Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          aYvgZv1rPwvdVHA0IUqdH1+O0/ouNdnTgTCl2I9u71I=
Subject key identifier:   C4:31:E3:C1:96:94:B5:6B:81:54:57:01:FC:9B:92:4D:EF:67:C6:B4
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       018F497EBF0876762D0C966A76BE55ADD1FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          0E86
Signing time:             Sun 05 May 2024 16:03:14 +0000
Manifest this update:     Sun 05 May 2024 16:03:14 +0000
Manifest next update:     Mon 06 May 2024 16:03:14 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: 1OVn3++2xHEuEIax/xfpBNHyVJkm3PY4i1vU8rq+a7c=)
                          2: G5dXIZOvDl6VRhZ6sO_ypDt71wg.roa (hash: wtkx4u7+uJuzY/Var52g30Sul31M23a4ANAq9wcayBk=)
                          3: _Xb9_PmqVayfGVYFWF9LiHBxOho.roa (hash: rFvbstSl2qHAcxz7TocteOFlyKDRFjbyacLWolfz2MA=)
                          4: eTc_cExB7oA-s_D66voABq54SoQ.roa (hash: ho3rrnaJt7tIZ4fcmKlB5H0ZPrfdA3fJgYPJfGNCEcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7e:bf:08:76:76:2d:0c:96:6a:76:be:55:ad:d1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: May  5 16:03:14 2024 GMT
            Not After : May  6 16:03:14 2024 GMT
        Subject: CN=c431e3c19694b56b81545701fc9b924def67c6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:6b:55:c1:e7:3a:5d:48:6c:f5:f0:7f:07:
                    e4:fb:8a:43:a3:c5:af:38:01:27:c7:5b:ce:95:e8:
                    90:e6:0e:7f:44:61:55:ef:f3:18:96:a3:c4:a8:66:
                    c8:87:59:26:fd:2e:f1:21:f2:98:02:f8:86:a9:9f:
                    bf:4a:cd:f7:e9:41:53:f8:9e:03:60:25:05:6a:fb:
                    c9:06:fa:72:f5:42:1f:78:56:47:c9:34:bd:17:29:
                    38:74:94:5e:58:70:1f:d3:2e:51:25:91:c5:2d:04:
                    f9:4a:7c:42:ea:1d:6a:51:ee:c8:9e:2a:c2:df:9b:
                    a6:ea:c9:6f:90:6b:89:ef:28:f1:de:98:1b:76:83:
                    8d:a7:11:72:d9:95:43:bb:75:a2:f4:8a:27:58:c2:
                    a1:e3:bc:50:8d:92:87:c6:06:89:75:a0:3f:06:e4:
                    10:47:23:e5:db:a4:64:d2:06:8d:5b:92:e9:cb:b5:
                    d2:31:8b:0b:79:4c:4f:ef:6e:b5:08:1a:fa:1d:17:
                    47:97:78:72:74:c9:80:1e:e9:6e:82:60:d1:ee:db:
                    1f:45:f2:bf:64:55:72:17:d4:aa:ff:48:85:ad:e7:
                    b7:88:35:21:4f:af:cb:a5:23:d9:37:8b:78:99:73:
                    9c:9b:56:93:5d:00:5f:b3:b0:c4:ee:1e:f9:45:40:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:31:E3:C1:96:94:B5:6B:81:54:57:01:FC:9B:92:4D:EF:67:C6:B4
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:64:21:d4:2b:d9:16:29:0d:9b:df:0e:9d:6d:5f:01:6c:b2:
         72:e6:31:f0:bd:b6:bd:eb:f5:f8:e7:74:c4:b3:4f:39:ba:6c:
         0c:aa:7c:7b:3c:04:7f:9f:0d:18:8a:73:7d:fe:b3:5e:59:10:
         e4:b7:b1:00:3e:c8:4b:98:ac:a7:55:a5:99:aa:15:e2:52:20:
         74:2a:22:f3:a0:e6:95:3e:8d:23:c9:66:6f:c8:a1:85:54:ff:
         a2:15:b1:63:6e:6f:27:2d:7d:a2:d8:a5:ce:61:62:c3:df:a3:
         36:f2:ec:55:2c:70:c8:38:b9:0e:65:80:7b:95:b0:33:f9:8c:
         93:e2:c5:c3:2a:12:22:d4:95:3d:27:f8:89:26:f5:31:f3:64:
         33:96:da:be:8c:68:5e:df:52:c8:c5:78:af:22:a3:47:02:bd:
         30:e6:47:e1:c6:c9:2d:3e:2d:14:34:72:6c:5e:37:54:5e:f4:
         75:85:05:2a:1e:c5:c9:a3:04:1a:ad:de:4d:81:9b:af:50:e6:
         10:bd:2c:24:98:7e:74:3a:7b:42:c2:02:60:1d:87:cb:0e:1f:
         7d:8e:b1:3b:55:e7:fb:e5:9b:a5:dc:4d:d3:85:d4:82:c4:b1:
         5b:18:8e:66:ef:c5:74:86:13:c0:03:19:4a:5c:31:3c:a3:59:
         c4:9a:de:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:52:06 2024 by rpki-client on console-ams.rpki-client.org