5e:c1:f5:f5:61:be:
         7d:c1:35:48:85:84:8c:c1:04:19:e8:0c:e1:56:ba:b9:67:dd:
         b1:92:fc:6e:f0:2c:3e:5b:15:02:8d:83:27:ca:4f:92:41:2f:
         b7:d3:c8:b9:d0:b6:55:9b:21:c3:15:bc:b1:21:51:d3:4c:39:
         ce:6d:47:fc:f2:74:09:8d:1b:83:ed:fa:92:95:d9:3d:42:38:
         0b:c4:60:be:2a:72:66:f8:a3:43:a1:e2:5f:77:1b:4a:21:38:
         3d:28:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:24 2024 by rpki-client on console-fra.rpki-client.org