Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File:                     Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier:          u2/ex9rGMixRqQm1Q6cCSyVnguBVojp4y7nBpYfXVoI=
Subject key identifier:   75:17:A3:6C:EF:53:95:71:16:58:A3:5D:5B:C7:E0:35:41:63:FD:D1
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer:       /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial:       018F8823F428DEAFB1CF0ADB9425439D3BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number:          0ECD
Signing time:             Fri 17 May 2024 20:00:08 +0000
Manifest this update:     Fri 17 May 2024 20:00:08 +0000
Manifest next update:     Sat 18 May 2024 20:00:08 +0000
Files and hashes:         1: PdJp1aTmSJE-rLNY32-ozShsgfs.roa (hash: mqGXENXqKuyQNZkt3Wc5fPvhQEUqZ9n6903WVjk0vvU=)
                          2: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: CWO1TCc7l/RV3Y2FmqpkNz8CV8PIBTFgFKUU4S6twYg=)
                          3: R8gbOhRKMeb-OyuQYs9mEyx7AqA.roa (hash: ZBgT6SmJXiFcbrUhpOoMXEuF1s/IEDEF3UHj8FuCFlU=)
                          4: smc5ACJNuf6SH2uvDJhyWd_HP3Q.roa (hash: 31QMfW63cD0lUnGQBAJ0PwurlQcOzndHSoLa5TwKbWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f4:28:de:af:b1:cf:0a:db:94:25:43:9d:3b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
        Validity
            Not Before: May 17 20:00:08 2024 GMT
            Not After : May 18 20:00:08 2024 GMT
        Subject: CN=7517a36cef5395711658a35d5bc7e0354163fdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:79:83:69:8e:ea:13:d8:42:db:42:aa:47:
                    f2:b8:79:7b:77:81:01:e0:36:d8:40:21:3d:9f:79:
                    2c:cf:49:b0:7a:b9:6f:1c:0b:b9:34:33:95:85:13:
                    c3:7f:ae:d8:3c:4b:72:48:19:a3:c6:ef:83:1f:e1:
                    42:b8:4d:e8:d4:f0:81:c5:5e:e7:80:21:e5:30:d2:
                    b4:df:b7:ba:7f:a7:14:fc:8c:02:97:6d:c1:b8:6f:
                    e5:43:99:96:80:7d:89:17:7c:45:a5:9f:9e:d8:ff:
                    fc:59:42:a7:b2:55:20:1d:97:1c:24:05:09:0c:d2:
                    90:c0:de:c0:1a:1f:e7:79:25:1c:70:53:5a:4c:71:
                    af:66:cb:da:8d:ea:c1:e7:1d:0c:15:aa:84:01:49:
                    5f:f6:6f:13:39:ee:88:b5:ef:f9:eb:ee:11:3e:8e:
                    9e:bc:f8:47:d5:42:c7:71:94:6d:f9:f8:49:29:aa:
                    44:d2:80:17:95:31:0b:1b:d9:44:67:7a:c6:d0:e0:
                    89:5f:ec:75:e4:ee:9e:00:60:25:34:be:6e:22:26:
                    13:79:a1:a5:83:cc:bb:e7:09:4a:c8:3f:0f:e4:3f:
                    58:b8:a8:81:9f:ef:23:c1:f3:4a:a2:63:1a:7f:1f:
                    24:20:f5:b9:f2:27:ae:90:89:63:99:7c:a7:b4:58:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:17:A3:6C:EF:53:95:71:16:58:A3:5D:5B:C7:E0:35:41:63:FD:D1
            X509v3 Authority Key Identifier:
                keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a1:f1:4e:ac:70:94:8e:0e:f1:8b:00:46:01:7c:10:30:5e:
         73:d3:63:99:4c:4b:df:15:a3:54:33:56:64:ae:49:9c:57:1c:
         f9:aa:b8:b2:a2:b2:b0:06:61:d7:50:ad:ba:bc:9d:26:c6:40:
         cd:13:41:e1:1d:6d:2a:b2:dc:ab:4c:31:28:88:2d:24:6d:42:
         6b:30:57:34:e5:41:60:50:06:64:b6:80:d6:c1:12:07:2e:14:
         ee:bf:8e:d1:f6:9f:e8:2f:a9:69:78:9b:be:3b:47:8b:fb:50:
         9e:b5:ca:b8:ab:51:c6:dc:f9:4e:8e:aa:40:e2:d4:48:96:a2:
         b0:05:8a:2f:c7:7e:5d:98:5b:e1:55:53:aa:6b:72:51:48:72:
         ad:05:6d:88:49:b9:de:19:05:d7:52:ef:1b:72:ce:06:ff:00:
         80:8e:03:97:13:a9:16:c2:15:f0:8b:4c:f9:16:be:2e:93:c4:
         6d:bf:17:3a:14:80:03:d4:8f:a2:d9:62:52:d9:70:6f:95:8f:
         77:af:fb:2f:87:6a:f5:4f:b2:65:ae:eb:c4:89:b3:5a:3c:3e:
         6b:76:e6:10:51:3f:e0:64:45:32:60:24:33:4f:88:67:4d:3e:
         a9:2c:19:a8:9a:f6:e9:91:d2:54:6d:15:61:fd:1d:2b:a1:08:
         0f:2b:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:21 2024 by rpki-client on console-ams.rpki-client.org