Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
File:                     ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json)
Hash identifier:          6uJin//qXOcpcgkmv7Y6w3ZggyjAcdDXt8+g2KgHyow=
Subject key identifier:   6F:EA:1F:7A:97:1A:B0:61:DA:06:B3:26:63:E1:E6:F6:F5:3B:AB:AC
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       018F23B893F8616BCF4CE7E5EDA28D75EFBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
Manifest number:          1147
Signing time:             Sun 28 Apr 2024 08:00:50 +0000
Manifest this update:     Sun 28 Apr 2024 08:00:50 +0000
Manifest next update:     Mon 29 Apr 2024 08:00:50 +0000
Files and hashes:         1: 0BS1vS0dD_e46sXe0ppPr-pm48M.roa (hash: k2gSkkoZiBXZ+6Ti+oOOmPrDyn1fWAWuOQYnf2/w1kg=)
                          2: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: 2422aemzkTlJozOxEnQ70xn/2+SSuW8lgqbPzyAlFr4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:b8:93:f8:61:6b:cf:4c:e7:e5:ed:a2:8d:75:ef:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Apr 28 08:00:50 2024 GMT
            Not After : Apr 29 08:00:50 2024 GMT
        Subject: CN=6fea1f7a971ab061da06b32663e1e6f6f53babac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:19:64:2e:1d:fc:0a:4d:72:04:f1:5d:3f:71:
                    e1:6f:96:df:39:8e:64:25:89:2f:be:fe:85:79:6a:
                    3a:24:8b:19:1e:b3:57:0e:11:fc:ac:b0:ac:1a:0b:
                    13:fc:1c:d2:02:0c:93:29:27:53:52:49:6c:70:08:
                    f7:20:47:3e:87:7d:01:9e:4b:cb:7e:d5:2f:5f:9d:
                    cf:e9:7f:db:1b:74:9d:84:60:bb:19:2c:43:2f:00:
                    e5:f5:97:67:5f:19:e0:f2:1b:77:80:cc:86:8d:5a:
                    b6:c3:40:e6:c9:c3:7e:22:3f:89:42:9d:7b:ee:3c:
                    0d:e9:a9:35:ac:b5:fe:2b:38:bc:8e:29:7a:ec:22:
                    c8:0e:3e:ff:34:fc:d0:5c:5b:3f:5a:55:63:ff:a7:
                    85:c1:9e:88:4d:b4:05:1b:bc:cd:c7:fe:64:91:f3:
                    ba:d6:6d:e8:58:b3:fb:8f:f4:ec:e3:36:9c:e8:d7:
                    9a:55:9b:c5:f1:ab:b1:9c:78:72:83:0e:8b:d1:37:
                    b3:df:bd:e8:94:6a:5a:af:ee:aa:02:93:c3:31:31:
                    d5:5a:03:12:b8:19:9c:69:c1:6c:00:95:34:d1:a3:
                    d5:22:b6:c9:72:b9:8f:7c:ec:7b:39:4f:c0:90:05:
                    a9:e4:34:3b:ce:b1:7d:87:27:de:8b:fc:3c:f2:bd:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EA:1F:7A:97:1A:B0:61:DA:06:B3:26:63:E1:E6:F6:F5:3B:AB:AC
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:1e:c8:8a:21:dc:42:71:5f:a7:99:df:4b:70:0a:fa:ac:
         8b:d8:a1:15:55:66:b3:aa:3f:73:00:18:d9:3f:f1:73:4e:21:
         f4:25:85:e0:6b:4d:da:bb:13:17:2f:0a:f3:c5:b0:db:eb:c4:
         de:87:ba:4e:3f:bc:2b:88:e8:0d:00:b0:5d:89:94:69:f7:1a:
         54:a0:ca:8c:5f:63:cd:29:49:fe:95:b3:ce:17:a7:32:e5:8d:
         de:c6:da:77:e1:39:a6:9c:e7:e3:55:f9:e3:db:47:12:60:af:
         44:6e:5d:bb:fa:74:ff:15:09:1d:0f:93:43:35:95:47:cc:8e:
         7d:98:d7:05:f7:40:59:7a:f7:94:d3:c3:6c:27:34:33:32:38:
         2d:23:36:1e:dc:b1:0b:4e:8f:c9:f2:b7:39:e6:78:bf:f4:71:
         08:c0:86:6b:a5:5e:d9:73:3a:3d:f4:df:92:a8:5a:71:af:c0:
         e8:27:f2:2d:d1:f3:5c:6a:55:5b:e7:eb:b0:e7:07:66:36:6e:
         aa:05:8f:2a:fb:27:2f:98:da:33:f5:ca:11:ff:f8:8d:35:2c:
         f4:57:70:63:e5:14:93:2f:62:4c:e8:09:01:2e:12:6d:c5:50:
         73:35:81:74:83:3c:2d:02:f1:f9:39:dc:ca:04:77:b3:4a:20:
         66:dd:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:13:52 2024 by rpki-client on console-ams.rpki-client.org