Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File:                     qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier:          6NWS+IOLHjkXr0BH4lyh4GeUfH8OXqud2Ty2LbIH+74=
Subject key identifier:   8D:BB:DE:FC:A6:20:D6:73:45:9C:DD:C7:6F:78:16:2F:F6:39:45:0D
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer:       /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial:       018F874867189A2EBFB8D8BB2E637C47942F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:20 +0000
Manifest this update:     Fri 17 May 2024 16:00:20 +0000
Manifest next update:     Sat 18 May 2024 16:00:20 +0000
Files and hashes:         1: ovpN7DAzetUAEvUUc_oJ58-ZvVI.roa (hash: aX6lubQ4bnoYOPmwT0h9E+HHOuDlrRQrE3iqiMz/gv0=)
                          2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: UxlAjge0Rtie5iAvXwnaAd1GW3B7lJLFVlWebn5YkjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:67:18:9a:2e:bf:b8:d8:bb:2e:63:7c:47:94:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
        Validity
            Not Before: May 17 16:00:20 2024 GMT
            Not After : May 18 16:00:20 2024 GMT
        Subject: CN=8dbbdefca620d673459cddc76f78162ff639450d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:d7:a1:cf:15:4d:06:39:06:d9:af:24:62:
                    1a:18:66:c4:af:23:49:ff:dc:5d:29:7d:cf:dc:80:
                    75:c3:20:7b:2c:4e:61:e4:f9:ae:bc:fb:a8:9f:9d:
                    fa:62:e0:ff:d0:6c:b1:a7:4c:c1:52:38:59:fa:35:
                    30:06:f9:a5:aa:2e:7a:b0:28:9c:2d:ab:eb:c0:f0:
                    11:8e:e1:ab:b1:29:b0:78:0b:ab:fd:62:42:9f:a5:
                    63:ed:2c:02:c1:88:07:0b:bc:1d:ac:08:df:a5:5a:
                    be:30:d5:71:c7:10:89:02:9c:c7:b6:42:0a:24:06:
                    76:85:e1:d3:fa:a1:3f:ec:e0:3c:dc:7c:bd:ad:ec:
                    73:2e:73:4b:4b:af:75:38:3c:6d:5b:9f:3a:55:77:
                    92:41:b6:77:d9:85:e1:f8:19:98:25:e6:bc:76:14:
                    0a:43:98:ba:73:0d:2e:0a:47:99:33:eb:f7:00:a0:
                    01:54:d7:2f:75:8a:c7:50:ed:3c:b6:97:b5:83:a9:
                    3d:0e:d6:b9:17:90:34:c2:dd:8d:d1:10:a6:35:d9:
                    ab:71:5a:c8:14:cf:77:56:09:8e:c3:09:d6:ef:a6:
                    03:bc:d9:f9:9c:00:bf:e7:0f:b1:9f:8c:05:dc:15:
                    a6:6b:d1:83:a9:5c:5a:26:92:ff:58:51:00:7a:0b:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BB:DE:FC:A6:20:D6:73:45:9C:DD:C7:6F:78:16:2F:F6:39:45:0D
            X509v3 Authority Key Identifier:
                keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d3:b1:57:3e:5f:49:13:90:de:73:73:c0:cf:e0:27:1a:9b:
         05:c8:f4:46:37:78:e9:28:a8:bc:58:11:bb:da:56:d6:16:da:
         bf:23:be:1c:f4:78:e4:9b:f7:3d:04:ef:62:a2:c5:67:75:04:
         63:7f:4c:d2:c1:23:5c:5a:31:c6:d7:e3:de:f5:26:bd:94:a7:
         15:05:21:5d:34:be:07:31:f3:49:d2:e8:60:54:8e:3a:fa:56:
         87:b9:5a:3f:57:4c:c8:24:23:6f:2b:78:54:1d:a9:41:52:92:
         3b:36:e5:22:41:9f:46:87:52:7b:9c:1d:e3:0b:62:d1:a9:c3:
         5a:c6:98:df:c5:33:90:8c:87:ba:ea:84:54:56:85:f3:38:dc:
         6a:68:09:a9:7c:77:ed:3e:02:42:a4:3a:67:5e:7b:f9:8c:d8:
         78:e5:5e:40:36:0a:c8:bf:7a:c4:dc:2a:c5:ed:a6:52:9b:0a:
         40:78:2d:d0:01:fd:86:70:23:34:63:38:99:b0:d7:38:c9:c3:
         af:a8:d8:ae:e9:38:18:aa:d7:bd:d4:cd:4c:43:c3:a3:36:1b:
         16:1e:5c:35:0b:f4:b4:f9:73:9b:be:f5:65:15:77:9b:f7:45:
         a2:7b:9d:51:c4:a2:c8:76:53:bf:88:bd:4a:b0:0b:bf:b7:6b:
         45:99:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:13:49 2024 by rpki-client on console-ams.rpki-client.org