Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File:                     Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier:          1JynbDTmxXt1wWkCRHYJWy5HkJJDBrh39+0bh4DpiQQ=
Subject key identifier:   32:D9:26:A3:45:9D:3F:DD:07:4C:DF:62:85:7D:39:7E:2F:62:DD:8F
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer:       /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial:       01906C3C7D6E19DBC3EF519AE22D6A08E3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number:          0CC8
Signing time:             Mon 01 Jul 2024 03:00:21 +0000
Manifest this update:     Mon 01 Jul 2024 03:00:21 +0000
Manifest next update:     Tue 02 Jul 2024 03:00:21 +0000
Files and hashes:         1: C-uOQuJE2VA01lXDjaneFMz8RvI.roa (hash: zUZXPhUmMItAp4sF9XeqWcNJQmscjBvrHpLdDPq7rfc=)
                          2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: ry1YyTSTG6EjWAk9uOvIlEB2Qa01u14eslxJ6lLSKv4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:3c:7d:6e:19:db:c3:ef:51:9a:e2:2d:6a:08:e3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
        Validity
            Not Before: Jul  1 03:00:21 2024 GMT
            Not After : Jul  2 03:00:21 2024 GMT
        Subject: CN=32d926a3459d3fdd074cdf62857d397e2f62dd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:de:bf:3e:26:bc:ba:33:f1:91:75:17:f3:f6:
                    84:ca:f6:b3:e4:6d:9e:97:3e:0e:9a:d4:ab:be:a9:
                    b9:f1:9c:d8:00:9c:73:41:4b:ce:0f:ae:66:ae:39:
                    df:28:6f:40:63:3f:eb:f5:86:e3:75:5c:72:b8:bb:
                    37:11:03:b1:3b:dd:bb:d9:35:39:f2:42:8e:b6:d3:
                    f1:77:44:ba:57:a7:ce:48:1a:7e:3c:7b:14:6e:a8:
                    9c:8d:24:4e:aa:ef:b0:b7:a8:7f:30:4f:9d:3c:46:
                    54:24:01:23:f2:9d:7b:7d:b9:81:95:8d:cd:9a:0c:
                    5d:35:40:77:81:52:f0:01:37:ae:98:3b:b3:b8:b9:
                    d2:c6:07:e3:7a:5d:75:1f:af:d4:a0:23:e7:98:09:
                    43:2d:be:21:e2:9a:60:0a:2e:a2:67:61:ca:94:70:
                    d9:06:bb:23:98:66:23:ec:51:9f:2d:72:b6:53:b9:
                    73:7d:5d:86:e5:52:7c:d2:dd:96:18:b2:a2:3f:68:
                    05:f5:c4:25:6d:e5:2e:c3:94:31:f3:ee:4a:af:09:
                    64:1a:05:ea:01:d2:6d:e4:86:4f:b8:01:71:37:12:
                    4e:78:8d:71:98:da:e0:7f:b6:d7:68:f8:fe:70:a8:
                    f4:e7:ec:c0:f1:8f:bf:b5:8d:e7:ba:65:4d:d4:19:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D9:26:A3:45:9D:3F:DD:07:4C:DF:62:85:7D:39:7E:2F:62:DD:8F
            X509v3 Authority Key Identifier:
                keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:77:90:14:0e:10:44:cf:5f:61:b8:c0:f6:70:92:87:b7:38:
         da:e1:59:57:ae:65:d4:4a:43:24:0a:63:e1:83:79:57:17:fe:
         e6:da:b0:0f:fb:de:c6:1b:ee:22:ab:b3:1c:25:36:96:60:93:
         54:49:c9:56:01:ee:e7:4d:51:2a:f9:a9:e9:38:55:be:c8:32:
         ae:29:d4:04:bd:9d:3f:7e:b2:0e:79:40:3f:08:07:81:84:23:
         5e:34:72:eb:9d:09:9b:2e:2f:43:43:71:40:b4:e2:a2:fe:92:
         46:ac:82:72:df:c9:81:92:76:9f:5d:6b:ec:61:0f:1b:b0:0b:
         bc:83:c3:14:93:cd:61:33:fd:72:bd:37:9f:ee:e2:ae:bd:93:
         95:53:eb:97:f3:c5:ca:94:30:c1:8b:69:e8:dc:87:3e:5d:d7:
         6b:0b:f7:9f:68:a2:f9:97:81:60:4c:6f:c2:e3:f7:bd:82:ea:
         99:83:83:40:0a:53:68:08:28:5c:de:c1:6b:66:41:ed:57:f5:
         76:8e:40:09:9d:89:c4:dc:80:2a:9f:49:75:35:38:54:eb:71:
         77:1e:81:68:fe:13:4e:ec:30:f5:d5:6c:89:3e:b9:a7:eb:6a:
         bd:ee:bf:81:cc:79:45:0b:ed:7c:c5:ab:85:22:2a:62:92:41:
         e7:94:aa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 04:00:32 2024 by rpki-client on console-ams.rpki-client.org