Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File:                     ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier:          +5vITlehG8PzqkHJDtXExHuwZU0eR2izqwcean5m36w=
Subject key identifier:   F0:32:FE:90:40:69:4D:39:FA:3F:F9:5C:8A:A7:19:AC:8B:6A:50:88
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer:       /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial:       01901E900801712BE31D3B2D3158B69ADF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 01:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:14 +0000
Files and hashes:         1: Q2PTAgsRCglGy8eZW7islDi2Wkg.roa (hash: 7U+45wlPgUPDK0KYYGQyuC/LydX/3x9YaVe0cKDQgKc=)
                          2: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: QXlgmfnpGu+UjiXAsIcouWam6eYiRZkVke4Hga7Pn7c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:08:01:71:2b:e3:1d:3b:2d:31:58:b6:9a:df:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
        Validity
            Not Before: Jun 16 01:01:14 2024 GMT
            Not After : Jun 17 01:01:14 2024 GMT
        Subject: CN=f032fe9040694d39fa3ff95c8aa719ac8b6a5088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:4d:1c:40:32:bf:d6:02:bc:24:67:79:e2:
                    b8:9f:44:a7:3a:52:56:4d:55:99:fe:30:0f:ef:a1:
                    b4:a2:27:be:93:5e:f5:8b:cd:15:d3:df:57:9c:ae:
                    00:9a:97:06:e4:39:86:08:e4:21:fe:8a:af:b9:54:
                    2b:bc:75:bb:98:54:a1:22:6e:6d:ba:53:de:36:2a:
                    01:1e:65:47:9b:f7:66:c3:b1:2c:f5:4a:6c:47:4e:
                    4f:7c:bd:b5:f9:5f:71:0f:00:83:b2:be:fe:14:b5:
                    b3:0f:65:00:6f:0e:d7:57:ac:42:5c:e0:44:37:34:
                    2f:3d:84:18:ea:ff:cb:78:e8:ea:77:ba:06:22:3a:
                    64:4a:83:b7:29:68:45:76:79:d3:f3:9e:f4:12:ee:
                    b9:82:62:94:3e:58:b6:9f:b0:c7:f7:1d:75:6e:6f:
                    a5:37:1f:3f:89:32:71:9d:ec:4c:d4:a4:1a:14:aa:
                    07:25:4f:55:fa:a8:8b:3c:8a:7d:bc:47:d6:d0:4f:
                    63:9b:15:4b:37:f3:34:43:c6:fa:64:78:73:3f:a1:
                    da:55:97:c2:e8:44:b8:87:d3:83:80:43:8a:e2:8a:
                    88:1f:38:b1:8a:32:39:cb:b1:ed:ef:4e:96:e0:80:
                    3d:8c:f6:87:38:83:75:6d:ac:48:68:d7:7b:43:5a:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:32:FE:90:40:69:4D:39:FA:3F:F9:5C:8A:A7:19:AC:8B:6A:50:88
            X509v3 Authority Key Identifier:
                keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7d:7b:55:10:91:57:d7:6a:24:92:17:9a:e8:f4:bc:3a:04:
         1e:55:0d:07:bb:66:f3:e5:02:69:5a:c5:74:b9:fe:9b:8d:4b:
         6c:20:c3:7f:75:1a:0e:f2:23:c3:75:68:c3:b2:be:23:b7:cf:
         59:45:29:99:87:02:16:16:7c:55:ea:80:75:a3:74:46:d9:09:
         dd:af:4d:ad:9b:eb:eb:13:a3:c6:62:a2:b9:75:80:4a:69:10:
         75:46:6c:c6:3f:2c:2b:99:f2:9c:f5:7a:a7:24:db:55:f4:1f:
         35:e1:cb:b9:3f:ae:10:f8:3e:1f:81:2c:b7:e5:64:70:7a:52:
         b5:e4:b1:d7:88:24:1d:9a:9d:6d:6f:5d:ab:c8:fa:37:5a:af:
         e4:68:11:2d:89:58:39:df:6c:7e:a4:25:20:cd:99:f3:60:4d:
         6f:b7:42:ad:c8:d6:75:8e:27:5a:c2:be:5a:0f:4a:70:1f:bd:
         3b:10:4a:81:48:5d:06:da:c2:cd:73:53:e3:d9:bb:d1:79:74:
         1b:4d:1e:c2:b2:82:55:f7:19:20:8c:92:cb:3d:a2:53:b0:6a:
         05:a0:ce:1d:b2:c1:44:f5:8f:68:7a:0a:57:2c:ea:d3:f0:21:
         3a:5c:42:44:83:d5:24:55:e9:f5:e4:9c:d6:4e:97:d9:3c:0a:
         f9:a2:b1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:59 2024 by rpki-client on console-fra.rpki-client.org