Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File:                     QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier:          MajBBYvYcJDdnqaI6qKGx1RmdZSnQH8TE2GUbyPPOYs=
Subject key identifier:   42:C9:C9:78:1A:88:E2:AD:DF:C6:2D:5E:70:C6:16:E0:6A:58:00:1F
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer:       /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial:       018F87ED80D3E6729A129DED896919A6E3C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number:          0EB1
Signing time:             Fri 17 May 2024 19:00:40 +0000
Manifest this update:     Fri 17 May 2024 19:00:40 +0000
Manifest next update:     Sat 18 May 2024 19:00:40 +0000
Files and hashes:         1: Gin6T3dsFfBFNzpAFSA7PquXNH4.roa (hash: 8RYd4lZteZcaaaTEX0wfHgw6tY3pLC089+EOILGATIo=)
                          2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: ESSvg8YKtuVpyCXKkJc2ry2Z7MXbr/8Wn/BBUKSYmGM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:80:d3:e6:72:9a:12:9d:ed:89:69:19:a6:e3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
        Validity
            Not Before: May 17 19:00:40 2024 GMT
            Not After : May 18 19:00:40 2024 GMT
        Subject: CN=42c9c9781a88e2addfc62d5e70c616e06a58001f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d5:6d:19:30:4a:de:a9:fa:47:83:35:15:0b:
                    41:83:ac:e5:8e:8c:8b:e2:f7:b1:8e:18:92:26:0d:
                    ee:09:04:b2:cd:a6:92:1b:17:9f:81:1d:5b:ce:51:
                    d6:a1:40:b9:50:19:8f:dd:f1:08:18:3d:b6:04:a5:
                    e9:63:fe:6b:02:f0:ad:89:b0:d5:25:80:0c:78:32:
                    1d:de:24:ad:14:cd:91:f9:bf:c0:30:2e:f8:62:87:
                    06:1c:d3:55:59:cc:16:a1:ec:19:b4:1c:ce:4f:50:
                    13:24:14:88:bf:02:8f:76:41:70:d9:bb:7a:6d:22:
                    8e:b9:b1:c9:16:56:1c:d3:46:69:15:f2:95:4d:b2:
                    c8:1d:8d:50:4c:1c:d3:7a:e0:ad:5f:80:9b:03:f0:
                    d0:68:ba:9c:72:e9:73:98:2f:fa:15:bd:44:34:6a:
                    e3:ec:5b:f0:85:37:e3:79:fa:ae:31:87:5f:8f:12:
                    06:70:12:8a:81:28:d7:c7:f6:b2:c5:64:59:ee:94:
                    c3:e6:9b:ee:41:d5:1a:36:1f:2b:ec:64:c3:6a:e3:
                    57:1f:6e:6e:98:15:f0:e0:53:fa:ce:3a:d8:4e:27:
                    5f:16:c5:d5:14:e4:b8:e1:2b:3d:4f:76:45:97:4f:
                    06:be:80:8f:c6:80:ca:c5:a3:30:1b:4f:46:1d:46:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C9:C9:78:1A:88:E2:AD:DF:C6:2D:5E:70:C6:16:E0:6A:58:00:1F
            X509v3 Authority Key Identifier:
                keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:19:06:01:6e:5b:81:1b:13:17:73:8c:fd:07:48:e2:71:af:
         60:39:14:28:e2:dd:f8:e3:87:4c:31:af:cc:1a:cc:c1:17:5a:
         2b:71:b7:98:a3:a0:1d:eb:68:8a:4d:e0:b1:01:e4:0a:a8:4e:
         7d:76:fc:1d:e7:fd:8f:59:d9:81:f4:27:1b:1f:89:46:cf:de:
         2a:08:0c:ac:0b:90:ab:f9:71:7d:22:88:3a:9e:cd:f9:42:5f:
         0e:f3:6e:8a:2a:35:a4:6b:c4:bb:90:e7:67:57:cc:b3:1d:77:
         c5:77:8a:8f:e3:5f:34:3f:ad:75:7b:3a:f8:1f:51:8c:a4:84:
         84:2f:8a:c3:ba:1d:98:23:16:30:ac:c0:16:d1:af:92:6e:1d:
         20:15:ef:45:bf:37:b9:4f:8f:2d:02:0d:d0:98:67:6a:76:54:
         d2:20:45:75:c0:17:dd:5f:3d:83:67:3b:47:30:2a:a6:18:7a:
         51:29:d3:5b:5e:c7:92:13:3a:12:9e:48:30:76:50:aa:59:c2:
         08:35:9c:82:28:1c:d7:73:f3:eb:56:96:ad:2f:d1:bc:2a:98:
         2e:39:b7:a7:42:d3:a8:59:b4:40:7e:44:9b:6c:be:a4:f6:3b:
         4b:36:ac:fc:ff:43:c7:f1:c5:23:fb:06:f5:e2:08:a7:47:a0:
         88:46:b9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:06:17 2024 by rpki-client on console-ams.rpki-client.org