Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File:                     Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier:          98WIRp4M0tCya8CjHt7LAZsoYbgoVW3yZjlHnlu78as=
Subject key identifier:   6F:45:16:1B:B8:11:AB:C2:29:1E:E1:46:F5:9A:13:BA:8B:10:35:86
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer:       /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial:       018F8749D789A0077639B1CBDECB4F395306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:54 +0000
Manifest this update:     Fri 17 May 2024 16:01:54 +0000
Manifest next update:     Sat 18 May 2024 16:01:54 +0000
Files and hashes:         1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: YH29PAaakms1DCx8Bx0Hioi/0bVP0rFZ29b4wwu57c4=)
                          2: egCI52KnaV7aDrV_6dd15VPE1Ak.roa (hash: nncxfeECAE6f8NA7yt4c7KoG1rl6mXK+qX6gkZi3/wk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d7:89:a0:07:76:39:b1:cb:de:cb:4f:39:53:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
        Validity
            Not Before: May 17 16:01:54 2024 GMT
            Not After : May 18 16:01:54 2024 GMT
        Subject: CN=6f45161bb811abc2291ee146f59a13ba8b103586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:97:59:30:06:52:b2:1e:36:6f:e4:bd:e0:
                    b1:74:db:c5:ba:2a:77:d1:13:2a:e1:aa:03:f1:7f:
                    da:e9:32:92:71:d7:a0:ef:15:d7:e6:2c:53:c2:37:
                    91:6a:1d:4e:a3:f7:bf:52:4e:ce:01:6f:94:d3:ca:
                    c0:8b:8e:ad:a9:83:a6:3d:cf:f9:67:39:36:b4:66:
                    f5:be:73:11:3c:59:86:40:1b:88:be:3a:94:e7:46:
                    ca:5d:58:b8:9e:84:41:ed:63:98:32:71:29:b7:e5:
                    85:eb:22:f3:1b:fb:ed:ad:72:80:88:ec:2b:6f:7b:
                    4e:06:ac:61:39:55:2b:ad:9c:98:05:23:e7:46:49:
                    a7:d1:fa:f4:d4:36:da:67:3c:1d:f3:71:11:a8:ec:
                    7f:bd:00:66:63:f6:59:86:f4:8d:c9:63:f6:7f:3b:
                    31:28:78:69:d6:8f:0e:b6:ea:a9:ca:07:b1:4d:d8:
                    38:76:4d:c4:11:57:d1:28:f9:12:a8:70:22:c8:2a:
                    4a:6a:94:4b:3f:09:45:5b:9c:a7:06:b3:d8:78:8f:
                    97:6d:e4:3c:eb:1f:14:2a:56:ea:fe:13:22:6e:2a:
                    9d:fd:f2:1d:77:74:9f:e6:aa:ea:61:ef:28:70:e6:
                    af:70:fb:ed:56:76:55:2c:7f:3a:84:9d:aa:3f:d5:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:45:16:1B:B8:11:AB:C2:29:1E:E1:46:F5:9A:13:BA:8B:10:35:86
            X509v3 Authority Key Identifier:
                keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:16:b8:d7:23:f8:2c:73:ac:96:14:23:38:d4:a7:0d:47:
         5e:d4:dc:b2:aa:49:c1:01:0f:68:81:a0:7b:20:40:86:3f:84:
         5d:a0:49:94:8e:0c:d5:b5:94:84:ef:3c:aa:2f:24:5e:c8:81:
         40:36:ea:78:f3:64:ac:28:92:84:fb:d3:8d:0e:35:0d:06:a3:
         43:cf:fb:6a:b1:a3:e8:90:b9:9d:c7:ce:2b:07:df:1d:e1:0e:
         ab:40:b3:b4:b8:77:5e:9a:86:4c:7a:bd:6a:94:0b:96:08:42:
         26:4f:d5:71:5f:08:20:2c:00:7e:1d:b0:01:10:c1:1b:71:f9:
         9a:26:e9:b3:69:16:7e:bf:84:46:2f:57:fc:3e:0d:78:1a:c9:
         21:0a:b2:54:28:3f:4b:56:f0:07:d3:94:29:9a:6e:c1:f4:65:
         2d:c4:eb:d8:a0:18:59:de:81:88:55:75:a1:99:13:b3:32:b5:
         70:68:08:24:8f:6b:ef:64:f9:dd:e3:0f:89:f8:ff:28:7f:91:
         8b:b7:a0:23:30:08:e2:ae:72:fc:70:ce:1e:c9:ea:67:35:25:
         70:0e:8e:1b:ee:06:d1:b1:df:1d:5b:14:b8:1d:98:41:c4:cc:
         86:29:3f:e9:ee:63:95:4e:60:cf:d7:be:d6:30:69:76:ab:a0:
         ae:ef:bf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:36 2024 by rpki-client on console-ams.rpki-client.org