Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File:                     qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier:          hQGU7sFPcjVqdHFFMQf5ERmXTIkUsSE7Fbt4y7nOkgE=
Subject key identifier:   8E:0A:6C:A9:B5:3A:8E:23:16:0D:2D:12:5E:18:17:03:0A:6E:6B:BA
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer:       /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial:       01903396CB6E110DCFBA3D148114EAB8C771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number:          0887
Signing time:             Thu 20 Jun 2024 03:00:38 +0000
Manifest this update:     Thu 20 Jun 2024 03:00:38 +0000
Manifest next update:     Fri 21 Jun 2024 03:00:38 +0000
Files and hashes:         1: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: pTZ0K9T8eY1NcFtorOb7yVZsZp0EGN058IjiG0ygv3Y=)
                          2: rwt3BB4fwxAa4zydpIuxcs36FlA.roa (hash: D9VgfkkD1/wqVir9zjuk/VgBNliC5rLa52WPBIqt3/I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:96:cb:6e:11:0d:cf:ba:3d:14:81:14:ea:b8:c7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
        Validity
            Not Before: Jun 20 03:00:38 2024 GMT
            Not After : Jun 21 03:00:38 2024 GMT
        Subject: CN=8e0a6ca9b53a8e23160d2d125e1817030a6e6bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9e:17:c9:16:a1:0d:64:9d:9a:8a:62:0c:fe:
                    57:a0:b5:92:41:62:f3:a7:31:77:8e:1d:b0:b1:b6:
                    e5:cc:1e:ff:22:fd:4b:52:76:3b:9c:d3:98:28:86:
                    27:8b:ef:ef:5d:2e:17:84:dc:cd:3b:6a:bc:11:0f:
                    ab:a3:9a:87:83:a7:16:4d:c4:87:1c:c6:2a:8f:d1:
                    51:42:3a:bd:df:e1:07:4c:83:7a:77:28:63:bb:bd:
                    48:83:7a:2a:05:a4:3e:ea:02:7c:4a:ad:85:a0:35:
                    53:67:1d:af:7c:e7:5b:e2:fc:5e:1a:98:d2:80:b2:
                    ce:d0:b9:a5:19:e2:74:9f:7f:bf:2d:48:e7:cb:7a:
                    41:40:70:1e:e4:3f:9c:82:5f:af:af:ea:a8:ab:ba:
                    c6:fc:59:80:2b:15:45:91:e6:b1:53:3a:03:96:38:
                    b3:13:d4:83:d9:72:10:b4:4d:c7:a5:0a:5c:e0:c1:
                    45:72:ed:a9:ba:f3:a8:b5:e6:78:63:ac:4c:b0:ad:
                    dc:d6:cb:62:2e:ee:e0:ae:ed:5e:59:e3:66:e2:79:
                    91:fe:ef:e8:79:fa:cd:a8:ff:57:55:bf:bc:c0:e6:
                    b4:d2:52:02:b0:7a:f1:84:7b:b7:8a:1c:5e:c4:5e:
                    a9:7d:da:89:98:9e:0a:80:0f:b9:df:00:b5:c4:70:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0A:6C:A9:B5:3A:8E:23:16:0D:2D:12:5E:18:17:03:0A:6E:6B:BA
            X509v3 Authority Key Identifier:
                keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c6:4d:0a:c7:58:36:06:64:76:27:39:b3:7e:30:f4:c6:c0:
         47:01:d7:ac:94:2b:cc:26:35:ed:f3:2d:dc:ba:3e:d6:29:d2:
         4d:21:a5:db:9f:d3:08:74:cd:e0:4a:57:c3:dc:bd:16:d8:e3:
         f3:6a:a4:ee:7e:78:cf:58:f0:2d:e0:f1:5a:14:ea:ac:2f:04:
         f2:de:e2:fc:7d:87:2a:44:47:87:ad:67:86:8e:1a:5c:62:cd:
         3d:44:fb:dc:b6:0e:89:7f:0a:f5:07:21:28:ec:bb:74:1d:96:
         a1:f4:86:07:2a:70:34:d6:7d:b2:b4:6b:40:67:c2:2e:dd:ef:
         13:81:a7:c5:58:b2:9f:7b:62:fb:e1:7f:43:7f:4c:2a:62:68:
         78:68:4c:5c:13:9d:b3:c6:e7:2d:36:58:6a:c5:50:b2:37:ba:
         a8:4e:2c:76:61:bf:75:5f:37:c6:66:bf:14:a8:0e:4f:99:79:
         d2:1a:3f:8f:bf:4a:0b:71:87:4f:bf:d9:a6:11:4d:70:c9:a0:
         1c:8d:8b:e8:b9:3d:76:ac:2a:99:ab:fd:d3:3e:c5:e7:4d:5d:
         79:7c:37:4c:3b:ae:a6:c4:84:3c:02:24:6b:0b:02:c2:26:b7:
         46:5b:9a:5a:bf:ea:47:8a:36:11:08:1d:31:c6:ee:68:a7:4f:
         7e:a5:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 08:51:31 2024 by rpki-client on console-ams.rpki-client.org