Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
File:                     QGHbehW9JPvKFGzRLMcNQTnIW58.mft (raw, json)
Hash identifier:          avx77zMCMZXSHr3ecOWpYg34L1UUuAX4uq9JYvcP4MM=
Subject key identifier:   8B:C7:7B:D3:03:64:FF:9F:97:4F:25:7E:2B:5D:87:6E:83:66:B2:FC
Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
Certificate issuer:       /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Certificate serial:       018F874AB3C2359724A413DD6C99DAE86512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
Manifest number:          1144
Signing time:             Fri 17 May 2024 16:02:50 +0000
Manifest this update:     Fri 17 May 2024 16:02:50 +0000
Manifest next update:     Sat 18 May 2024 16:02:50 +0000
Files and hashes:         1: EGXEio6utXTool1cIspcgg0UZac.roa (hash: +T6O8KhEXG2LxKgAwgf0V65jrV0AJ67lwLigUIXwpDM=)
                          2: QGHbehW9JPvKFGzRLMcNQTnIW58.crl (hash: PRAXO+oWlvel70oDC2WKPUAVhy9judlQYqKrIig2P4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b3:c2:35:97:24:a4:13:dd:6c:99:da:e8:65:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
        Validity
            Not Before: May 17 16:02:50 2024 GMT
            Not After : May 18 16:02:50 2024 GMT
        Subject: CN=8bc77bd30364ff9f974f257e2b5d876e8366b2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:c6:1c:5b:df:18:2d:c9:63:4b:ef:cd:fa:
                    03:6e:76:2d:19:57:6a:27:bd:cb:b3:91:e7:f4:e3:
                    d7:7f:cb:7e:bc:2e:72:c2:f0:a2:54:35:66:4d:a4:
                    25:84:21:a4:5e:db:c4:48:34:ac:2e:f4:c2:c0:ab:
                    72:24:cc:cb:e1:f5:d6:f5:48:2e:76:e0:e8:24:a5:
                    0b:7a:cb:c0:43:8d:5a:7a:a3:b1:44:71:26:fc:fd:
                    33:f3:8b:40:73:15:84:14:e8:f6:44:95:61:6d:2b:
                    e7:b7:a5:85:07:51:4d:2b:fd:64:f1:12:4f:3d:9a:
                    e3:d5:70:d7:f5:7e:cc:f7:9b:4b:44:95:40:a2:cf:
                    d3:d4:6a:02:30:aa:1f:8f:e0:ac:08:ab:8b:44:71:
                    19:8e:b8:a6:49:c4:41:3b:8a:33:a7:74:25:6c:ce:
                    49:33:35:73:bb:cc:6f:68:15:26:70:1f:60:97:57:
                    d5:13:05:78:eb:01:8a:a2:dc:2a:6e:c1:a1:ca:d9:
                    42:61:7e:d8:50:c2:9e:91:1c:6d:2c:6f:0b:5d:d5:
                    6a:31:2d:b0:29:d9:77:ee:c1:47:aa:a7:df:44:79:
                    d7:d4:82:e7:ee:99:41:6c:3a:3c:18:58:80:30:e3:
                    0c:3b:c1:81:1b:cd:7a:b1:f4:0f:05:ae:a5:52:0d:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C7:7B:D3:03:64:FF:9F:97:4F:25:7E:2B:5D:87:6E:83:66:B2:FC
            X509v3 Authority Key Identifier:
                keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3a:17:33:bd:24:d3:87:d1:f5:62:84:e7:49:08:4f:55:9a:
         38:80:39:73:50:a8:df:bd:97:02:ed:6c:f7:56:86:f9:5b:fe:
         31:a3:b6:e9:0d:a3:3e:4a:15:af:f8:0e:ab:d5:01:71:c0:e4:
         0e:e6:bd:97:d6:0d:ee:42:39:ba:0c:5a:df:b5:fc:d7:7f:45:
         17:b9:5b:22:34:0f:1a:40:46:54:ca:e6:f2:97:b8:04:e4:46:
         4d:80:34:1f:24:3a:52:78:1d:93:04:37:6a:58:97:21:15:88:
         9c:83:33:b8:63:8e:82:a3:07:af:60:b6:0e:39:c9:65:1d:43:
         94:51:fa:0e:18:78:5d:9a:7e:37:1c:2e:8f:94:51:93:97:74:
         31:8e:d3:04:88:45:e9:f7:df:b9:7d:ed:2a:c0:0b:c3:ec:ec:
         b9:87:08:99:fb:fa:fd:15:18:58:7a:d6:6f:db:59:09:bd:66:
         28:02:61:7d:e6:86:88:03:5c:94:ac:67:e2:34:8d:17:eb:16:
         4d:48:2f:f6:47:9b:d5:79:27:f4:5e:24:3d:c5:cd:b1:ab:74:
         0b:4e:2b:7e:bf:23:9f:c6:78:f0:a9:f5:15:af:49:03:9e:88:
         01:7d:99:8c:4f:4e:36:4a:e3:57:fb:4a:ef:8e:6e:05:65:7c:
         ac:a3:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:34 2024 by rpki-client on console-fra.rpki-client.org