Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File:                     Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier:          VkV6jd3ka8B2LOzRHhyMUd53Gg6HAz6hd4bo7cQhlg4=
Subject key identifier:   2F:60:AE:F9:F7:8C:42:81:1C:11:B4:39:F5:04:83:A3:55:FE:A8:DA
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer:       /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial:       018F8937DDCC7AFA0242EF3986662BF83175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number:          0FC7
Signing time:             Sat 18 May 2024 01:01:30 +0000
Manifest this update:     Sat 18 May 2024 01:01:30 +0000
Manifest next update:     Sun 19 May 2024 01:01:30 +0000
Files and hashes:         1: 1-fOtLCEip_cQmd0fYXtz6ZS5KC4.roa (hash: fII76EazRJLSng2UTYKDT3nLIKk/Wv/XQiwGHdZ74mc=)
                          2: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: JpQ5Vv/Qtkt4dJIU679nS9U59dVll9GFTx0EmLBT1qI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:dd:cc:7a:fa:02:42:ef:39:86:66:2b:f8:31:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
        Validity
            Not Before: May 18 01:01:30 2024 GMT
            Not After : May 19 01:01:30 2024 GMT
        Subject: CN=2f60aef9f78c42811c11b439f50483a355fea8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:9f:d4:dd:bd:5e:0b:e8:f9:c0:e9:5e:20:
                    2a:75:4a:77:6b:1e:73:31:83:af:b2:59:16:d9:aa:
                    ce:fd:de:e5:52:68:b5:c5:e5:ab:53:12:e9:14:9d:
                    44:07:1f:be:fc:5a:0b:77:03:b0:59:da:00:3f:05:
                    e9:b4:06:5d:60:72:b7:b6:e1:33:54:d9:b6:9d:1e:
                    66:29:58:49:cb:a8:cb:0b:db:6e:be:bc:5a:67:fc:
                    1b:31:b0:0f:92:a6:85:f2:18:98:93:88:9a:55:b2:
                    46:08:fd:4f:fd:ed:36:d0:61:f2:cd:27:19:29:ff:
                    d0:61:b1:c4:34:ef:1e:e1:1e:e4:c7:52:fb:e8:bc:
                    c0:e5:ea:21:03:15:e1:af:98:53:58:4a:cc:8c:4f:
                    16:2d:61:8b:9e:33:5a:85:74:c5:be:80:c4:dd:c0:
                    6f:7c:7f:e7:4e:1b:b5:56:43:4f:4a:44:82:32:62:
                    8c:26:b0:1c:5a:c7:84:c9:35:6e:00:7a:a4:a1:75:
                    76:7f:79:2c:be:65:84:ec:b4:40:16:6e:8f:59:68:
                    cc:01:0b:e6:11:63:f0:c4:30:d3:c3:7c:b8:62:b0:
                    43:04:ec:aa:79:81:a3:9a:48:5d:33:52:b9:03:00:
                    94:b5:a8:b5:df:8f:fb:b5:59:9a:ef:82:e0:ab:4e:
                    f9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:60:AE:F9:F7:8C:42:81:1C:11:B4:39:F5:04:83:A3:55:FE:A8:DA
            X509v3 Authority Key Identifier:
                keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3c:fc:90:4f:75:0d:9c:78:9d:5a:fe:3d:fd:fd:31:78:88:
         ea:a8:06:51:f2:bf:7a:34:70:d4:0f:13:87:34:f8:70:7f:ee:
         27:c9:ee:f1:37:89:45:5a:81:82:be:1f:af:23:51:4b:dd:b5:
         87:99:93:72:33:dc:17:5d:5e:08:e5:bf:29:6f:b0:12:02:6e:
         b2:e9:ad:93:a1:c5:61:e9:0b:3b:7a:27:6d:21:f6:fc:00:2d:
         52:38:ce:39:0f:c7:70:95:37:fb:ce:df:0c:ad:81:84:7b:72:
         cd:11:2e:30:52:75:bc:26:a1:58:4d:70:fe:36:da:4d:31:5b:
         83:3d:55:29:aa:3a:2e:7b:7b:70:b6:1c:b9:5b:1a:65:ee:08:
         ad:9d:55:13:c6:42:8d:b5:be:2d:b8:e8:4a:b0:74:32:b4:bb:
         02:d7:93:5d:4a:9f:30:9b:14:ec:89:6f:b5:07:49:c1:cc:6f:
         35:81:ec:c0:e5:63:a9:47:41:e7:9e:1f:7c:91:e3:ce:6d:e6:
         cb:c6:69:3b:ed:fe:d9:43:96:44:0a:99:84:aa:c3:73:4a:c9:
         46:f3:bf:ac:22:df:df:f6:e9:55:10:b3:61:4b:48:06:d2:3b:
         5b:9d:89:1d:df:d4:ac:d4:a2:7b:58:36:74:48:7f:01:3e:93:
         a3:2a:9b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:04:48 2024 by rpki-client on console-ams.rpki-client.org