Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File:                     QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier:          5SMoypGpAhGRzZA976G8MWNrg1VwDCYI3oPk0YCc0MI=
Subject key identifier:   02:3F:3D:3A:2E:7D:56:9E:D0:EA:1C:B6:26:26:9B:F9:B2:A0:39:01
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer:       /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial:       018F874A5DA02E1B7A14ABE1FE6C6DA3684D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number:          06D4
Signing time:             Fri 17 May 2024 16:02:28 +0000
Manifest this update:     Fri 17 May 2024 16:02:28 +0000
Manifest next update:     Sat 18 May 2024 16:02:28 +0000
Files and hashes:         1: AW1Cm4DIdPFIEoTBFdL_6BB7K2A.roa (hash: T9DGw2DG8KSQQ5pY0rh4QOETlmDdlBALgiGc9ZNC04w=)
                          2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: 6bM5c5cj8cWiFBdYHkSsTNIQ/1ho79kTcg5fn73Ij5c=)
                          3: phKERRguDNs8sQS0Ctn-RMIXq0g.roa (hash: 1zGNeniRacKcoyN3DnpGYTP+6ee3AJez079a8Gp+EJQ=)
                          4: vc7HZe9D3Ir0L5b8ocmnY_aeiSg.roa (hash: rvLgnRURJqH52muTZhK2IWq5PFu/2ABCGoxAWztEDHs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:5d:a0:2e:1b:7a:14:ab:e1:fe:6c:6d:a3:68:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
        Validity
            Not Before: May 17 16:02:28 2024 GMT
            Not After : May 18 16:02:28 2024 GMT
        Subject: CN=023f3d3a2e7d569ed0ea1cb626269bf9b2a03901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:dc:d1:91:af:ae:5a:57:52:1b:3a:84:c5:
                    22:7d:a6:5d:c3:3c:6f:0a:3a:f4:c3:8e:d4:7c:09:
                    7a:e2:3c:8f:3a:e8:10:b7:4e:31:13:3a:f2:91:34:
                    9d:e7:53:5d:7b:14:80:65:3c:c8:df:24:33:9f:e6:
                    77:4f:36:f3:c9:87:77:3f:84:de:28:54:99:ba:e6:
                    e2:f4:63:29:86:ac:06:a1:38:bc:cd:34:4f:0e:65:
                    a5:1e:59:ae:94:43:c8:9b:f5:b8:55:c4:20:18:89:
                    26:dd:ef:04:d0:c6:68:bd:c9:68:0c:d2:49:df:f8:
                    99:03:ce:df:67:f5:0a:f4:7e:a9:00:c3:eb:9b:2f:
                    56:76:59:26:bb:14:1d:f9:6e:d2:de:ea:b4:b9:68:
                    e7:ed:54:06:65:4c:34:10:84:67:a4:b8:20:e0:26:
                    d6:a3:2c:2e:92:54:b9:31:36:df:87:5f:31:39:c1:
                    c3:72:67:7b:0d:33:12:48:17:5c:d9:e1:f2:3b:f2:
                    6c:3b:08:4f:e6:33:2a:e3:4a:f1:fb:12:8c:b8:e7:
                    25:3e:d3:8a:4e:4a:b8:92:8c:9d:ba:0d:2a:ad:22:
                    b9:08:20:ee:84:b2:12:3a:f4:c7:27:c8:22:14:31:
                    a5:d8:6f:50:d2:18:b4:59:cd:66:d8:9c:95:e5:32:
                    d0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3F:3D:3A:2E:7D:56:9E:D0:EA:1C:B6:26:26:9B:F9:B2:A0:39:01
            X509v3 Authority Key Identifier:
                keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6e:b7:6a:9a:9c:a6:a3:a5:11:92:60:14:52:80:a5:e4:15:
         7e:51:1a:11:c6:fd:e2:ea:ec:09:de:fe:70:1f:40:34:e8:42:
         c8:63:90:ec:3b:29:61:05:3c:c5:af:3b:cd:ce:b1:96:10:e8:
         f1:19:37:0e:a9:5e:84:37:83:d3:7e:10:31:88:a6:5a:3b:89:
         ea:c6:f2:1e:86:10:29:42:a2:b1:a8:87:57:f4:58:57:c3:73:
         da:65:10:ec:20:b4:18:90:3e:f9:88:ac:ad:a6:6f:bb:ee:cb:
         ee:d8:f1:8f:ff:28:21:c3:18:93:40:76:05:52:a2:80:04:61:
         85:62:70:49:31:be:8c:91:23:51:4f:8d:99:45:d5:4c:b5:6b:
         d3:8a:e3:09:9c:10:24:de:e9:d5:32:03:62:53:d2:98:57:a4:
         77:6d:28:87:36:6e:5f:b2:11:5c:38:55:52:be:36:74:89:e9:
         ee:63:1f:4e:13:88:25:e7:85:f0:b1:1d:f4:ee:d4:90:bd:7c:
         f5:1a:b3:19:8e:e0:d1:ed:4d:6a:33:7e:ff:3c:f8:62:46:fd:
         0f:dc:1b:fe:cb:be:f5:3a:7d:fe:d8:98:4a:b9:79:26:9d:fd:
         07:22:54:5d:a3:5d:7a:da:3d:ca:6e:bb:0a:df:aa:88:6d:ce:
         aa:cc:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:20 2024 by rpki-client on console-fra.rpki-client.org