Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File:                     QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier:          8B9KsXJL1vs+W4sCtoCLnuWrDR85dOcKT7bTly8X8Pw=
Subject key identifier:   90:5A:17:AA:F7:BF:29:61:DF:93:E0:FF:26:AC:3D:64:6C:33:49:5A
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer:       /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial:       01901D0F165FB90930FE4246DC2322D88F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number:          11CC
Signing time:             Sat 15 Jun 2024 18:00:46 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:46 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:46 +0000
Files and hashes:         1: 1-WPwpTGZzJ93rYEBC7FW1IzgvTk.roa (hash: fwcI4FjpDgzoA3g95Wp2FmqtoZBdwzNitbZj+TBBykc=)
                          2: IOMjdokz1YYnp8LzTUiSqwYWMeU.roa (hash: H3ZHoLmhdrJ/FLg2fkvOBTcsyIubEYv2crBlJwQ42QI=)
                          3: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: M+jUdskLzLvMsbHs+MBkuLNkwWS9RT6SP1CMT/MdjfE=)
                          4: qdCJzRn9h1AO0aPQq61UhhhuZoY.roa (hash: ZidyMEetsQkkLnPLT6tvfnQYmU3K06ODkcY8u5S11YE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:16:5f:b9:09:30:fe:42:46:dc:23:22:d8:8f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
        Validity
            Not Before: Jun 15 18:00:46 2024 GMT
            Not After : Jun 16 18:00:46 2024 GMT
        Subject: CN=905a17aaf7bf2961df93e0ff26ac3d646c33495a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:e3:88:cf:80:45:3a:ce:d0:5e:b0:cc:5b:
                    e4:1d:a3:34:49:68:35:79:d6:29:c7:6d:1b:ea:81:
                    0c:48:e8:ff:b9:9e:1e:f5:ee:80:e7:85:a4:92:67:
                    d4:8d:82:55:b8:52:09:de:a0:f6:7b:48:e4:35:7b:
                    19:cf:8f:56:b9:dd:dc:5e:76:ae:84:01:c8:de:fd:
                    c4:2d:b9:c1:7e:2b:01:2a:6f:6d:4b:14:13:48:2e:
                    26:b8:a7:d2:16:86:78:65:b3:0f:de:ee:5f:8b:a7:
                    de:05:c3:d8:9f:5a:d7:ec:6c:4c:84:9b:7f:07:33:
                    7d:20:44:df:e7:ba:c4:ac:30:aa:ab:11:a7:20:74:
                    21:dd:03:4b:a8:be:ec:0c:ac:a8:d8:5a:56:e5:ee:
                    4a:7c:27:50:92:58:0f:78:9f:56:8f:84:ad:45:87:
                    3b:f0:8c:a5:a3:6b:2d:98:92:e7:ee:dd:ea:c8:2c:
                    98:b4:69:0c:89:0a:95:2a:7e:b1:95:e5:48:fe:9e:
                    f7:bc:cf:87:08:1b:6a:1f:4b:ba:2e:a2:ca:3d:47:
                    eb:e4:d0:c8:03:0b:95:8d:7e:d1:86:0a:5f:20:5d:
                    21:91:e0:fb:42:94:b1:fd:30:80:02:23:f5:43:9d:
                    4c:69:b4:25:2e:fb:58:28:c4:d5:d0:7c:79:6d:42:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5A:17:AA:F7:BF:29:61:DF:93:E0:FF:26:AC:3D:64:6C:33:49:5A
            X509v3 Authority Key Identifier:
                keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:66:95:fe:6b:bc:03:fd:18:3b:48:b3:55:4d:ad:79:da:
         b4:78:e9:9c:cc:6d:d4:42:f5:e1:ad:2b:fd:60:44:46:6b:d3:
         88:8b:64:26:33:8a:74:85:e3:b5:d1:92:e2:2a:0e:a7:e8:15:
         4c:ab:8a:e0:21:ba:24:d1:4c:23:5c:5a:c7:d2:4b:3b:b1:ae:
         6f:e4:89:6e:21:d8:d7:57:af:ec:3a:7b:e3:d7:52:1d:04:78:
         11:df:b5:7c:c6:8a:ce:57:ac:55:ae:b2:50:4e:77:23:03:a7:
         c4:66:3c:85:18:9d:59:84:c0:01:34:72:fa:8d:bc:0e:65:77:
         1c:33:e3:66:32:9f:cd:0c:ff:96:b6:22:0b:f9:5e:07:a1:3a:
         97:13:0b:29:52:3b:a3:d2:a1:83:e2:6a:ae:14:e6:50:2d:f4:
         02:e8:b4:5d:b8:f3:2c:6c:6e:e0:16:87:96:33:07:25:b1:6c:
         6f:0d:f7:5d:e0:a8:19:8e:3c:f6:e8:84:28:a6:d6:a2:37:fc:
         f7:3c:9d:10:d3:1d:3b:8d:27:e4:d3:ce:47:dd:f1:24:8a:a6:
         77:47:40:b1:ff:58:51:c1:ac:8f:c9:2d:be:79:61:7a:73:5d:
         9c:6e:f0:30:9c:f2:bd:9e:c9:9e:e5:d4:ae:cc:8a:5f:81:74:
         83:51:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:12:31 2024 by rpki-client on console-ams.rpki-client.org