Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File:                     QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier:          ki1l/d5Vixr1+UT4G5997VURQhmjTUkB1iOWkCq8r1U=
Subject key identifier:   1B:D0:48:DE:14:FE:94:3A:76:91:47:31:37:9B:65:58:05:0A:FA:A1
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer:       /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial:       018F85C862B0EACA7C923FB7727494442D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number:          0C74
Signing time:             Fri 17 May 2024 09:00:53 +0000
Manifest this update:     Fri 17 May 2024 09:00:53 +0000
Manifest next update:     Sat 18 May 2024 09:00:53 +0000
Files and hashes:         1: AfHNEBx1MY6TLVP_yNCkTro8g-U.roa (hash: ZmFTxBVEtUUYFA9Va9x6+Z1k4626SYNqzetcBzhrWUg=)
                          2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: 30ahaOQ0YSSM/Q4y8gGIcxVgs44wvm6AURq/KfOVCbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:c8:62:b0:ea:ca:7c:92:3f:b7:72:74:94:44:2d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
        Validity
            Not Before: May 17 09:00:53 2024 GMT
            Not After : May 18 09:00:53 2024 GMT
        Subject: CN=1bd048de14fe943a76914731379b6558050afaa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:47:04:37:78:2c:8d:06:e3:65:60:17:a3:
                    f3:b3:a3:a9:92:50:4a:53:33:10:82:b3:8b:aa:50:
                    ba:f3:2e:08:21:45:67:25:5a:40:ad:4c:35:84:61:
                    34:db:11:b5:ac:a7:f6:64:38:7f:c6:87:a0:13:7f:
                    dc:b8:e0:de:93:86:0d:e0:61:31:eb:3b:2f:cd:74:
                    f7:9e:eb:08:6d:e7:98:93:6e:fa:a7:07:88:7d:4b:
                    df:31:d9:3a:46:50:8f:45:e8:4e:27:4f:42:9b:8e:
                    0f:a2:3a:ac:56:4d:ba:d7:10:a9:85:27:44:57:2b:
                    c4:b1:a2:89:f0:86:83:cf:0e:0e:95:14:84:4a:8d:
                    f4:20:45:51:87:90:13:0e:39:4a:ab:41:68:06:83:
                    17:aa:ad:36:e2:eb:5a:6c:60:43:bd:e8:82:d3:4b:
                    fa:8e:58:05:3a:7a:da:67:54:15:44:f2:87:22:ff:
                    92:a5:be:ff:77:36:13:7f:c4:d2:93:53:ea:05:8a:
                    72:96:cf:2f:6d:59:85:27:9b:da:ff:bd:75:26:0d:
                    6c:0f:94:c5:93:31:90:d4:49:47:13:eb:ec:8d:39:
                    00:e8:a2:6f:0d:55:6f:f4:ba:e8:2a:d6:8f:df:8f:
                    79:9c:c7:78:65:3e:de:ea:87:f9:b6:c4:18:56:0d:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D0:48:DE:14:FE:94:3A:76:91:47:31:37:9B:65:58:05:0A:FA:A1
            X509v3 Authority Key Identifier:
                keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:55:42:0e:fe:59:6c:1a:55:0a:93:3f:eb:e4:e7:ef:98:
         2b:c2:67:0b:36:28:d6:cd:a7:b3:36:64:ad:a0:e7:29:4e:cc:
         72:6e:8a:51:06:48:5e:de:8d:c4:73:3d:0e:19:12:98:b2:a2:
         ee:92:0e:80:06:64:a4:1c:96:2f:69:a5:fa:70:24:7d:ec:e3:
         82:ec:65:e0:03:d0:7f:ef:bc:4b:37:90:d6:8d:79:9c:0c:5e:
         ba:b5:b4:41:60:41:b0:5e:d9:15:5a:e6:d2:70:2b:02:b6:c0:
         d0:d6:12:f6:20:4c:c4:6a:e7:dc:13:02:cf:09:a8:52:40:35:
         5d:cb:91:89:0d:a9:29:7a:38:93:86:5c:5b:1e:48:d3:1f:6d:
         87:51:62:5a:7a:3c:24:c2:3a:3d:d1:53:e5:cb:6f:ed:72:f0:
         eb:da:e9:2b:92:b5:6a:41:fd:68:8a:83:90:7f:c4:cf:ef:25:
         63:f8:65:1f:42:4c:f5:94:c0:66:ff:53:17:21:47:11:fe:80:
         ca:27:2f:23:7f:ea:eb:71:55:2e:cd:06:18:a8:99:53:1f:b3:
         e1:36:fa:79:da:95:be:31:e4:6f:c0:9d:b5:c1:d4:59:9d:ea:
         5c:df:d5:5d:51:75:b6:11:d6:13:7f:09:c2:e7:64:b2:20:e2:
         dd:cd:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:17 2024 by rpki-client on console-ams.rpki-client.org