Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
File:                     qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json)
Hash identifier:          UnrWIO210xus1CsxBdqhFsGyXSuJhdPmfpY3L3By+U0=
Subject key identifier:   38:1A:D7:CC:D3:CC:22:E1:D2:05:EF:15:9E:9C:73:91:4C:54:1D:D7
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Certificate issuer:       /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial:       0190351787976C72AE086A468B88C03F45AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
Manifest number:          04AB
Signing time:             Thu 20 Jun 2024 10:00:52 +0000
Manifest this update:     Thu 20 Jun 2024 10:00:52 +0000
Manifest next update:     Fri 21 Jun 2024 10:00:52 +0000
Files and hashes:         1: HhawQSpCA1Qu6lmBsKMxsEmab30.roa (hash: I08bPcEUFSnzt9C/+8keU57kDAZLLlmDNMI0zvaFHGo=)
                          2: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: juzWpEJ+3w8gLID9gJzVKZHrVxrmaXBKwn75dwBB4gM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:17:87:97:6c:72:ae:08:6a:46:8b:88:c0:3f:45:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
        Validity
            Not Before: Jun 20 10:00:52 2024 GMT
            Not After : Jun 21 10:00:52 2024 GMT
        Subject: CN=381ad7ccd3cc22e1d205ef159e9c73914c541dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:4b:9b:14:e5:55:f0:e5:b8:12:57:b3:c7:
                    1f:f3:2e:9a:a5:df:69:01:19:5e:af:01:ac:32:df:
                    f3:f8:bd:3f:df:31:b7:b8:9b:7a:54:eb:aa:f8:27:
                    09:4e:4c:fd:2f:15:8e:b4:c3:47:5e:53:c4:31:14:
                    86:f4:be:2d:45:0a:c1:67:a4:2f:d2:54:b7:e6:07:
                    7b:5e:7b:d4:a6:71:b8:00:4e:46:5b:ae:fb:67:07:
                    28:96:b9:47:91:59:97:02:3d:6e:e9:0d:90:e8:0d:
                    56:34:db:16:02:3d:34:5e:8a:cd:3e:5f:2f:95:e4:
                    cd:b1:5a:49:7f:63:fa:74:ef:ce:79:da:ed:61:ff:
                    c4:35:7b:e0:37:22:c2:0a:39:83:a6:4e:03:10:d4:
                    10:26:ad:75:3b:1a:b5:e9:62:a3:ed:d9:54:f1:d8:
                    22:f9:69:dc:b6:d4:6f:2e:37:f9:0e:40:a6:56:6d:
                    76:e6:8e:ed:23:39:03:8d:ae:2c:88:bb:3c:e1:d4:
                    09:69:05:2b:16:a1:99:8d:18:6d:29:8c:fe:22:ce:
                    80:e2:15:55:d9:ea:f4:53:9c:42:28:93:86:fb:27:
                    5b:78:d8:98:3d:38:2a:0b:07:7e:98:b4:59:23:1f:
                    6a:b4:53:32:0c:a5:d8:26:a1:46:62:9b:dc:76:81:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:D7:CC:D3:CC:22:E1:D2:05:EF:15:9E:9C:73:91:4C:54:1D:D7
            X509v3 Authority Key Identifier:
                keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:b8:c2:f3:da:30:ac:91:16:16:1e:7b:46:7e:b9:96:04:
         8c:a4:aa:bc:d7:62:9a:db:48:f5:2a:b5:f4:54:06:d8:98:2b:
         5a:72:dc:8a:0b:5a:40:07:aa:f3:f8:f3:1d:ed:cb:68:18:19:
         d9:28:e3:a1:2d:b5:6b:12:41:33:10:71:7a:9a:e6:86:b6:7a:
         52:e2:33:74:aa:f6:1a:7a:96:8c:8e:8f:dc:96:3c:09:0b:1a:
         8a:fb:9f:02:90:77:09:ee:97:85:f3:53:2f:6b:14:f5:01:17:
         d3:77:c2:c7:c0:60:a0:2a:58:ce:9a:55:00:06:46:89:67:a6:
         28:e7:6f:3d:80:c9:b3:83:2d:d4:ec:5d:a0:af:7a:cf:03:94:
         29:03:c1:6d:df:83:26:7a:5d:26:dd:76:aa:a1:e9:2b:1a:3e:
         71:c1:b3:24:e6:f8:a7:7b:e9:49:bb:8a:8e:46:53:59:c2:62:
         62:3d:32:dd:d3:f7:08:3d:b7:65:6d:92:65:b4:b1:c4:30:06:
         a7:b9:4e:08:fd:92:e0:0a:7c:64:bf:77:c6:23:da:55:ab:d4:
         17:b3:44:53:21:4f:92:80:8b:aa:41:f7:74:84:fd:53:52:4f:
         2b:15:b2:42:44:67:be:56:2c:a6:c0:ed:c2:25:63:a3:62:fc:
         57:04:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:21:59 2024 by rpki-client on console-fra.rpki-client.org