Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File:                     qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier:          P9dmXlTaaareUl8oK24xh6gn/S3Acxp0t6PX4QAhnRs=
Subject key identifier:   B2:E5:CC:62:17:C6:8C:F3:2C:25:A1:6D:39:FA:31:D0:F5:E6:FC:2D
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer:       /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial:       018F87ED7B64EB233F10985FF5FE0C7D77A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number:          025E
Signing time:             Fri 17 May 2024 19:00:38 +0000
Manifest this update:     Fri 17 May 2024 19:00:38 +0000
Manifest next update:     Sat 18 May 2024 19:00:38 +0000
Files and hashes:         1: OllyXAcLSxx0S6sOWUGPFB13GNg.roa (hash: +Wr96qUh5RqiH71Pdc/jDhjvl/S8nBH4xkSrVBs7NC0=)
                          2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: PHRwNg8T52WzJS3P7LWv4hqqRm+hOmYS9QYOsvXg2SU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:7b:64:eb:23:3f:10:98:5f:f5:fe:0c:7d:77:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
        Validity
            Not Before: May 17 19:00:38 2024 GMT
            Not After : May 18 19:00:38 2024 GMT
        Subject: CN=b2e5cc6217c68cf32c25a16d39fa31d0f5e6fc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:3c:8c:36:44:7d:b6:4c:9f:89:07:a0:01:
                    3f:4a:63:ba:3b:a2:db:d2:84:6f:79:0a:8b:cb:c8:
                    c4:06:02:29:04:05:1d:31:47:f9:e7:48:09:75:aa:
                    93:92:20:0f:6e:42:e8:3d:42:61:4b:d6:9b:f0:fc:
                    34:99:0a:d5:fe:2c:ab:d8:e2:7a:f6:7f:a4:cb:a1:
                    05:c3:8a:74:ad:6c:ce:75:02:7c:b8:70:5c:82:c0:
                    15:64:9a:3f:1e:ec:3e:fd:73:86:96:3b:5e:82:40:
                    88:48:b9:e7:7d:76:71:98:7e:7f:fd:56:66:07:78:
                    08:38:1d:51:53:17:66:a2:02:52:ef:39:5d:c1:dd:
                    89:dd:26:ce:d2:6b:46:29:8f:cb:70:1b:98:fc:01:
                    d8:a1:ff:73:09:e1:89:99:08:f4:0c:0d:0d:15:58:
                    29:91:74:fa:7c:7f:be:1b:81:14:fd:c2:27:77:11:
                    e0:61:6c:da:54:bd:b1:e6:4a:f9:90:ef:b3:38:b3:
                    a6:45:77:9c:50:28:d2:c2:4d:8b:51:07:71:70:17:
                    81:20:d2:9a:4a:7a:57:7c:c6:4d:82:de:56:1a:c4:
                    63:00:48:36:76:cb:f0:7b:21:1e:4e:d4:ad:5b:f8:
                    d5:7b:cd:f8:5f:c3:a8:4f:76:e8:c9:b2:37:90:b4:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E5:CC:62:17:C6:8C:F3:2C:25:A1:6D:39:FA:31:D0:F5:E6:FC:2D
            X509v3 Authority Key Identifier:
                keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:16:51:f8:d8:4c:f5:13:e2:9a:2d:ff:dd:de:53:21:27:87:
         e8:eb:84:aa:fd:13:47:a6:fd:3f:06:ce:dc:eb:5c:48:60:da:
         21:ee:6c:a5:79:da:42:4d:46:9c:d0:27:80:13:c5:fe:89:40:
         f3:61:48:14:36:cf:51:3d:44:e2:06:14:11:eb:47:28:56:28:
         c2:eb:62:f4:03:cb:1f:7c:22:d8:0d:32:c7:76:30:f5:37:f1:
         9c:3c:83:83:81:44:bc:54:a4:1e:79:8e:41:3f:44:f8:ad:9a:
         4b:aa:b5:82:90:dc:2e:89:ae:a6:84:32:44:b6:9c:ef:af:50:
         b2:dc:5f:9e:2f:85:70:2f:ea:2b:a6:87:b8:b4:01:61:d0:65:
         b0:0e:91:1a:d6:4e:4d:ca:75:18:34:f7:11:bd:c1:63:8c:6a:
         54:5b:b4:e9:57:ce:af:e1:a7:f8:63:01:ec:87:b9:1c:e5:b8:
         da:c3:48:6b:89:88:91:ee:0b:d8:ab:9d:bb:bc:00:55:5d:a6:
         bc:d3:c0:7b:6e:23:ec:06:53:dd:a9:fe:1f:87:76:45:35:5e:
         ea:f6:1a:6b:5d:47:11:45:fa:67:6a:cc:e4:d9:c1:bb:70:fc:
         8b:61:b4:ec:ec:a6:78:f9:ed:7b:5c:6a:23:42:dd:00:7d:f2:
         5e:1f:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:08:51 2024 by rpki-client on console-ams.rpki-client.org