Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File:                     h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier:          iZ+PMlScwaqhFpsZSHyN7zFDkDOetoHmYYOhDjmq6M4=
Subject key identifier:   29:D9:34:76:C5:FE:54:2E:19:92:76:45:19:6A:BB:B2:ED:7C:09:8C
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer:       /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial:       019052B419DEC518D8EE468A8279324E0048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number:          11E2
Signing time:             Wed 26 Jun 2024 04:00:53 +0000
Manifest this update:     Wed 26 Jun 2024 04:00:53 +0000
Manifest next update:     Thu 27 Jun 2024 04:00:53 +0000
Files and hashes:         1: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: TeNeS9oW3vMQ53vxDDs+JbDk5eWDS+mZ8zUxRJQSBrk=)
                          2: lGpZe0nfyjOPNSkdYjcNpksLuCM.roa (hash: DyT5m/e4p5SWboXAet9Hdxvbppe4hsfCjEIarqZC9yI=)
                          3: mxxC2ISV1_TwM4_U2ILZBb4u7t4.roa (hash: pFz1Cpt2oXLzJGP8qhSQnZNq38oCk4hhj/OKOC8ikv8=)
                          4: rm2iYrhCeZh0WuPfbBczDX0YuKA.roa (hash: V6T5VDPaycAlsUR1J0Rrr7D6z1L3X0nIgrNWlkUsREY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:b4:19:de:c5:18:d8:ee:46:8a:82:79:32:4e:00:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
        Validity
            Not Before: Jun 26 04:00:53 2024 GMT
            Not After : Jun 27 04:00:53 2024 GMT
        Subject: CN=29d93476c5fe542e19927645196abbb2ed7c098c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:c5:49:31:6e:89:4c:7c:a3:84:53:44:d8:
                    68:e9:93:74:d7:06:b8:d3:51:26:9a:04:6f:e1:54:
                    c9:0a:d3:a7:c8:33:f0:74:57:2c:08:4d:06:9d:96:
                    8f:9a:0e:f4:56:10:e6:f5:b6:d2:fc:25:2a:1f:20:
                    6f:63:37:b3:4f:27:2a:a8:7d:20:bd:49:58:ed:ac:
                    fb:64:96:42:da:8c:d8:2a:45:bb:70:d0:5a:a9:17:
                    9e:23:2b:57:21:2b:fb:46:51:62:0b:b6:b9:75:a4:
                    d3:46:d3:31:8c:21:c6:9a:f3:88:1c:4a:a3:43:2c:
                    ff:19:1d:a2:bb:ac:0f:62:21:81:98:d9:d1:3e:6b:
                    3a:c5:e2:1b:c9:6f:2e:06:1f:e0:cd:57:82:4c:02:
                    62:cb:b7:ff:40:b7:94:b1:7d:12:43:bf:9b:6f:e5:
                    46:42:ce:c4:16:64:f6:a4:cc:04:c0:04:5f:c6:51:
                    bc:8e:38:cb:dc:eb:f1:69:87:5f:5e:f5:02:7d:aa:
                    e2:3e:a8:71:48:c3:16:88:47:2f:1a:1f:3b:8b:f6:
                    2c:cb:d5:1f:c8:e5:13:1e:04:db:69:10:5b:45:64:
                    41:d9:7f:be:0c:43:81:75:44:0c:01:1a:72:e2:dc:
                    1f:d3:34:2b:c5:53:04:65:05:47:4f:74:2d:8a:4e:
                    f1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:34:76:C5:FE:54:2E:19:92:76:45:19:6A:BB:B2:ED:7C:09:8C
            X509v3 Authority Key Identifier:
                keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:64:75:07:21:23:a0:e1:6a:17:ec:05:5b:ba:92:b6:f0:42:
         79:55:ca:b1:f4:73:22:45:f4:86:9e:3e:03:1c:ff:95:10:9a:
         52:d2:6a:61:5f:a8:73:46:0a:b4:a6:f5:08:9e:17:e9:9d:17:
         3b:67:b9:2a:7d:0f:5e:a1:0f:b3:d0:28:8a:b5:77:32:24:11:
         12:2e:52:20:a0:9d:7f:42:4f:14:94:28:f2:e0:ba:80:12:ff:
         70:98:fc:d2:9b:24:9f:d5:51:05:06:a1:11:24:ab:d6:33:33:
         2d:20:12:35:69:b8:00:0b:a8:e1:1b:fa:0d:d8:cd:41:18:19:
         f9:cc:f6:ac:6d:0f:8c:f4:84:7d:75:63:17:6a:ea:4a:08:f9:
         d2:21:e9:a6:b4:5c:68:da:80:96:63:cb:74:cb:70:ed:85:12:
         a5:dd:d7:c4:91:b4:66:ad:34:41:dc:24:62:75:1d:e3:69:0c:
         a9:8c:3b:d2:a0:bb:80:ec:27:1d:36:94:69:3c:f5:57:05:76:
         9e:88:0c:0f:52:f9:2e:c9:0b:61:6b:00:63:d3:2f:b7:4a:25:
         8f:7e:5a:82:91:21:29:21:98:da:d7:bd:26:b8:cd:81:ca:ce:
         34:33:bd:05:26:e8:eb:df:4f:8f:22:68:4d:95:34:0d:94:c6:
         89:6d:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:39:12 2024 by rpki-client on console-ams.rpki-client.org