Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File:                     bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier:          RnJpFHqjBWeerInR4WzFtQ/COLmKEJMUThJs/+NeJR4=
Subject key identifier:   84:3B:2A:14:6C:36:C2:3A:42:69:D1:7F:F7:04:2A:C4:30:9A:BB:56
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer:       /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial:       018F8748303F3EB5DD787866AE0D9F29C516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number:          053C
Signing time:             Fri 17 May 2024 16:00:06 +0000
Manifest this update:     Fri 17 May 2024 16:00:06 +0000
Manifest next update:     Sat 18 May 2024 16:00:06 +0000
Files and hashes:         1: 7CTg_8XWIZSGf8nR-iSYye4c3ZE.roa (hash: 2jhwNxrhQJIBAHhtxzXEuiw2PW20ojXgxkovl0zlafo=)
                          2: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: psiZOb7cJaCogsa08yb1OyrIWPt076TNxnh9oALzWfg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:30:3f:3e:b5:dd:78:78:66:ae:0d:9f:29:c5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
        Validity
            Not Before: May 17 16:00:06 2024 GMT
            Not After : May 18 16:00:06 2024 GMT
        Subject: CN=843b2a146c36c23a4269d17ff7042ac4309abb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2f:62:24:cd:1a:d1:d0:9e:db:77:ca:ff:89:
                    2f:4c:39:96:6c:40:43:e3:48:2c:0c:cf:18:b5:69:
                    9c:aa:dd:68:82:18:48:44:e6:e1:1e:22:21:44:a7:
                    a0:46:72:ef:df:3e:8a:c4:bd:d6:6f:7c:b1:7b:eb:
                    52:f5:6f:9b:14:bf:51:bb:3b:07:d0:d4:39:cf:68:
                    3e:bf:5a:80:15:f5:7a:14:4d:e8:ba:29:0e:7c:eb:
                    39:15:6c:74:41:cc:4e:95:ac:b2:60:52:fb:d2:53:
                    11:3f:0d:39:d3:30:40:33:fc:58:e5:4f:4a:06:b3:
                    39:37:2c:11:a9:31:1d:fb:11:47:16:2f:19:f8:b6:
                    e5:be:5d:09:c9:98:49:ca:f4:91:4e:54:71:73:d0:
                    f7:90:2e:6d:74:28:a1:f5:ff:f1:73:8a:3e:9d:4d:
                    71:f5:de:e1:07:cd:9c:dd:62:46:8f:f3:26:a3:9a:
                    ee:43:bd:50:9b:41:a1:80:8b:c2:5e:67:29:c9:22:
                    7d:f0:c2:cb:93:b4:d7:69:97:4d:30:30:d7:c7:05:
                    3d:ef:88:17:c4:ab:48:87:2f:c5:0b:57:e2:1b:b4:
                    8a:ec:04:96:78:0c:36:dd:b5:0c:cd:55:ec:54:70:
                    b4:25:c5:78:b8:4c:ae:bb:b0:5a:37:26:b7:ac:c9:
                    2b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3B:2A:14:6C:36:C2:3A:42:69:D1:7F:F7:04:2A:C4:30:9A:BB:56
            X509v3 Authority Key Identifier:
                keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:2f:10:5b:8e:d7:a3:ed:cd:ff:a9:dc:69:1f:9e:e1:a0:02:
         53:1d:55:7e:a6:18:c6:ac:e9:64:35:0e:7c:f8:58:50:11:f6:
         a6:fe:95:1d:c3:08:b6:9e:b8:2c:33:6e:15:08:6f:d8:c7:19:
         0e:de:0b:5f:b1:05:fb:58:75:fd:2e:76:4f:f1:d8:68:64:53:
         c6:e0:1e:f6:41:68:9b:d1:50:3a:56:4b:31:a1:c5:c1:7d:df:
         21:9e:01:c0:9f:34:6c:67:b4:42:cc:38:3e:34:3e:12:aa:43:
         bc:15:3c:18:11:66:0a:d0:9d:78:39:d8:ae:5c:4f:f1:da:4c:
         cc:84:17:4a:53:2c:4f:03:a0:c3:13:c4:fe:24:15:12:bb:b2:
         24:74:a7:22:a5:9d:2f:b2:04:05:63:81:3c:d4:3e:dd:58:64:
         79:59:11:f0:51:ef:f6:2c:78:22:c8:59:89:27:25:39:9d:9e:
         b9:bf:ed:e5:af:c8:e6:7a:1e:df:9b:07:0b:07:51:5b:ef:f2:
         5e:42:ec:f7:dc:f2:1b:72:07:f0:13:ac:20:a1:b3:76:29:49:
         e2:2b:fa:2f:a8:a3:3f:a4:65:8f:bb:dd:1d:55:e5:46:50:a0:
         13:ba:0a:8d:74:cb:16:03:b5:40:0a:aa:b7:05:1c:78:d5:5f:
         d5:b7:76:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:13 2024 by rpki-client on console-fra.rpki-client.org