Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
File:                     qBVYhT_rx52BPrLAzly3NvtzwN8.mft (raw, json)
Hash identifier:          IbnfL7d1OO4kYwnWZMuzLi7l9hf8TNtojOoJAHdQ2Rk=
Subject key identifier:   05:AB:08:E5:FF:3A:AA:50:84:10:DD:94:DA:8F:ED:D3:1F:2C:CA:B3
Authority key identifier: A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
Certificate issuer:       /CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Certificate serial:       018F885B2D1EE3C20E172BD150AE117F5AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
Manifest number:          0F1E
Signing time:             Fri 17 May 2024 21:00:27 +0000
Manifest this update:     Fri 17 May 2024 21:00:27 +0000
Manifest next update:     Sat 18 May 2024 21:00:27 +0000
Files and hashes:         1: jcYWzULPoJ1jpearr-vKUz9gRvQ.roa (hash: 4hh4Rp+/lWku3L2Rp2so1Rz3RTSFlGoa0TpWswus9CY=)
                          2: qBVYhT_rx52BPrLAzly3NvtzwN8.crl (hash: X2eRdwVaxlP6+mowRqhG0r+nddoiwXn+OcAUyKvcOMg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:2d:1e:e3:c2:0e:17:2b:d1:50:ae:11:7f:5a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
        Validity
            Not Before: May 17 21:00:27 2024 GMT
            Not After : May 18 21:00:27 2024 GMT
        Subject: CN=05ab08e5ff3aaa508410dd94da8fedd31f2ccab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:72:91:3b:38:7b:0f:ed:69:c7:5a:21:66:4f:
                    fd:ca:77:5d:77:48:4f:4f:4c:36:17:ae:ea:3a:5b:
                    2b:05:86:c2:62:da:70:d6:5a:52:d4:9c:49:3a:41:
                    6d:96:59:70:dd:96:b7:a4:2b:35:e4:03:ac:69:f7:
                    08:d8:fd:9f:69:df:14:06:4b:98:de:83:4c:85:01:
                    6a:54:a5:ea:a4:6b:ff:9a:78:fc:c7:eb:b2:94:3f:
                    f8:1f:cf:a6:84:c8:05:23:63:66:85:5e:61:44:3f:
                    91:c2:f8:fd:27:60:7e:93:4b:92:89:f5:bf:ed:34:
                    c1:e4:24:f5:7c:c8:a0:e4:de:dc:48:8c:b6:50:1d:
                    02:90:94:4b:64:9a:cc:03:76:60:74:e9:8b:cf:27:
                    56:93:06:24:a9:de:99:4d:3c:a6:6f:1f:d5:2f:78:
                    3d:29:1b:7b:ad:58:de:a3:67:b1:6e:b3:c8:77:cc:
                    a6:c8:c5:46:7c:29:81:ef:5a:32:c0:da:27:14:3f:
                    47:01:ef:89:a5:05:2a:88:fd:97:da:ed:15:4b:08:
                    c7:20:b8:81:09:74:28:89:9c:25:6e:16:6b:34:3a:
                    e7:f8:24:6f:cf:7a:4d:f7:54:6b:21:cf:7a:41:cf:
                    4c:42:6e:88:f2:00:08:e4:81:fa:df:e5:e6:ba:f8:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AB:08:E5:FF:3A:AA:50:84:10:DD:94:DA:8F:ED:D3:1F:2C:CA:B3
            X509v3 Authority Key Identifier:
                keyid:A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9d:de:2d:90:b5:03:8f:0e:7c:8f:55:16:81:68:ca:ef:43:
         76:17:ff:aa:8c:57:35:bb:c2:cc:d8:4d:61:d5:5c:20:f5:f3:
         ad:96:c3:93:79:d1:0c:03:84:66:80:b1:b2:f7:1b:7f:67:5d:
         ac:69:0a:53:ff:53:0d:87:0b:52:b6:5a:4f:2a:b4:7c:06:e3:
         03:f6:04:f7:d2:b6:3f:ab:87:f5:e3:19:32:c1:ef:03:8b:cd:
         b0:77:5a:d6:c6:c7:6b:2a:23:c6:e9:47:ce:b4:9d:b5:1e:10:
         fd:ec:f3:81:7e:b5:be:2e:f3:3d:4b:bc:9f:ac:c6:f8:66:99:
         67:64:08:c8:8d:80:95:e1:42:b1:62:a2:a0:ed:6f:62:81:ef:
         92:f5:97:42:85:87:9e:8c:22:f3:8c:99:65:d7:ce:16:1c:6e:
         90:8c:39:b6:d6:45:ed:3a:8d:c9:69:97:d8:ff:c4:70:d8:91:
         ea:16:76:ca:96:bd:7e:e8:bb:8a:f6:d1:e8:58:b3:7b:a8:a7:
         40:72:38:c3:b7:f0:cc:1b:8c:18:94:ee:76:cf:5c:6c:0d:75:
         e1:08:97:e5:bf:89:f5:21:b3:58:ed:fd:7b:56:ac:c4:1a:1c:
         03:5e:4c:d7:76:3f:ff:27:5f:a5:34:35:96:8a:0f:44:ba:64:
         2b:a4:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:43:26 2024 by rpki-client on console-fra.rpki-client.org