Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File:                     qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier:          GsjhNDD3vUpT2z/RTTcmADVoQy+9kZPN6GRioIDQAXg=
Subject key identifier:   DF:D4:B4:25:E8:73:C4:2B:C8:4D:3E:2A:A2:34:F5:DD:D3:32:D6:19
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer:       /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial:       018F8DEF43F5D6C791A124EB370B9905A0D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number:          119A
Signing time:             Sat 18 May 2024 23:00:18 +0000
Manifest this update:     Sat 18 May 2024 23:00:18 +0000
Manifest next update:     Sun 19 May 2024 23:00:18 +0000
Files and hashes:         1: Jmw7WXkJ5J3o6C_a5u_1lV5Gsmk.roa (hash: jjc7y9z65pwjr9NdcimuLZ7KBmMDJqmswGKZahE4j2c=)
                          2: UTHwuRRSRYgE5jL7-vPdsU5HrPU.roa (hash: Ao/Fqbtw360cb4ZrYqcqXCHYaAAdZUaoHDLsOeq8OaE=)
                          3: mZ-px8f9ex4hz7E5GzgYuKVQJls.roa (hash: yX7CiGFJbBmCF4RxTgpMsqkhWsBXKWVM3GZcdVFlPcw=)
                          4: pD4Zi3m_ygu_NqrFi8K3YM81vrg.roa (hash: r4d45vuy1GeEw8Cbp7vzYM5/1WnOZdlRANHy7dDomd0=)
                          5: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: H4K4HHbxV29JYSDjjh37zi/OaIsEeRzX5ooplM2PCQg=)
                          6: rIvf5CnL1V-TiBXcApzAypP4u9Q.roa (hash: iEDqV6UMu7z39Ineq1eQoG1TrLP3Qs0NINPRs5/Z9Lo=)
                          7: xYhnXmcHxxePg4vso1UVOQe0oT4.roa (hash: rr4nrK6ABicUwiga84F35VfkIxAiKckAU+UV5vZ+QeA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:ef:43:f5:d6:c7:91:a1:24:eb:37:0b:99:05:a0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
        Validity
            Not Before: May 18 23:00:18 2024 GMT
            Not After : May 19 23:00:18 2024 GMT
        Subject: CN=dfd4b425e873c42bc84d3e2aa234f5ddd332d619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:31:ae:50:d0:ca:bd:eb:49:0f:4d:58:08:
                    f8:d3:09:69:b2:d2:c8:0e:d5:74:fa:8b:04:92:16:
                    4b:57:7d:b0:1d:83:7b:87:2a:db:f3:ed:28:7d:b5:
                    33:b8:1d:8a:e3:5e:b1:54:46:b9:76:97:05:ff:4c:
                    04:47:8f:d2:dc:7f:16:9f:b5:aa:25:59:36:c2:24:
                    c1:0e:5a:67:1b:f0:cd:38:41:17:2b:de:e6:c6:dd:
                    3c:36:17:2a:c5:e8:3a:28:c1:24:f1:1b:bc:85:85:
                    c5:08:3d:83:fe:6a:60:bf:3a:2c:5c:43:a2:10:70:
                    73:45:cc:c3:9e:11:25:0a:b7:8f:8c:80:b5:c6:91:
                    57:4d:5c:e7:e1:8a:01:8e:93:32:bc:58:a4:9f:93:
                    5d:45:fc:18:00:57:6b:eb:77:b1:9f:10:2b:dc:9e:
                    af:7f:41:e0:7b:cc:58:0a:11:48:18:d2:aa:3d:61:
                    e1:1d:47:52:63:cf:a3:67:92:5a:eb:28:5f:cf:43:
                    16:e6:11:ac:7e:00:ab:a0:1b:86:6b:eb:0b:73:c0:
                    ab:9d:5a:8c:c3:8b:c7:f5:00:08:ae:48:8e:6b:a3:
                    05:07:04:c8:dd:01:12:96:49:25:0d:c6:b9:91:00:
                    c6:8d:56:ee:67:bb:9e:2a:03:6d:1a:7f:01:87:1b:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D4:B4:25:E8:73:C4:2B:C8:4D:3E:2A:A2:34:F5:DD:D3:32:D6:19
            X509v3 Authority Key Identifier:
                keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:eb:cc:93:63:36:15:45:82:6a:06:6d:ef:0f:46:de:ca:2c:
         e6:0f:06:c3:ed:48:b4:1b:e5:1e:e8:d7:56:8b:4e:0c:ec:55:
         91:2c:03:e7:99:7e:a0:d7:93:dc:2f:a8:bb:3b:52:85:36:05:
         26:25:62:cf:55:2d:91:c8:c7:6b:73:43:5d:0f:11:35:79:79:
         ac:5d:61:52:51:22:2c:ec:5c:b6:f7:30:65:16:fe:9a:18:3d:
         e2:d2:66:fa:e7:2b:a0:0d:f0:79:e6:a9:26:3f:c7:72:14:0f:
         a3:f3:0e:a4:f3:02:4b:d1:36:28:83:31:ee:0e:e3:ac:48:56:
         49:8b:28:ce:59:87:dd:5e:08:d3:99:1a:40:f4:f9:48:dd:d2:
         24:af:89:0f:0a:94:5c:36:2b:3e:f0:7b:4b:6c:1f:de:f3:aa:
         99:12:35:a7:98:fd:64:65:05:db:14:50:2e:7d:f1:ef:2b:dc:
         9e:9d:c3:d9:66:60:58:f7:60:27:bf:15:68:54:f0:f6:f6:bd:
         2d:25:1e:79:d7:07:93:5a:ec:82:5a:64:52:d4:a2:71:7d:e0:
         91:45:2d:d5:20:e2:b9:b1:e8:59:e6:df:e6:a7:50:cc:1a:30:
         f3:d5:9b:38:74:e7:88:3a:d1:c2:18:e0:49:fa:7d:af:0a:2e:
         b4:f1:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:57:48 2024 by rpki-client on console-fra.rpki-client.org