Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File:                     qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier:          Vk7WSJxvgk28XsgdhA5eyB9rG9W70vePuhxbUzLD/iw=
Subject key identifier:   FF:3D:98:1F:C7:8C:30:E8:8E:59:DA:12:D7:3A:1D:88:BC:33:BB:E3
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer:       /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial:       018F87487D08D3B1BAEE895CD2FD00C57F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number:          0998
Signing time:             Fri 17 May 2024 16:00:25 +0000
Manifest this update:     Fri 17 May 2024 16:00:25 +0000
Manifest next update:     Sat 18 May 2024 16:00:25 +0000
Files and hashes:         1: QCm7EVj11gasZhs4X-rXZkLm98k.roa (hash: D3MMW8jCxUpqkVP89nyXIQ8Ll8EICdJCYUVafIX3C5Y=)
                          2: T1mLTrp9UbnK5HGIs4IXjBC5HDA.roa (hash: CHGOmSynDDB0OmcoXXIud/buO3odO6IZM+2xGXxHAY8=)
                          3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: IfZ8EtmVqqZHe1gS+pbpdq4LnaJn/UfpHJc/nbyouNo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:7d:08:d3:b1:ba:ee:89:5c:d2:fd:00:c5:7f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
        Validity
            Not Before: May 17 16:00:25 2024 GMT
            Not After : May 18 16:00:25 2024 GMT
        Subject: CN=ff3d981fc78c30e88e59da12d73a1d88bc33bbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:9b:54:ec:11:3a:a1:06:8a:ee:eb:65:6f:
                    51:71:7c:3e:0b:9a:75:3d:a0:84:7d:55:98:ee:38:
                    ed:7f:d1:4e:b0:eb:c8:9d:b4:60:e5:0e:67:41:56:
                    96:2f:84:27:28:14:2d:0a:3e:ad:e9:a4:6d:c0:3b:
                    a6:e8:1e:c7:93:18:85:6e:51:8c:7d:2b:5d:91:94:
                    fb:8f:1a:75:3f:70:4a:4d:ff:4d:ed:b1:a3:8b:0f:
                    29:66:3e:2c:c0:a8:0f:e6:29:c7:a4:b8:a7:3e:be:
                    69:3a:4d:3f:cb:06:54:e5:35:9d:07:b8:c4:cd:c2:
                    50:49:25:25:18:2b:51:05:11:b0:7e:50:3a:ef:79:
                    21:88:0e:9d:e9:b1:2b:02:fd:1a:7a:d0:8b:9d:75:
                    70:2a:f4:01:4a:af:23:26:a5:6d:b7:51:cd:24:29:
                    54:5e:a2:a5:15:e8:35:9d:fd:9b:9f:df:e6:a6:ce:
                    5e:6c:24:7d:cc:1c:22:0a:9e:a1:1c:68:ce:91:96:
                    45:18:8e:ee:1b:6a:09:06:0f:96:86:44:c0:36:9c:
                    33:04:f4:e4:ae:de:d4:13:1e:05:91:a5:38:33:36:
                    c2:ac:79:ed:05:58:a1:60:be:9c:1f:63:5a:20:cb:
                    f1:c3:4d:de:40:ca:14:8d:98:e9:70:91:f3:dd:cd:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3D:98:1F:C7:8C:30:E8:8E:59:DA:12:D7:3A:1D:88:BC:33:BB:E3
            X509v3 Authority Key Identifier:
                keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0f:76:ea:6d:92:b5:40:9a:ef:7e:08:7d:b5:3c:35:e7:20:
         e1:1b:58:44:9c:02:bf:45:ca:04:3f:03:e8:a7:12:71:f9:87:
         1f:df:1a:3c:3a:52:25:95:82:67:85:0c:1a:b9:38:df:e3:cf:
         92:71:ba:91:e5:7a:65:ca:02:33:1b:ce:24:01:ca:fa:6d:bf:
         f0:7e:3d:fb:c7:1c:9a:fd:27:be:a4:1a:f3:3b:ef:a8:36:d5:
         52:20:56:7e:52:7d:ac:6e:03:e6:2f:8b:92:4d:8c:7f:fd:6d:
         c9:df:ec:2d:8b:7c:fc:2f:f8:9d:29:4c:ed:7e:76:18:b9:65:
         54:55:bb:3c:93:ca:38:1f:0e:5f:41:bb:6b:5f:b9:f1:37:8d:
         a8:e2:7f:be:d7:b1:be:80:44:b8:bf:c6:a7:e1:c3:6e:64:bf:
         61:5f:ba:7e:6f:5e:d6:b0:84:34:19:79:94:95:89:53:36:f5:
         c0:35:ef:95:ad:da:bb:af:28:03:07:68:85:ad:9b:9b:1e:e1:
         2c:09:37:9b:fb:4c:b9:2f:c1:f4:c9:5e:ef:5d:80:06:e1:15:
         21:82:3e:d1:c8:d2:8e:45:b8:b6:29:23:3c:02:65:4c:82:50:
         cf:2b:04:ea:9b:d1:db:ed:67:06:09:d3:e7:11:02:70:77:7b:
         33:c5:58:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:34 2024 by rpki-client on console-fra.rpki-client.org