Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File:                     qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier:          FiQu5gUHao8uuIyAXMhLkuDUonj3uVdPxEB1spr07wM=
Subject key identifier:   C7:7D:44:41:BA:93:06:9A:B2:2E:7B:AD:41:99:D5:B2:8B:1B:C3:67
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer:       /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial:       019076C138EED91958ABC67A6FB54871C8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number:          0ED2
Signing time:             Wed 03 Jul 2024 04:01:32 +0000
Manifest this update:     Wed 03 Jul 2024 04:01:32 +0000
Manifest next update:     Thu 04 Jul 2024 04:01:32 +0000
Files and hashes:         1: 0l7U_fLL2_CDBWhKEBNRuYlRFrk.roa (hash: bTOnRbLil2MAS+qgb1bMTQWVvLU4yHSIfrsaM+JQaNw=)
                          2: Vui3Xt0p-iRTjD8FXJHG8dy80Ro.roa (hash: FLNzMhbIGUnQVzO2lDIycTcDKCFZaxbX0fdELfPqyGA=)
                          3: phoqC7KdOvEjaOSbFu-Nfs5Kys8.roa (hash: zKyLs6wHa4xMeglFDYCdUn7zOwsumXKpCE2hHuwv0rk=)
                          4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: n0vwQDHtgHE1i12s9nQkZVfa09LaItZpDA60mrxR6m4=)
                          5: vdaq1AuIDT5gbw_uR_axS0AEd5Q.roa (hash: tb0EUoBzC9EWXc32fZRZKWbfF16DCOf5eb0yf+xFNoY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jul 2024 04:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:76:c1:38:ee:d9:19:58:ab:c6:7a:6f:b5:48:71:c8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
        Validity
            Not Before: Jul  3 04:01:32 2024 GMT
            Not After : Jul  4 04:01:32 2024 GMT
        Subject: CN=c77d4441ba93069ab22e7bad4199d5b28b1bc367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:d8:cb:37:7a:85:03:b6:33:5f:b6:8e:c2:
                    c7:41:f8:54:ef:6d:5e:6d:ee:eb:d4:a8:52:b0:31:
                    e4:da:cc:d1:af:0f:1c:28:69:fa:9b:4d:17:fd:eb:
                    dc:b6:7a:1f:68:1d:fd:ed:21:43:d0:80:bf:66:de:
                    03:1c:79:17:2a:b1:8b:ac:ee:63:79:d4:09:44:b9:
                    87:6d:e5:c9:94:56:c6:50:14:6e:74:a9:c4:09:0f:
                    c0:c2:6b:5c:76:4c:3a:52:bc:9e:2c:57:59:e0:6c:
                    9b:62:d3:19:b9:dd:b0:43:fd:6b:74:67:79:9f:90:
                    8c:a6:67:e0:ea:c4:04:a8:8d:24:e0:c9:f6:a2:00:
                    27:06:f1:a9:60:09:2d:06:c2:73:18:ee:7e:38:12:
                    3b:46:bb:45:52:06:8c:4b:b0:18:b9:a3:60:ec:fb:
                    dc:dc:29:3f:ba:74:56:10:eb:c9:5a:27:1c:3c:a1:
                    98:6c:1b:97:5d:6c:7f:18:1f:2c:c6:09:61:78:cb:
                    15:da:de:94:6e:c4:f2:3a:45:a8:b3:63:09:c7:0a:
                    33:43:75:92:b2:44:33:d0:af:df:4a:12:c0:76:f7:
                    3c:28:27:3e:b8:a5:51:41:3d:c5:b6:1f:9a:6c:f8:
                    5a:c7:a3:61:9a:37:2f:85:b5:89:83:9b:0a:66:9b:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7D:44:41:BA:93:06:9A:B2:2E:7B:AD:41:99:D5:B2:8B:1B:C3:67
            X509v3 Authority Key Identifier:
                keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:70:7d:cf:03:18:6b:77:63:1a:54:cb:49:4c:d3:a5:5e:77:
         93:db:96:bc:0b:a4:c5:29:64:b6:fb:76:36:4e:8c:a3:31:05:
         3c:ca:0d:30:ef:1d:24:a5:19:5a:00:b7:fa:a7:81:dd:27:82:
         c4:5f:8a:42:c5:a6:ee:8d:bc:60:8c:7a:28:71:52:f6:31:b7:
         28:75:83:02:75:99:07:cb:e3:fe:a6:c2:09:41:a9:f0:56:0d:
         f0:dd:37:04:d5:eb:82:ad:74:d5:46:db:b2:b0:d0:1e:67:3e:
         12:b9:74:ca:7e:20:a9:36:6c:9e:3c:9a:2c:78:34:8b:1e:7f:
         23:86:9b:ce:63:e5:5a:cb:fd:b9:eb:19:d1:2c:73:92:78:d8:
         bb:4d:7c:0d:63:a3:5a:19:f9:b9:b9:1e:dc:ab:bb:97:73:0f:
         54:71:b7:c0:02:16:d2:68:1f:5e:6c:39:0e:bc:52:c0:d2:1d:
         44:8c:61:f0:ad:89:62:34:c6:3c:6f:15:d3:20:3d:06:1c:fe:
         67:b8:a6:21:50:46:a1:da:b3:f3:7d:1c:e6:3b:ea:d6:b1:eb:
         c4:b9:d2:81:b3:c2:fb:11:33:19:5c:75:f3:c7:92:48:f0:a9:
         b0:8b:ca:1d:b9:09:cb:97:3f:c4:91:ba:43:83:7c:8b:35:64:
         db:ef:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:37:03 2024 by rpki-client on console-fra.rpki-client.org