Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File:                     Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier:          H2wsM8wSB7ZFpKlgkzq/DZ7IysaKzGTqC3zmb9V8fiY=
Subject key identifier:   77:08:16:1C:B3:63:C8:25:3E:BB:C1:A2:A4:A1:95:DF:5A:B2:BE:92
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer:       /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial:       018FA0D237F132238CDBDEC945513BF6B56B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number:          0E23
Signing time:             Wed 22 May 2024 15:01:22 +0000
Manifest this update:     Wed 22 May 2024 15:01:22 +0000
Manifest next update:     Thu 23 May 2024 15:01:22 +0000
Files and hashes:         1: 1VjHw5HEWylZtpn53VuYsR9koR8.roa (hash: 1sHTG9myqpOVEf9hm52sNqgg+TVKMCGFvRpFqLyCFQs=)
                          2: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: GuW/70f67tzTCALTKVmga8jodcBH1T5rGdIk8vdDG9o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a0:d2:37:f1:32:23:8c:db:de:c9:45:51:3b:f6:b5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
        Validity
            Not Before: May 22 15:01:22 2024 GMT
            Not After : May 23 15:01:22 2024 GMT
        Subject: CN=7708161cb363c8253ebbc1a2a4a195df5ab2be92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:8d:46:05:09:b4:2b:c6:fc:80:ab:ab:6b:
                    76:d9:a8:20:a4:e6:81:13:0d:6a:90:2b:f3:50:cb:
                    36:72:a7:20:e5:aa:24:c5:30:e7:f3:18:88:78:cc:
                    4a:4c:24:e3:13:32:45:73:39:44:97:f5:e9:e0:af:
                    6f:ed:91:3b:29:f8:2b:80:e7:5b:51:b3:5e:00:03:
                    b8:90:03:85:22:04:54:92:27:a0:c4:98:75:93:aa:
                    03:82:77:ea:1b:20:b1:aa:72:cd:53:20:cc:24:cc:
                    be:64:48:64:1b:c3:3b:4c:50:69:ac:e5:0e:4e:40:
                    4f:3f:02:f2:76:5c:bc:b7:de:23:96:e0:0b:d5:8c:
                    18:46:cf:bf:eb:2e:cf:fa:f8:84:bb:6e:6a:12:c7:
                    95:ee:15:de:4a:01:6d:10:df:16:f4:d6:af:58:02:
                    15:64:bd:c6:2c:3a:5f:56:66:c5:a7:1a:99:57:1d:
                    63:04:02:9e:c1:15:10:8b:a5:19:ba:2e:18:49:9f:
                    8b:2a:1c:61:39:29:47:91:5a:6f:f4:c4:d1:b3:b6:
                    01:3c:e5:c0:56:08:65:ca:8c:5d:9a:69:1f:28:16:
                    1e:f1:7e:d9:a5:b6:d7:a1:c1:b8:c6:79:89:60:9b:
                    a8:37:f5:c0:c8:e1:ce:55:9e:64:88:5a:04:02:65:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:08:16:1C:B3:63:C8:25:3E:BB:C1:A2:A4:A1:95:DF:5A:B2:BE:92
            X509v3 Authority Key Identifier:
                keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:07:05:3e:da:59:35:ef:d7:8b:35:17:60:d4:ba:97:7b:46:
         89:22:87:f9:a5:99:62:e8:21:df:95:96:b2:57:44:24:e9:c1:
         73:70:18:c2:87:a9:fc:fe:5c:42:bc:65:ec:80:5d:b2:5b:67:
         7d:57:f4:a5:be:88:f5:90:32:25:4c:06:71:aa:14:b9:53:b7:
         75:ec:0e:48:27:d6:88:9b:67:28:81:44:1f:b5:63:bd:99:77:
         e4:2d:b1:b2:bd:46:98:90:a1:d9:6a:47:ff:0a:34:69:41:02:
         b2:ad:a4:63:f9:b8:8a:f3:0c:25:d4:e0:f9:21:da:8c:04:c7:
         96:1b:73:a5:26:76:46:82:cd:2b:9c:9f:3d:7b:08:ea:89:d1:
         fe:ea:d1:22:82:02:a1:dc:cd:67:3f:9b:20:f8:f3:e6:0b:18:
         2c:c4:e1:ba:0b:fd:7a:60:d2:3c:d5:6a:75:3d:64:30:96:a5:
         3c:38:c6:8e:42:de:31:c0:24:bb:13:4b:9b:34:b2:ec:ea:d9:
         3d:84:2f:67:3c:0f:f1:7c:ba:8a:4f:b4:9a:ff:28:17:1b:45:
         1b:69:52:92:18:3b:23:9e:e1:ad:52:fc:51:8a:c1:1e:00:81:
         c4:46:78:37:a5:1d:65:fc:c1:47:86:70:be:e4:b0:d0:32:ad:
         8a:4d:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 21:51:28 2024 by rpki-client on console-fra.rpki-client.org