Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File:                     qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier:          Q419COqOvpM6eGRAv3jQHsBQgvxrkO0foSdqWMdc7jU=
Subject key identifier:   B7:DD:C1:F5:E6:6E:AD:1F:A1:56:BB:18:FB:5E:93:30:01:21:1E:A0
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer:       /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial:       01901C6AD6418A4EF49890D0A992091E24CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number:          087B
Signing time:             Sat 15 Jun 2024 15:01:22 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:22 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:22 +0000
Files and hashes:         1: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: lLXZLPqJXjj4uVFVsTDfblKBBaMk9K137RfLWbPUGho=)
                          2: rwt3BB4fwxAa4zydpIuxcs36FlA.roa (hash: D9VgfkkD1/wqVir9zjuk/VgBNliC5rLa52WPBIqt3/I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:d6:41:8a:4e:f4:98:90:d0:a9:92:09:1e:24:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
        Validity
            Not Before: Jun 15 15:01:22 2024 GMT
            Not After : Jun 16 15:01:22 2024 GMT
        Subject: CN=b7ddc1f5e66ead1fa156bb18fb5e933001211ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:1f:dc:79:6a:6e:f4:b6:a5:ce:50:0b:51:
                    5d:7f:d6:69:0b:8b:bb:14:b6:42:d4:82:ec:20:1c:
                    ee:2c:d4:a9:a4:54:ad:27:ce:ac:56:74:64:a7:03:
                    b3:14:99:0c:04:df:69:18:a1:ea:07:49:6b:78:81:
                    18:94:51:77:a7:a5:26:62:36:89:00:98:56:3e:72:
                    c3:cd:38:34:74:44:3f:24:78:a6:5e:e5:30:64:7f:
                    12:ee:ff:32:9a:68:6b:6e:67:7f:3a:36:e6:0c:07:
                    d6:7a:34:7a:e8:8b:29:07:24:ed:f6:08:25:ee:5f:
                    fc:2e:90:1f:b8:aa:da:2d:ec:7d:66:a0:d8:ff:bc:
                    97:bf:41:c2:a5:88:76:69:c0:ba:f7:a4:eb:ca:8f:
                    22:b1:d0:e7:cc:1c:b4:1a:a9:87:47:aa:b5:1b:6b:
                    52:a9:2c:4f:42:3b:3c:23:2d:03:5b:ed:c6:ee:41:
                    0a:51:59:ea:b1:20:3a:ce:7f:2b:af:76:5e:cd:00:
                    bd:5a:cd:93:f9:c4:d0:b9:41:9b:79:ff:93:72:98:
                    07:71:b7:43:57:b4:2f:ed:0c:c7:5d:5a:ad:f7:47:
                    db:3b:72:b4:97:a0:9a:2d:6d:5c:78:df:a6:56:c6:
                    fc:9a:01:dd:be:ad:f9:ba:0f:ca:4b:e3:f9:cf:9c:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DD:C1:F5:E6:6E:AD:1F:A1:56:BB:18:FB:5E:93:30:01:21:1E:A0
            X509v3 Authority Key Identifier:
                keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:38:a0:fd:87:ce:f2:5b:aa:7a:31:28:68:b2:ec:b1:d2:8a:
         30:52:a7:c2:b5:30:98:f3:94:34:5b:d1:94:2d:04:f2:d7:9b:
         77:3e:13:0d:dd:2c:1b:28:33:68:6d:88:62:2f:fd:bd:a0:59:
         9e:fd:01:e8:ea:bb:e5:5f:e1:fe:dd:57:cb:46:6e:71:3b:84:
         91:4a:e3:27:ae:67:d1:b6:ac:4c:16:ac:91:6a:e2:bb:67:8b:
         dd:10:fa:bc:b2:be:fc:fa:1d:f8:d3:6f:98:be:75:fb:d5:e7:
         57:73:17:70:b4:f8:05:b6:3e:d2:f4:08:cb:37:6b:fd:ec:a3:
         0c:37:84:d5:04:97:43:1d:f0:b3:e0:1b:84:99:49:02:e1:c8:
         d9:4e:33:9f:b9:5f:36:88:07:dc:8c:b4:85:37:97:ad:78:7f:
         b1:18:7b:ac:5a:30:9d:26:6f:18:31:21:a7:1c:9e:e3:26:5b:
         14:e3:14:94:d9:da:e9:87:58:24:0c:bf:90:1d:bd:e8:47:3b:
         9a:b7:7a:31:28:05:75:36:94:be:19:6f:91:a2:00:48:1e:12:
         42:28:53:8b:ee:da:3e:9f:05:50:c5:68:55:c6:7e:a9:7c:4d:
         a8:d3:bc:b7:23:41:4b:9b:13:b6:7c:e1:c3:dd:4f:b4:95:e7:
         90:80:4f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:40:28 2024 by rpki-client on console-fra.rpki-client.org