Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
File:                     QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json)
Hash identifier:          kudIWUMFG5uLoe7UmeppOCSW5KPx6Hliu7fGAohvQ30=
Subject key identifier:   7E:3E:6A:40:BB:5C:85:0D:79:0B:89:8C:B9:0F:59:8F:83:34:76:78
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Certificate issuer:       /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial:       018F8A4979FFFC4ED15550EAD0B6ADE66085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
Manifest number:          0266
Signing time:             Sat 18 May 2024 06:00:22 +0000
Manifest this update:     Sat 18 May 2024 06:00:22 +0000
Manifest next update:     Sun 19 May 2024 06:00:22 +0000
Files and hashes:         1: DsNcbk_BTPFlk33nDKu2FCWczdo.roa (hash: YjyaSXvYzPh6eFPk71IGloQvITU9+HPYR7V584HEXj4=)
                          2: G_07xGG_d_NvtW7W9eG7k3fYCv0.roa (hash: 0eZUQY5U5Xrpw23pxnWOvfqfETTV4lw8E1Uegc5TkQE=)
                          3: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: Iu8hxGfIMWTaWLTesymT+GVlP51lJUpHXFopd6WOv5w=)
                          4: ZcL6xI3YHgb2tIqk_9YeqdfLsZw.roa (hash: w3r8UixAmrvrBgjJKe+lqSu5hTqBwV91E0KdybCFHQk=)
                          5: dxl-0gbMPDf3zltjiiweTP0Goi4.roa (hash: MI4mk9WGh8z8PwodWTdm1yU5QOLHQEM7Rkr2judbt4A=)
                          6: sVY6mrM4u5PvskO5kRvvAZ2Yyn0.roa (hash: E31S4MRhR3nbrG0HQYHLrF++ONtRw4D2uekZGsUpoZ4=)
                          7: vMirVsoIngVnP1qrRL1xUmGJz1I.roa (hash: V5cwZ3tT3QHR7SZluH0/tf8n0UWteGfjTrtwdBo+Ln8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:49:79:ff:fc:4e:d1:55:50:ea:d0:b6:ad:e6:60:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
        Validity
            Not Before: May 18 06:00:22 2024 GMT
            Not After : May 19 06:00:22 2024 GMT
        Subject: CN=7e3e6a40bb5c850d790b898cb90f598f83347678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:f7:84:46:d6:76:da:83:85:27:c8:b9:9b:
                    31:fb:20:ee:45:32:a5:26:33:5e:2d:90:27:bb:37:
                    c5:96:ff:ee:32:a8:3f:f2:f0:74:f9:51:ae:ca:16:
                    d9:70:38:1e:49:9f:81:c5:d2:53:31:f9:77:47:a8:
                    cb:c5:66:1c:9f:86:5e:af:41:e8:47:85:fb:43:b6:
                    72:58:29:ca:5f:f9:bc:a7:65:80:3d:d6:16:d2:a1:
                    55:c9:4a:75:67:3a:c7:49:2a:fe:13:37:53:be:cd:
                    b8:4b:0c:ef:86:ab:31:1b:d1:3d:50:43:91:88:b1:
                    02:84:f8:76:93:88:26:73:da:e4:29:69:6b:7f:1a:
                    77:23:a1:1e:1f:03:5d:be:f2:90:39:cc:61:85:1c:
                    4f:5c:78:3b:7f:da:d0:fe:7f:78:04:8b:77:23:b1:
                    09:9b:ef:50:08:ca:5d:74:a0:29:4a:1f:4a:77:d9:
                    35:76:01:01:50:f5:5b:b7:c8:be:e5:35:88:cf:a6:
                    3b:57:b5:2b:aa:f0:2c:c1:f5:44:9b:96:a6:b6:df:
                    15:ef:d4:9c:f4:7b:8b:1a:45:98:95:bc:57:80:4d:
                    9f:f4:d1:be:43:25:3b:ea:d3:1a:bc:e9:88:a7:59:
                    49:e4:8e:0d:56:7c:aa:e1:27:72:df:3b:1b:16:3a:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3E:6A:40:BB:5C:85:0D:79:0B:89:8C:B9:0F:59:8F:83:34:76:78
            X509v3 Authority Key Identifier:
                keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ae:52:ce:19:48:5f:f2:06:d7:12:4a:18:db:64:4e:f5:88:
         f8:4d:d1:93:70:8d:21:36:e8:58:f7:d9:0f:05:e9:d5:f5:f6:
         a7:1b:73:84:63:ca:71:ee:56:28:88:f6:35:b7:1b:ed:ca:b1:
         72:65:e0:19:9b:b9:d8:8c:53:b8:d1:8f:d7:81:75:3d:35:ef:
         33:80:7d:0a:bc:38:9c:de:e6:07:7a:e9:40:13:96:7c:37:c0:
         b0:8c:1b:a4:e7:ab:5b:3b:7c:00:dc:dd:de:c9:81:51:86:ec:
         d6:ce:48:20:e0:77:c3:d3:17:69:d8:7c:7b:33:50:bf:a0:73:
         86:4b:27:76:6d:60:a5:e9:83:85:bf:2c:54:2e:31:a0:91:87:
         32:fc:e3:bd:b9:27:b2:90:67:dd:7d:26:14:82:dd:ed:16:9e:
         76:eb:10:b9:78:b4:a5:60:ac:27:57:9c:25:78:28:3c:5b:32:
         40:04:a6:a6:81:11:fa:5a:0b:5b:c7:44:16:0c:cd:af:6a:b1:
         65:54:7f:70:10:f8:45:7e:ca:62:f8:06:89:61:e4:43:b9:a7:
         db:e0:5d:b5:bc:59:85:62:1a:b7:25:35:56:6f:99:95:13:16:
         78:44:32:c7:25:5b:4e:f3:0a:c4:f3:bb:00:b5:f8:09:4e:93:
         aa:10:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:28:30 2024 by rpki-client on console-fra.rpki-client.org