Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File:                     n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier:          SWGgp1ubY4cx0+sWHJCv/lGn73Vl54CbYMf4UQvJ/o8=
Subject key identifier:   AF:C8:F0:70:60:79:F6:88:3E:2F:16:17:72:BA:53:6A:25:37:13:FA
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       018F87B69A0EF634D09069D4C7F451900558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number:          0C2D
Signing time:             Fri 17 May 2024 18:00:42 +0000
Manifest this update:     Fri 17 May 2024 18:00:42 +0000
Manifest next update:     Sat 18 May 2024 18:00:42 +0000
Files and hashes:         1: OLNkJ0vbTphRCLVn-4MmOr2g1Tk.roa (hash: mNln9pcZjb+sVHHu31uLhEkLWTP2dGaNLAfF4iPVrxo=)
                          2: Uo0y8OtSGOk7M6ksVn0t3JIE0vI.roa (hash: Qn6nhe8pgy+het/cCHdKQzZyAze115DCYALX01oJ0H0=)
                          3: nZ4x3dD2p2Mzj3DNydHJimshhB0.roa (hash: Ub4bKvy2OWfcPVv/F2Ps4LOgzaSjGt21gQDw/GQEwgU=)
                          4: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: OzpYfCMY6zE8UHxiR4WyyZr7qGVOcTSEfsifrjnFjnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:9a:0e:f6:34:d0:90:69:d4:c7:f4:51:90:05:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: May 17 18:00:42 2024 GMT
            Not After : May 18 18:00:42 2024 GMT
        Subject: CN=afc8f0706079f6883e2f161772ba536a253713fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7f:09:26:89:96:4e:47:bb:20:fd:e5:a0:4a:
                    71:2a:76:5e:63:38:79:2d:66:ea:a0:b5:5a:20:fc:
                    d6:03:0b:c2:a3:b6:11:f2:e8:07:25:ac:4a:42:0a:
                    ee:c2:4f:83:a1:28:82:14:06:be:f9:77:37:7d:6b:
                    05:03:93:aa:3b:14:a7:bc:bb:7e:a2:45:21:79:6b:
                    51:57:94:7c:c5:a3:84:a1:02:ae:94:c8:47:21:f6:
                    37:45:1c:ed:7b:18:fc:cc:4a:27:97:4f:77:84:cb:
                    6d:59:63:88:44:8c:cc:2b:80:5c:6e:eb:eb:3d:67:
                    6a:b2:06:9d:48:41:1a:8a:26:3f:75:f8:76:24:89:
                    82:db:36:e1:9a:89:fa:dc:82:4b:c4:24:57:c8:a1:
                    05:d0:9e:9f:a7:3c:4f:cc:de:82:b4:4e:54:57:4f:
                    c1:e6:0d:7d:90:c7:36:51:de:2c:7f:87:a1:b9:86:
                    ac:ac:3a:0d:6e:be:11:42:45:57:02:48:c2:d5:06:
                    15:22:df:7b:49:52:63:bc:b3:14:01:07:07:7e:f0:
                    d0:45:94:d0:38:7e:c8:cc:c8:5d:50:ff:5b:94:f5:
                    eb:21:d7:82:2e:58:d8:01:ff:17:d7:e7:8d:dd:fd:
                    9a:cb:9f:dc:c5:ba:bc:bb:c0:07:ac:30:de:e9:66:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:F0:70:60:79:F6:88:3E:2F:16:17:72:BA:53:6A:25:37:13:FA
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:67:ff:3a:cd:40:11:6e:ed:b5:78:ca:bd:b1:51:71:d6:ff:
         96:ae:d3:bd:b0:c6:38:ad:d8:eb:03:32:5e:0c:27:b9:e0:99:
         03:5b:71:9c:b7:16:3d:8a:28:ad:02:42:96:fb:1f:9c:50:45:
         c1:fa:29:cd:3d:2c:be:ba:de:a7:f9:87:03:a3:d1:a2:e4:cc:
         fd:c3:83:4a:4a:25:8b:64:c4:dc:f5:ba:0a:b8:1b:4e:7c:d8:
         a6:fb:cb:e9:c7:b6:31:ce:07:64:f1:06:de:8a:97:b7:f3:04:
         1a:f1:d7:fd:ca:34:1d:15:93:d0:e4:af:45:36:fc:68:81:1d:
         5e:7a:50:4a:02:75:6f:ba:f8:b6:35:69:a4:b8:de:c2:fb:aa:
         bb:81:fd:e6:1f:17:50:22:52:17:74:c3:36:a7:0c:86:57:1d:
         8d:fd:09:54:bc:4b:b9:2a:17:74:62:97:0e:eb:b8:f0:6c:69:
         49:73:63:85:16:4e:39:3d:0d:1d:c0:bd:b5:54:29:2b:fa:66:
         29:a9:45:44:75:a0:5e:3c:32:ea:6a:e0:f2:2b:8d:f4:d1:e0:
         24:64:52:d7:bf:8d:13:2f:92:b8:12:33:34:e2:ed:59:07:eb:
         fe:39:85:fa:7c:b7:c5:2e:cb:a5:12:9a:2d:31:65:f0:45:e6:
         5c:99:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:49:24 2024 by rpki-client on console-fra.rpki-client.org