Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File:                     qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier:          BHhXtg5WpAO9xRfAwX80rtNT9fslu7kjVZai7+hpauw=
Subject key identifier:   C7:D0:21:C7:B1:99:B4:A5:A2:70:F8:80:DC:F3:A5:E3:23:43:14:BD
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer:       /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial:       018F86A3B136821298773C0B8D6AF3A8BCE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number:          06E8
Signing time:             Fri 17 May 2024 13:00:25 +0000
Manifest this update:     Fri 17 May 2024 13:00:25 +0000
Manifest next update:     Sat 18 May 2024 13:00:25 +0000
Files and hashes:         1: bK-a4vPt7WHGjItPv5otIKH2a8U.roa (hash: xRelJlbKXbkkN/YSUKd5r/c/hEBDFk5kkDAtx39qii0=)
                          2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: rvOxWj+Z5+gAqUJiIOek6DP7EkSqCYyCsPLqgMpr1r4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:b1:36:82:12:98:77:3c:0b:8d:6a:f3:a8:bc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
        Validity
            Not Before: May 17 13:00:25 2024 GMT
            Not After : May 18 13:00:25 2024 GMT
        Subject: CN=c7d021c7b199b4a5a270f880dcf3a5e3234314bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:ec:29:18:8d:7d:e1:4f:07:fe:1d:e1:ac:
                    26:d6:76:dc:c7:fe:34:f9:fc:b6:ce:23:6f:1f:ca:
                    77:8b:4a:6c:95:64:6a:97:35:97:a9:c9:ed:89:97:
                    f9:84:33:ea:76:99:82:c0:4c:5e:ad:4d:d5:cb:15:
                    a4:9c:a0:b4:83:16:b0:e2:f2:61:05:6f:54:1e:f1:
                    c1:c0:f3:c7:a8:4a:39:7d:b6:81:46:7d:39:08:3c:
                    ab:91:4b:8c:64:62:8a:5c:c2:72:77:66:b7:6d:5d:
                    5b:0e:69:07:54:9f:5d:b1:b8:77:65:55:e4:3f:d3:
                    ad:95:b6:74:ff:36:b4:81:96:0b:9f:6c:6e:c5:94:
                    b6:be:01:3b:e9:27:b6:50:13:59:8a:7a:cd:02:d8:
                    86:aa:49:21:96:c4:ca:bd:80:38:16:8a:b5:3e:87:
                    dd:1b:43:39:30:da:d6:cb:dc:5c:70:80:50:c8:7f:
                    e8:cb:c2:0d:4a:d0:43:68:c0:58:62:d0:dd:02:20:
                    3c:da:a5:57:bc:cd:62:30:2c:f3:e7:44:13:a5:5a:
                    d8:9b:1e:1e:cd:48:e2:21:f8:c2:d1:84:17:56:65:
                    36:d0:9e:3f:0e:e6:ed:db:af:f0:10:07:11:8f:fa:
                    69:5d:01:45:d7:76:84:ff:80:69:68:b8:02:ef:fa:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D0:21:C7:B1:99:B4:A5:A2:70:F8:80:DC:F3:A5:E3:23:43:14:BD
            X509v3 Authority Key Identifier:
                keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:97:93:7e:68:60:32:28:79:8d:60:a6:41:70:b0:76:c8:95:
         76:39:c5:46:20:9e:54:9b:d0:18:6c:02:da:a8:55:e0:28:d3:
         30:5d:5d:02:4a:a7:76:b8:19:09:88:d0:b3:65:82:8b:e9:91:
         0c:cb:a5:14:7a:0f:37:5f:10:b7:ac:be:cb:2a:a8:53:1c:2c:
         da:be:c7:02:49:49:c3:d6:c3:bc:f0:8c:08:e7:15:8c:a5:8a:
         cc:0a:4c:b2:f6:85:91:c0:b8:ec:6f:47:97:82:2b:99:13:c1:
         ca:96:bf:03:7f:e6:61:ce:0c:12:90:59:1b:2e:e9:a8:91:ed:
         30:ac:94:c2:75:08:20:90:07:ed:94:e8:30:9b:8c:39:92:da:
         de:2c:1a:04:7e:f7:b1:12:dd:f2:55:5a:f2:4b:be:2e:6a:57:
         db:fd:60:30:f0:9b:c3:61:59:d2:6b:59:98:79:56:5b:d1:c0:
         ec:df:1a:f2:33:7e:59:ff:f8:00:b8:32:e5:76:9e:f2:aa:d4:
         17:c6:8c:5d:a4:94:e8:27:68:dc:8b:92:1d:8e:43:3e:e1:d6:
         c3:89:13:bf:7b:24:db:7c:79:83:44:39:e4:30:c2:34:d2:00:
         2c:79:9f:0e:59:0e:ec:38:ca:f1:f7:64:41:3f:15:eb:e6:84:
         61:46:4c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:33:24 2024 by rpki-client on console-fra.rpki-client.org