Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File:                     qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier:          VtH5Tblk1sA2uSMrUDOxkciWcEcXrOtblXeD7upwuaU=
Subject key identifier:   7A:5F:85:DC:EE:AD:97:3B:3A:FE:80:EA:49:88:EE:5F:CB:E6:00:6F
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer:       /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial:       018F5F29306D56715D2C040AB5E2D4FC3118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number:          0D4B
Signing time:             Thu 09 May 2024 21:01:25 +0000
Manifest this update:     Thu 09 May 2024 21:01:25 +0000
Manifest next update:     Fri 10 May 2024 21:01:25 +0000
Files and hashes:         1: 656nYURxY3eIKKADyW7vtfz2QvE.roa (hash: WBUvRjg+A6FKpkAnfu2lffuT8cUZiY6w2S0wGvI5L/g=)
                          2: hHmErcH__x5E9mcORvdogMmdR_w.roa (hash: 0umHWRSP+ZBCxm9D15dqF4xRqK2KsVhu/THCSrFk+8w=)
                          3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: JVpmLnhnxU8/GBE/MVgaslz2Oe/7/GGq+2oCsrFRxkU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5f:29:30:6d:56:71:5d:2c:04:0a:b5:e2:d4:fc:31:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
        Validity
            Not Before: May  9 21:01:25 2024 GMT
            Not After : May 10 21:01:25 2024 GMT
        Subject: CN=7a5f85dceead973b3afe80ea4988ee5fcbe6006f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:06:b6:92:db:18:f8:24:8b:3f:2b:11:af:
                    16:6d:2c:fe:c2:de:db:39:30:cf:2c:f0:57:71:9a:
                    b7:82:28:59:69:9d:a0:d7:e7:f7:9e:81:4f:4a:ce:
                    9d:52:79:a7:e5:bb:7b:47:87:6b:55:0b:27:83:80:
                    35:c4:50:f5:8d:46:e3:10:fb:ee:6b:b1:9a:0a:95:
                    c4:33:df:31:ee:7e:4e:ea:70:a5:df:c2:a6:19:65:
                    8a:7a:47:36:23:e0:b6:33:d7:09:12:ac:83:7c:82:
                    f5:98:e9:26:53:cd:62:1b:1b:64:23:f7:d6:0d:c5:
                    a2:c7:b8:7e:05:c3:27:76:c2:d0:cb:9d:66:da:52:
                    6b:c4:70:e8:24:ae:fc:4d:6a:f0:3a:72:75:6d:ff:
                    e1:9d:c6:87:c2:91:19:68:22:93:3e:7d:32:e6:e3:
                    b3:be:fe:ff:56:05:30:4c:c0:67:c3:10:75:9e:13:
                    dc:18:34:ed:d7:7b:30:85:65:86:51:23:a6:83:b3:
                    47:8b:c8:67:fd:8e:33:19:6d:5d:9d:b9:ce:b3:08:
                    72:af:fc:ed:11:d1:a9:58:90:dd:12:b9:0e:7f:2c:
                    6e:dd:6f:f0:c4:6e:60:a7:e2:dc:d1:11:e0:62:e0:
                    b3:44:55:a6:97:44:36:70:de:ed:e1:c9:63:d5:2a:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5F:85:DC:EE:AD:97:3B:3A:FE:80:EA:49:88:EE:5F:CB:E6:00:6F
            X509v3 Authority Key Identifier:
                keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:31:ce:71:28:2b:91:e6:98:d7:82:2d:a8:28:a2:d2:0d:2a:
         23:2d:5f:1b:94:72:46:71:ba:fc:21:31:be:1e:c5:51:69:81:
         a9:3f:ee:c3:4c:0a:12:92:80:31:b8:70:be:5f:9e:57:a9:23:
         de:bd:ed:1f:ab:75:62:3c:41:d7:e4:7e:cb:a0:f7:a3:8f:32:
         fd:73:6a:2b:79:72:f7:a1:99:fd:24:e7:77:79:63:d6:6e:dc:
         c7:05:53:ea:67:5f:f5:3b:4d:0a:7b:42:63:fb:2b:e9:2e:b2:
         fb:d7:8b:54:5e:da:d2:5c:39:e4:3a:7d:8b:93:2b:f6:44:10:
         4c:d5:f2:55:90:49:7e:46:c1:01:22:8b:c8:26:0c:28:2a:3f:
         91:e8:f1:d9:53:d6:16:a8:d4:32:db:6c:37:9a:5c:e2:31:66:
         44:68:39:0e:98:39:22:f1:4e:58:cb:f4:30:18:bd:68:d2:c2:
         c7:05:5a:62:d1:24:8a:b8:f8:ae:3a:e3:77:45:20:43:9f:ff:
         95:38:2a:46:6b:f3:98:ad:c9:e8:9a:05:27:82:bd:90:82:41:
         b1:83:a1:5b:68:95:c2:c1:de:1f:11:6a:de:e5:a0:bf:5a:a4:
         c3:43:1a:3b:d8:53:a2:12:e9:3b:3a:84:c7:1c:a7:b1:8a:23:
         a8:24:49:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 01:12:34 2024 by rpki-client on console-fra.rpki-client.org