Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
File:                     qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft (raw, json)
Hash identifier:          v7nsN8XCQABQsLcWzO68rRdZmKUGqmHu4Ode/nTJxc4=
Subject key identifier:   46:E4:29:89:51:C3:E7:AF:74:A9:95:FF:42:D8:D7:DF:4A:91:05:91
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Certificate issuer:       /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial:       0191F9D9A181F97A41DA3FF987503ADED49D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
Manifest number:          A8
Signing time:             Mon 16 Sep 2024 08:01:15 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:15 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:15 +0000
Files and hashes:         1: a5c7n6xsy08GJNBQs4ykQaZCkX8.roa (hash: Yi/S+n/aEJ9FcBMGlbhTX9ZTm1vxeJ6rG86QBIxGovQ=)
                          2: dmxCOf9-xomYy38e6jWFLs1MX8I.roa (hash: PvnD5+tDv8cYjeVs2bAyA3YRVeGrdslh9IkQYw45Klc=)
                          3: qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl (hash: r2FjdnJxHluN+NCtuvVnvp716nqkhYrlilEKfhDiCvw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:a1:81:f9:7a:41:da:3f:f9:87:50:3a:de:d4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
        Validity
            Not Before: Sep 16 08:01:15 2024 GMT
            Not After : Sep 17 08:01:15 2024 GMT
        Subject: CN=46e4298951c3e7af74a995ff42d8d7df4a910591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:f8:51:f3:cb:e6:84:c8:91:a4:c3:2b:c0:
                    d7:50:9d:ea:a3:7b:b9:67:6e:23:cd:4e:73:74:3e:
                    61:84:aa:5d:2f:0f:f9:4b:04:7b:dd:0e:48:72:41:
                    78:86:bf:57:d1:2e:3e:b9:07:4c:ee:45:ce:97:0a:
                    25:76:ce:a2:02:d3:cc:e3:bd:d7:f4:35:f2:b5:38:
                    63:05:4c:18:d8:62:7c:27:ea:ec:e7:24:9b:18:94:
                    4d:07:1a:e5:10:d6:d7:aa:95:4a:8e:e4:be:72:e7:
                    e4:6b:90:d0:f9:a0:62:0c:cb:1a:08:6c:03:83:03:
                    7a:da:30:a8:7f:6d:43:4a:21:bd:3f:5f:6b:90:d1:
                    5b:55:24:e7:8b:4d:80:3c:66:ec:ea:b6:94:da:2a:
                    1a:71:5e:57:b2:37:08:90:ac:2d:5e:c9:f1:d4:b1:
                    a9:e7:98:63:35:cd:e1:ba:4b:6a:49:33:8e:f9:d4:
                    54:3a:59:46:e8:56:62:fb:05:65:35:2e:7b:de:06:
                    20:7f:b0:ab:96:ec:b5:c2:02:06:95:ca:ae:3f:12:
                    8a:6e:b3:f5:d7:c8:2d:82:80:97:f1:c0:f7:71:2d:
                    8c:58:ec:82:87:25:f1:85:3b:5c:28:18:94:9f:3e:
                    9b:5c:61:74:d8:b8:39:8a:ac:a0:b7:ad:2e:cd:06:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E4:29:89:51:C3:E7:AF:74:A9:95:FF:42:D8:D7:DF:4A:91:05:91
            X509v3 Authority Key Identifier:
                keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:16:0b:bf:bc:24:0c:d0:6c:22:38:2b:4d:64:a0:a2:8d:48:
         9a:53:83:d6:56:90:56:c8:61:45:d6:f8:7c:53:ed:59:96:c5:
         a3:b5:df:54:e6:4e:b2:e6:94:23:16:0f:19:2a:3e:15:63:f9:
         37:21:d6:35:c1:90:17:f1:ad:5d:a2:5c:0f:32:87:30:8b:2b:
         6c:3a:59:c5:8c:2b:8e:52:44:d1:2a:a1:e4:26:28:32:8d:d5:
         76:7a:c7:3b:9a:5a:53:28:f9:e9:01:ae:05:b0:dd:3d:41:1e:
         d7:ef:ed:98:6f:61:ef:1e:69:f2:8a:52:24:2b:64:e1:23:8f:
         13:3d:93:d6:dd:fc:f2:20:df:b6:38:88:f4:67:93:1a:62:ed:
         67:64:42:31:8c:12:55:09:3d:78:8b:29:37:8d:2e:e2:59:4e:
         35:44:66:cc:39:87:dc:33:ff:ce:67:b7:bb:7a:51:e1:15:0d:
         f8:d1:ed:06:98:ae:9f:d1:cf:a0:ab:3f:d5:af:98:70:f8:3c:
         ec:06:5d:8b:4f:82:df:fd:4f:04:d9:e9:dc:36:63:4f:d1:ed:
         88:b0:c7:c6:8a:41:c7:07:a4:3e:49:37:a2:01:a3:37:a7:5d:
         65:7e:bb:c5:22:63:05:53:ab:14:45:9f:9e:ac:99:92:73:77:
         35:eb:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:18:21 2024 by rpki-client on console-fra.rpki-client.org