Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File:                     QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier:          /Kadga8HRRM2bcVzuvJn2NrrsRaV+kBUEoazcSxoIQE=
Subject key identifier:   3C:E2:46:7D:24:A6:9D:0D:89:8E:F9:B5:1A:86:63:0D:96:A1:AF:1B
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer:       /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial:       018F87B6A9DAB87DBD4780037525508B0241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number:          0A39
Signing time:             Fri 17 May 2024 18:00:46 +0000
Manifest this update:     Fri 17 May 2024 18:00:46 +0000
Manifest next update:     Sat 18 May 2024 18:00:46 +0000
Files and hashes:         1: GNZ9lBNN0fk-FlzHbPwEofqpIU0.roa (hash: oRn/UPDhfLUG50LiJX38JC+BFkpO2/98l4Oq5gRIEuM=)
                          2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: Uup3lE1XZ6WI3YANPDSDSYWekkmw1LmhBoMfTEv3daw=)
                          3: i801O4J0IT9F4HJmCG_QxWKb5UM.roa (hash: dX1RstGwfc6yo9+voarCcHzD2FE2OGv0AicAAOX4y0c=)
                          4: uT_SamBE92l8z4uuPY70jEyR_B0.roa (hash: ADWh+NK0Tdt+7HHb6Z7zHyQFkBy3PxwQf1pVPUTjJck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a9:da:b8:7d:bd:47:80:03:75:25:50:8b:02:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
        Validity
            Not Before: May 17 18:00:46 2024 GMT
            Not After : May 18 18:00:46 2024 GMT
        Subject: CN=3ce2467d24a69d0d898ef9b51a86630d96a1af1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:72:21:14:08:2c:1d:95:34:f5:66:08:51:24:
                    e9:b0:dc:11:e5:d3:c3:93:36:af:48:02:31:a6:ae:
                    d8:5e:1e:ac:19:6a:62:46:0c:c2:42:e5:bf:1c:cf:
                    94:c7:a8:d1:71:e4:0b:3a:c7:5b:a4:0a:f5:40:05:
                    8c:c5:07:32:de:ab:3f:77:15:95:b0:f9:ab:2b:51:
                    d4:6a:0a:9c:7a:14:f0:ee:ff:f1:dc:a3:9f:2e:ee:
                    e5:f9:87:4f:02:8d:32:82:ac:e2:b6:65:58:ed:23:
                    62:e1:2c:d1:8c:36:eb:8f:73:ea:f4:ee:a2:57:12:
                    97:2b:88:9d:c7:34:c6:cf:ce:c3:19:e5:e2:ff:6a:
                    fe:55:b7:44:b1:2c:b9:17:68:67:34:05:52:d2:d5:
                    2c:29:21:46:df:d6:d7:cb:d7:16:2f:7b:b6:cc:73:
                    62:2a:ef:99:6c:00:e7:ef:35:5d:94:4e:d1:78:b9:
                    c2:8f:7d:16:73:d4:a2:5c:b3:01:b2:74:c3:09:21:
                    3a:9a:38:0f:99:f8:60:e6:7c:d2:59:dc:dc:ca:87:
                    70:9d:0e:2b:b4:90:80:a6:36:1c:50:de:e7:84:a9:
                    b2:48:75:2c:fd:3b:55:27:33:05:6c:31:9c:4b:33:
                    e3:dd:4d:b1:1f:1e:1c:c1:6f:92:90:b3:97:4e:c7:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E2:46:7D:24:A6:9D:0D:89:8E:F9:B5:1A:86:63:0D:96:A1:AF:1B
            X509v3 Authority Key Identifier:
                keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:07:5b:a8:17:18:2b:9c:e5:00:d8:90:eb:5f:85:a5:95:5e:
         3a:eb:1e:7c:74:54:70:ed:cd:8e:dd:af:a9:9d:17:be:9e:8b:
         45:78:7f:ed:77:2c:ad:ec:21:f8:26:1c:88:ac:cd:5a:d1:b5:
         59:e2:83:d5:9f:fa:43:86:c9:3d:9a:d0:d8:d0:e9:41:96:b3:
         f1:cc:a3:b2:f7:bc:e0:46:9e:4d:54:0e:03:4c:b3:c3:43:c0:
         cb:82:29:3e:ae:ed:5c:7c:98:3a:72:98:0f:c3:62:49:a7:25:
         89:81:5a:f4:b7:6d:c4:e7:e8:e0:50:5d:77:3a:e9:7a:46:ab:
         84:3a:c7:21:f0:76:9e:c1:6f:d0:18:e9:e1:72:68:71:8f:c9:
         a3:e0:28:fb:13:24:d4:63:11:43:69:1c:ca:7f:05:fa:22:81:
         09:02:39:eb:c9:37:45:96:e4:be:ed:e1:77:ca:e4:24:d5:bd:
         26:d8:f8:25:9a:59:04:7f:3a:b0:c0:b3:dc:cb:2f:90:cb:ab:
         05:13:ed:de:62:dd:0d:6d:b9:df:90:50:86:32:70:bb:64:c6:
         e1:69:a5:c2:80:6f:a9:d3:91:3d:c7:91:df:df:fc:3d:1a:17:
         7d:da:8a:29:12:81:5c:38:cf:5c:76:e8:64:e3:f6:21:d1:51:
         5a:2f:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:43 2024 by rpki-client on console-ams.rpki-client.org