Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File:                     qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier:          prQGYKoVP0qcXnWQxCIF6RZiPlxrcQRO/++EHbVkO1M=
Subject key identifier:   AC:7B:C3:A1:5F:C5:97:02:52:16:C7:CA:B5:AF:26:DC:69:C3:34:92
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer:       /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial:       018F8936E01462D5C57D6A5054A79131F889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number:          08EE
Signing time:             Sat 18 May 2024 01:00:25 +0000
Manifest this update:     Sat 18 May 2024 01:00:25 +0000
Manifest next update:     Sun 19 May 2024 01:00:25 +0000
Files and hashes:         1: 8p5cCOtwawpUsaw4yCDZEZEB8A4.roa (hash: +rLyUspWLMMa3XGuyhA/iTmGW5HutdWRBJJNWjY3dYU=)
                          2: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: PR2kh5XuFH4ieMTqjADX60luMox+KOpU4WIZhoeBvH4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:e0:14:62:d5:c5:7d:6a:50:54:a7:91:31:f8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
        Validity
            Not Before: May 18 01:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=ac7bc3a15fc597025216c7cab5af26dc69c33492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:68:7c:0c:0c:94:6c:1c:b5:8f:ab:3b:1a:c7:
                    00:5d:23:ff:76:a5:4e:5a:fc:7a:cf:f0:85:ca:36:
                    fc:6f:fa:6b:5c:9e:e4:64:ee:42:4c:87:ec:7a:f1:
                    5f:1b:07:6e:42:13:5c:42:8d:72:80:33:8c:ce:7e:
                    7a:8f:9c:c2:75:d5:d3:87:c7:3d:9e:2d:35:5d:5e:
                    a0:b7:38:a7:97:c2:6b:db:09:62:56:3d:58:a4:b6:
                    d0:7e:3b:5c:2e:f6:db:73:d1:77:7e:6e:42:a7:45:
                    2a:94:dd:c2:f5:8f:61:f3:d6:36:45:b0:e9:d5:f8:
                    f4:86:ac:d6:a7:77:24:e1:60:82:7b:aa:58:d6:c3:
                    40:8d:85:41:73:00:ee:a3:d4:85:bb:95:b1:5a:d7:
                    b4:96:80:7c:f0:73:e3:dc:49:5e:6c:64:7a:0a:9e:
                    08:26:ed:89:28:e6:af:a7:d2:1e:64:a6:54:57:d4:
                    17:79:57:59:87:fe:5f:6e:b1:a5:2b:d7:03:52:28:
                    6b:5b:c0:a9:6a:f2:d5:78:83:d5:c6:0f:1c:a4:38:
                    4f:c0:be:78:b4:f8:ee:de:cc:92:97:09:a1:37:90:
                    1c:3a:0f:7e:94:08:e9:b2:db:ae:83:b9:d8:77:41:
                    40:0e:95:34:bc:56:f0:55:27:c7:fd:6d:ce:5b:b1:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7B:C3:A1:5F:C5:97:02:52:16:C7:CA:B5:AF:26:DC:69:C3:34:92
            X509v3 Authority Key Identifier:
                keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:49:6b:58:ad:e7:ad:77:c8:f2:32:4f:c8:e6:56:18:f4:f6:
         cb:e2:64:dd:3b:2d:0c:20:b3:5f:d0:ea:5d:00:33:ff:bb:b7:
         6f:54:8f:2e:e7:bd:e4:59:4c:c3:24:ff:00:ee:a8:7d:3b:ba:
         09:92:e2:74:08:0a:53:9f:dd:66:66:80:7d:7a:49:0f:65:56:
         0b:58:7e:c5:84:94:39:7e:a7:5f:dd:2f:b8:70:38:ef:cf:37:
         02:5c:b8:4b:88:2c:fa:2a:e9:dd:1b:45:d1:e7:cd:86:80:8c:
         a3:c6:63:89:32:e1:31:8c:84:a2:f0:da:ab:e4:95:ea:b7:3b:
         6a:74:2a:18:d2:02:ed:20:82:c7:cc:44:f6:86:25:7b:7c:d9:
         fe:9d:08:30:76:f0:a3:71:67:ca:64:35:e6:81:7c:73:fd:d6:
         89:ed:08:46:c2:ef:15:f9:4c:db:b9:6b:46:2e:c5:d4:cc:bf:
         d3:8d:ec:11:60:d3:a8:4f:2b:28:fb:80:44:3a:5b:c6:b3:90:
         7a:10:7a:98:6d:ca:3a:88:26:06:a7:2f:91:11:56:f8:45:7f:
         76:c2:c3:2b:61:d0:f0:28:83:fa:a8:e9:55:77:4a:7d:d5:15:
         1b:56:4f:d3:b1:b1:b2:5e:11:15:9e:15:e1:26:63:8a:ae:60:
         f4:00:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:14:00 2024 by rpki-client on console-ams.rpki-client.org