Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File:                     QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier:          3UJYmYiYAJ2u4WpKmVW1I/mt4V6MnOdOQ3HLwFBWOrI=
Subject key identifier:   DE:96:55:84:84:64:CD:CF:35:B0:0F:13:7F:1B:EB:17:C9:FA:97:E6
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer:       /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial:       018F874A6A08B3DE5C4FFCF025994EA51B99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number:          02DD
Signing time:             Fri 17 May 2024 16:02:31 +0000
Manifest this update:     Fri 17 May 2024 16:02:31 +0000
Manifest next update:     Sat 18 May 2024 16:02:31 +0000
Files and hashes:         1: HGzp4lITxgjWfHg6caZc2s9iooo.roa (hash: 5Jja63p0lkK4R/vntyRAXHQTpWDO3M1fcp5Vn3f+iL4=)
                          2: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: 3di7LfRjZqUqfcILW9MResuHgXjcxOsfVb6nvv2oFYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:6a:08:b3:de:5c:4f:fc:f0:25:99:4e:a5:1b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
        Validity
            Not Before: May 17 16:02:31 2024 GMT
            Not After : May 18 16:02:31 2024 GMT
        Subject: CN=de9655848464cdcf35b00f137f1beb17c9fa97e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:a6:c4:d6:cb:68:2e:d0:3e:12:63:82:64:
                    c2:d0:00:45:8a:0c:e7:16:95:c0:08:f7:59:7c:26:
                    00:2d:d9:fe:76:ed:f7:a0:a0:bb:f4:bf:92:df:17:
                    37:d6:fe:84:0a:ed:f7:8d:80:1a:ba:a7:6c:1a:6a:
                    7b:28:33:78:38:19:38:50:81:1f:46:c3:fa:67:cd:
                    cf:ab:c9:df:0e:8c:67:37:0a:4a:61:12:d1:14:57:
                    8d:92:0a:91:44:ac:d7:1a:25:28:c1:6f:30:a0:3f:
                    71:31:b6:0d:4a:3d:b4:40:a2:d0:75:40:c5:a2:85:
                    18:f5:45:2b:a8:65:3e:8a:e7:08:ee:f7:d7:1d:85:
                    98:22:d1:12:bf:58:fe:c7:a6:a4:a5:2b:14:7b:ae:
                    35:71:d9:fe:ab:e1:51:a1:59:a5:0b:8a:a5:19:52:
                    f7:19:c9:ea:49:c0:ef:a3:08:b8:a4:b9:8b:fa:10:
                    61:2e:2a:e4:77:c5:63:33:6a:fd:d0:be:2e:72:27:
                    2e:43:b8:4e:d3:1f:30:b4:87:42:ed:3a:8a:66:40:
                    2e:79:2f:aa:b6:a5:e1:d3:6b:cc:00:61:01:aa:9a:
                    26:2b:9b:1e:5e:67:93:52:71:17:1f:73:a6:d5:fd:
                    58:43:22:5e:8c:0d:dd:15:c5:92:81:69:ba:56:97:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:96:55:84:84:64:CD:CF:35:B0:0F:13:7F:1B:EB:17:C9:FA:97:E6
            X509v3 Authority Key Identifier:
                keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0f:48:76:66:d1:36:f0:0e:8f:3e:88:31:a4:49:93:16:37:
         59:59:58:6d:f5:df:8a:e5:03:b9:7c:3e:d3:d7:3f:66:54:fb:
         bf:0b:7f:1b:03:d8:53:69:c4:60:b4:0b:24:da:19:a1:f7:67:
         71:45:b7:75:8c:0f:89:ce:f8:d7:b8:70:f6:44:78:34:a8:12:
         bd:17:76:cb:0d:30:76:58:9e:ad:bd:c4:c1:a4:54:f3:16:5e:
         1c:8e:dd:d9:a2:b3:a2:7f:b5:c9:e5:92:79:6c:bc:4e:36:5c:
         41:d2:0d:04:e4:6f:2c:f4:66:79:a8:47:d5:50:01:dc:71:d2:
         da:e1:92:0d:69:eb:cc:c5:f6:64:0c:d0:e0:34:c6:e0:b3:6a:
         c3:21:cf:89:68:8a:a2:15:80:9a:21:96:9c:54:9e:30:09:31:
         20:38:f8:2b:a5:b1:c8:54:26:fb:9b:63:59:96:ab:68:bc:68:
         cf:4c:6c:5d:f4:c1:d9:7d:86:06:91:4e:13:6b:4c:ac:4f:58:
         2f:ec:ab:15:ce:e7:ad:4f:4e:df:d3:26:b7:d1:25:3e:51:d4:
         45:ed:dc:0c:35:ad:62:c3:a3:ae:71:18:ee:61:9a:97:30:fd:
         b4:a5:48:cd:44:82:3d:73:14:30:7f:d6:6e:b0:cd:f8:97:72:
         de:39:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:47 2024 by rpki-client on console-fra.rpki-client.org