Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File:                     QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier:          Skh9d8yMd7kkJ6QWDO8waWkui4l8IGlFFgkXP6D178Q=
Subject key identifier:   8B:21:76:72:AB:03:1D:DF:14:46:01:36:03:BF:95:DC:46:C9:98:27
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer:       /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial:       018F8410331A21D7A3741CD968D39E582A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 01:00:04 +0000
Manifest this update:     Fri 17 May 2024 01:00:04 +0000
Manifest next update:     Sat 18 May 2024 01:00:04 +0000
Files and hashes:         1: 1f17xm76lUSJclYbNYDtmigLnEQ.roa (hash: UrrEtwQGFKc3lqoaEld9XLorRAP/EcL2MrHtjmSqgp0=)
                          2: 8Ku-uykbIPPTlg6srAUkHaIWrAY.roa (hash: P8wJJdhINlvCX0c4HKpxxZMuSCo21FS84pundorzeng=)
                          3: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: rGRCBZyrTEgohgJPQWU8i3xVNdtbOPcPCY2FkyAUpj8=)
                          4: UcUWLwHzk58XamMxbAXZGCUlnMU.roa (hash: KeRbjN9PJeP/zHTETmiWOP46hb9UpdskBcS9SFoxm1o=)
                          5: arPmcy2TNegZT6aKHptURdXhRpU.roa (hash: rJKbsDYWUsB7rYCYJ3zOS1eS9E/1FsJLNCYQ5urJ7P8=)
                          6: kQPM49QgSdDxOD0FqWZR9uqZzvE.roa (hash: TFX2yn/9nXE2/wRCc8e2znDiNTJDxpdZ6D/QkOKOBhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:10:33:1a:21:d7:a3:74:1c:d9:68:d3:9e:58:2a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
        Validity
            Not Before: May 17 01:00:04 2024 GMT
            Not After : May 18 01:00:04 2024 GMT
        Subject: CN=8b217672ab031ddf1446013603bf95dc46c99827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:6f:b2:62:a8:4d:8d:4f:0c:c9:3c:88:1b:
                    ad:af:58:e9:64:8d:ed:19:4e:28:4c:3a:bc:b5:21:
                    4d:2f:58:b2:f9:20:35:ee:99:dc:dd:bb:0b:49:a8:
                    74:bc:c1:75:5b:2f:85:e8:cc:25:0a:09:48:a0:1d:
                    1a:92:59:fa:19:ba:d4:ed:21:d0:cc:c9:8c:ad:25:
                    4c:00:53:9f:2d:18:1d:1a:fc:04:8a:10:ca:d1:e7:
                    3b:47:bc:fa:1b:1e:82:2d:da:da:a5:77:e4:19:60:
                    7b:45:ed:d8:7d:cd:11:43:0d:40:50:c9:d0:b3:82:
                    c9:98:89:fc:99:8a:71:b5:53:c8:60:e6:58:79:95:
                    d5:b0:54:80:14:8a:90:6d:9c:02:e7:25:da:27:ee:
                    c7:45:c7:2c:f5:33:1d:90:94:84:ee:04:de:29:4e:
                    61:8f:25:ba:6d:9f:cf:bb:70:2e:7b:e1:13:6b:a6:
                    15:bc:60:43:bf:41:04:d6:c5:71:7a:e5:46:47:28:
                    88:be:74:2b:9e:b7:75:5c:92:85:61:e4:c9:29:c1:
                    3c:10:13:ed:9f:2f:3a:3b:39:6f:a5:ff:c5:fc:46:
                    ca:d7:1d:32:66:6a:4f:4e:69:f7:9c:a1:ee:64:eb:
                    d5:e2:33:e1:11:60:00:12:9b:0c:82:8e:24:82:a7:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:21:76:72:AB:03:1D:DF:14:46:01:36:03:BF:95:DC:46:C9:98:27
            X509v3 Authority Key Identifier:
                keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:81:0c:d9:c3:6d:77:38:64:0e:6f:0c:ef:2e:9b:60:b9:92:
         05:84:c0:3a:11:b4:94:9f:55:86:ac:cc:12:68:fc:3d:1a:57:
         70:4d:9f:cc:f1:c6:da:5d:f9:29:69:45:26:c7:6f:7f:e7:6c:
         12:bb:16:18:0d:43:49:54:1c:c6:2e:a8:eb:0f:9f:69:7f:1d:
         ae:19:af:e6:c1:60:64:85:2c:ad:1a:e6:5b:f8:a2:04:37:bc:
         61:7e:40:5e:9c:98:71:93:0c:b6:e7:65:47:03:a6:92:d2:a1:
         48:67:c9:f7:75:07:ae:84:4a:b8:4f:fc:ea:20:65:a9:94:b8:
         7c:7f:b7:cc:bc:54:17:c3:73:4a:22:99:88:5d:13:7f:95:a3:
         a6:84:4c:76:20:c0:08:86:9f:c5:8e:75:a4:03:de:e5:33:cf:
         0e:56:72:8c:a7:60:4e:ad:c4:6e:7d:71:21:fe:16:53:f0:a1:
         d4:31:b2:24:82:cd:e1:f1:23:ec:6c:64:5a:d2:3b:02:5b:9c:
         89:28:40:1a:06:76:0b:c5:67:93:f3:05:f7:87:e5:e5:a8:ea:
         cf:6e:bd:cb:47:15:31:59:c0:3f:01:6b:98:bc:10:85:30:1d:
         9b:c9:af:0e:56:28:e0:99:d1:0d:fb:3b:17:81:63:cf:77:72:
         cb:3f:f7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:42:07 2024 by rpki-client on console-fra.rpki-client.org