Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File:                     Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier:          5m8A9JVCamvJ4ILfss0DINCIVc1uEgMbz3/icEczOPQ=
Subject key identifier:   A1:1F:2A:DB:EA:2C:CB:82:99:F2:5A:14:AA:D6:32:8E:D0:C3:41:4C
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer:       /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial:       01906E2B24EA8440645016B9D187565B6247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number:          98
Signing time:             Mon 01 Jul 2024 12:00:39 +0000
Manifest this update:     Mon 01 Jul 2024 12:00:39 +0000
Manifest next update:     Tue 02 Jul 2024 12:00:39 +0000
Files and hashes:         1: NRmmLHL0knTruqzxV_WeJCi85rw.roa (hash: gMKgLmCQjygCIQx14vESsx2UnOgP1dnPyr9krtrAEaI=)
                          2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: 5pPVdXCMGpziT7ZHoy0yAlmlOoMfmVpem9Zfo1pJbz0=)
                          3: wG0DKdNraDsbCCiCFmfkeUFIvIw.roa (hash: UM+WV1RJFZrAO6Gd6ZSZfzxZmXn3A4lfrB9MHc7LImk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6e:2b:24:ea:84:40:64:50:16:b9:d1:87:56:5b:62:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
        Validity
            Not Before: Jul  1 12:00:39 2024 GMT
            Not After : Jul  2 12:00:39 2024 GMT
        Subject: CN=a11f2adbea2ccb8299f25a14aad6328ed0c3414c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:9e:82:18:92:b0:ad:b7:13:3a:3a:51:f3:
                    b9:3b:e9:5e:b8:0d:82:48:df:e7:62:c8:fb:e6:e0:
                    28:d4:9b:37:6e:40:5f:4a:f7:a3:d2:59:cb:6f:bb:
                    6f:21:4d:f5:3b:5f:73:6b:9a:5e:8e:0e:3a:98:aa:
                    cd:40:b9:7e:21:ff:f1:ca:2d:47:5a:51:58:df:41:
                    a5:17:4b:30:04:bf:17:f1:f7:a6:3b:69:c2:5f:32:
                    9d:3a:b0:44:57:8b:fc:90:f0:58:b8:00:55:f8:84:
                    b9:7f:34:6e:7e:5a:b2:b1:9b:3c:dd:f5:65:7c:b7:
                    41:86:27:13:42:46:b2:db:e1:d9:bb:78:80:f0:66:
                    74:a9:2b:00:34:1e:8e:c5:03:12:4f:eb:ce:2e:20:
                    8d:85:d6:7a:67:99:83:ba:47:4d:71:2e:6b:74:54:
                    7f:a4:67:23:dc:24:b6:b9:89:86:dd:57:98:46:71:
                    eb:f2:e7:3b:b9:61:ab:49:7b:d4:3d:84:16:b0:bf:
                    ce:e0:58:94:42:d6:00:77:2b:a2:d3:65:db:80:cb:
                    82:af:75:94:87:63:c8:f3:c5:8c:79:e2:8a:43:c0:
                    9c:32:68:d4:72:87:11:40:b4:96:e2:f9:0f:52:23:
                    5a:16:b7:e8:59:38:24:73:2b:71:fe:12:08:d0:77:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1F:2A:DB:EA:2C:CB:82:99:F2:5A:14:AA:D6:32:8E:D0:C3:41:4C
            X509v3 Authority Key Identifier:
                keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:cb:c6:2c:44:d1:22:af:31:bd:43:c6:12:00:e5:7f:37:
         18:76:53:c7:8c:6c:b5:22:a5:d1:1b:c3:ca:04:77:c2:17:07:
         36:7a:89:44:52:ba:42:2c:ed:d8:1f:aa:72:48:2c:77:d4:f1:
         2b:bc:c1:5a:f0:b4:1d:79:30:7d:2b:f9:57:e5:95:35:04:79:
         1a:cb:79:45:c4:24:73:03:2e:21:ba:56:cb:e7:88:fe:1f:4a:
         d0:8d:60:a6:9d:7e:d0:29:de:c7:9f:12:88:19:b5:8e:1a:27:
         ea:65:ac:f0:d4:d0:bf:5f:85:85:ed:3c:c3:50:62:39:5c:bf:
         84:a8:f7:3f:02:cd:a2:f5:91:7a:c7:06:7c:e9:07:dc:91:0a:
         6d:52:a7:68:aa:c7:ff:e6:8c:b2:12:78:84:b3:3c:82:f0:10:
         8f:b0:33:3c:e7:cc:3e:4c:83:a9:6e:b5:f2:2f:ff:c6:45:e6:
         e5:2c:a9:5a:0a:4d:da:21:71:50:7c:95:10:a2:31:75:68:4b:
         f9:d5:75:14:d9:10:54:a1:51:f9:8c:fc:0d:d8:56:cf:4a:da:
         9b:4c:bc:60:5e:48:35:4a:5f:da:6c:38:b4:5b:41:62:1c:14:
         f7:88:8d:c9:b1:ee:9c:12:e1:18:8b:07:50:9f:6d:bc:44:7e:
         6a:bf:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:17:56 2024 by rpki-client on console-ams.rpki-client.org