Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File:                     Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier:          qHlUASlO/WvU7wkahdjkTugnj/l5q2kACAGmv+5OE8E=
Subject key identifier:   F0:79:0B:83:8E:9D:F8:23:A4:E2:87:07:A8:71:77:77:4F:23:BD:B2
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer:       /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial:       019040AEB55EE51840334C2D3B2C116EBC56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number:          11D5
Signing time:             Sat 22 Jun 2024 16:01:49 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:49 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:49 +0000
Files and hashes:         1: 1-OHDPVGE0zeGaWyuyK7O9G38PCA.roa (hash: 2hwDE+GWMy8idbtUiaNvkfAuYTZr5wAwyvwPr+TCerI=)
                          2: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: IdP8tj4yZEXLlY9VO7abnzhpC/2wwtD9qzj6pllMCsA=)
                          3: TuSl4HozoKDBnIz7Al3zhGYqfIo.roa (hash: U3Pigz+OrK2DetZT46M8rTT7xbb6hAskm5Xf4y5bLh0=)
                          4: a7wewogDife4s8wdlyE-gbDpMR8.roa (hash: 5SHjXIDrft9jNcmB/7RPGX3K/r1cfdVk6Iufe99rvQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:b5:5e:e5:18:40:33:4c:2d:3b:2c:11:6e:bc:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
        Validity
            Not Before: Jun 22 16:01:49 2024 GMT
            Not After : Jun 23 16:01:49 2024 GMT
        Subject: CN=f0790b838e9df823a4e28707a87177774f23bdb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:7a:ae:e3:f4:1d:17:64:cc:ba:1a:4a:74:
                    ac:2b:e8:11:83:a2:da:9a:6b:a3:fb:a3:f0:90:ad:
                    08:56:67:69:7c:12:ce:52:79:4f:9e:e5:54:d0:59:
                    ae:20:11:3b:fd:02:f5:8b:1b:7e:8d:b8:b8:a6:fe:
                    8e:39:0a:f1:4d:f9:d7:60:e0:3e:29:b7:4d:31:da:
                    9c:53:da:c3:63:2e:a3:ce:88:8d:cd:52:d1:12:11:
                    bf:69:8c:f2:da:b6:50:47:57:31:68:71:ef:20:af:
                    45:24:40:94:22:c1:fd:fa:13:6a:ef:c6:e9:8a:5b:
                    a8:82:d5:1d:3e:5a:d8:15:9c:bd:65:fc:aa:a2:90:
                    e8:0a:f2:09:d2:b8:e5:a0:b4:f7:97:6b:dc:05:0f:
                    96:67:fd:91:55:a6:a3:a5:90:70:db:41:d7:ef:85:
                    37:32:67:6d:63:43:ab:ec:6c:47:7b:eb:f7:44:b0:
                    69:00:f5:92:1e:78:e6:fe:2f:52:e1:ba:6f:a6:c2:
                    27:bd:c0:af:df:50:f1:ee:89:5d:67:e5:bc:46:ca:
                    dc:bb:86:93:48:4e:f4:08:c6:6f:6c:b5:57:1a:66:
                    80:51:67:cc:7d:7e:78:41:da:a3:30:82:b1:c1:a7:
                    98:9d:62:fc:e5:ac:8d:84:dc:dc:45:e5:9e:21:32:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:79:0B:83:8E:9D:F8:23:A4:E2:87:07:A8:71:77:77:4F:23:BD:B2
            X509v3 Authority Key Identifier:
                keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4b:2c:3d:31:89:0d:b8:71:f6:8f:45:8e:60:b7:df:71:db:
         f7:f1:9c:93:46:67:03:2b:12:c1:0b:64:48:68:d6:32:6d:53:
         c6:22:e1:8a:2f:96:03:3e:24:8e:2a:00:97:86:57:f6:bf:ed:
         2a:db:d0:f8:d0:55:34:46:88:c3:cd:50:65:36:3f:85:5e:62:
         5c:7e:76:c5:7a:18:2c:c6:60:3f:55:e3:81:2a:f6:5b:9a:a2:
         25:44:cb:3d:d6:b0:97:9a:db:c2:b7:fc:42:eb:03:32:f3:27:
         e8:62:0d:83:f6:3e:07:fe:ce:6e:50:49:eb:d8:9f:56:4c:6e:
         76:33:0a:cb:ab:27:e3:22:15:80:c8:16:8d:29:71:7b:4c:5c:
         8c:0c:ec:f6:84:43:8f:af:71:22:85:f8:41:2b:12:8c:75:7a:
         71:3e:6d:f7:18:00:b1:d8:04:c3:9f:20:25:9c:21:fb:37:ff:
         29:70:63:ab:fd:7a:bc:6e:00:97:8d:fb:43:d9:d2:6c:1f:b3:
         56:0f:45:2c:bc:cc:71:be:91:ae:94:d0:e0:5e:a1:66:dd:8c:
         6b:7d:ce:c2:01:d2:82:97:6e:ef:41:8f:90:fb:aa:3f:a2:67:
         80:1e:95:fc:ba:e1:7a:52:f4:26:b6:14:3a:a0:71:b1:2f:32:
         6d:5d:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:41:34 2024 by rpki-client on console-ams.rpki-client.org