Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File:                     qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier:          LhVr05bzW1fAPrvwL/ggsXf1l6LlJlfNPR6HwYQNZsQ=
Subject key identifier:   FE:36:C6:10:F3:C3:E2:80:D4:AA:E8:9A:BA:93:1A:13:42:06:72:F5
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer:       /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial:       018F89381D85F2BC49F75E6AB1179BA9011D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number:          0EC5
Signing time:             Sat 18 May 2024 01:01:47 +0000
Manifest this update:     Sat 18 May 2024 01:01:47 +0000
Manifest next update:     Sun 19 May 2024 01:01:47 +0000
Files and hashes:         1: Q5eFZb_pwNfi9XDuaQZxtCMWKQI.roa (hash: jEm9Gc/5vUP3/3lafxd2HLmVZDYZ8x82J+fm2ghDm8k=)
                          2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: srjsy7uaBu5EabVN4kkM5aFEv8qDPu3EuZCmP6r/uJg=)
                          3: r7GtwL33NPcsZrXjfl1V9hRqf7w.roa (hash: L1Lw7EUY5rxGNGLxVH79z36x4UCCS5gXs0EOkx8+uzI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:1d:85:f2:bc:49:f7:5e:6a:b1:17:9b:a9:01:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
        Validity
            Not Before: May 18 01:01:47 2024 GMT
            Not After : May 19 01:01:47 2024 GMT
        Subject: CN=fe36c610f3c3e280d4aae89aba931a13420672f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:7a:5c:3d:7a:8c:86:33:99:07:81:33:b9:
                    02:1a:36:26:1f:79:da:19:95:1d:b7:3a:94:7b:56:
                    51:14:99:32:96:3e:5a:83:bd:cb:0f:83:92:39:81:
                    c6:e3:28:a8:1b:b6:f7:bb:0d:c1:15:59:25:e0:6d:
                    0e:3d:5b:9b:0d:5e:45:72:75:2a:75:9b:de:40:eb:
                    3d:1d:b6:d7:d6:fb:1d:a2:a0:57:96:60:b7:9c:65:
                    08:61:73:b7:4f:0b:fb:27:a9:b3:7f:d0:57:14:c7:
                    78:73:4f:62:23:51:87:d5:f0:db:ca:a9:20:80:74:
                    c1:5b:b6:df:49:60:24:25:6d:13:59:b9:49:ac:4d:
                    bd:29:75:4b:b2:d2:68:c4:4e:00:ec:26:19:a1:0b:
                    8d:e2:9d:0b:4a:ae:66:5f:29:86:b5:a1:94:5c:68:
                    62:9e:4e:9f:32:0a:77:3e:03:c8:81:60:1c:13:42:
                    39:2d:0a:4b:2d:27:6e:c1:49:26:5d:4f:9c:99:77:
                    ba:5e:1c:0c:05:7c:35:de:c4:7a:84:cf:02:e7:51:
                    42:1e:fd:9e:a1:1a:41:d2:5c:31:45:82:e8:ba:49:
                    f7:b2:0a:63:be:21:0b:81:1f:c5:0a:85:d5:2d:33:
                    3b:4e:b3:fc:19:1a:13:d4:4d:98:87:0c:92:87:86:
                    31:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:C6:10:F3:C3:E2:80:D4:AA:E8:9A:BA:93:1A:13:42:06:72:F5
            X509v3 Authority Key Identifier:
                keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:60:d3:d6:15:8b:e8:bd:92:74:99:27:fb:48:90:c6:1f:38:
         a7:6c:93:2c:6c:89:d1:c1:25:75:c7:91:b2:99:7c:5b:b3:69:
         d4:99:60:c4:dd:e2:06:fa:a3:42:01:65:e1:2d:dc:61:25:83:
         48:63:4f:6d:9f:4e:37:2c:06:4b:e5:e3:47:fc:d8:48:1c:8f:
         d6:d8:4a:bd:73:d4:f7:0c:25:e5:1e:05:52:2d:ae:ac:4c:68:
         62:bd:9a:42:3d:82:03:90:c0:0a:5b:ca:2c:45:7d:aa:5d:42:
         14:d4:90:1f:9a:8a:44:b9:e7:bd:a0:1c:fa:0a:d9:dd:fd:d5:
         dc:4b:80:48:59:7e:16:7b:13:c8:64:33:ff:63:3f:ed:ff:11:
         f1:1f:c8:68:a9:b6:b9:96:90:5d:a5:c7:8e:62:51:4d:a5:f5:
         de:74:ff:4e:2f:ec:0c:50:ab:43:42:fc:0c:e3:d0:47:a8:47:
         4e:d9:ff:41:4e:aa:27:d9:a2:18:8a:45:0e:f6:18:11:60:09:
         1f:15:59:41:8e:4d:ef:89:a8:38:31:f5:ce:93:13:0a:4b:3f:
         e4:df:db:81:f5:a8:23:29:94:ba:06:de:56:a7:0c:4e:d4:93:
         79:16:eb:ea:50:eb:a0:fa:86:ef:c3:c0:7a:49:e8:59:74:fd:
         60:3d:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:56:28 2024 by rpki-client on console-fra.rpki-client.org