Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File:                     qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier:          Qq+ZIjgPJtWSMIesFuVscwvdH7m/zMCaNAyNi8BS1yw=
Subject key identifier:   57:1E:28:CD:E4:17:6C:91:A0:38:FB:6F:08:B0:75:21:E2:DE:A2:38
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer:       /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial:       018F836D27C7B0FCF20E4C973D3C59F7117C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number:          1178
Signing time:             Thu 16 May 2024 22:01:59 +0000
Manifest this update:     Thu 16 May 2024 22:01:59 +0000
Manifest next update:     Fri 17 May 2024 22:01:59 +0000
Files and hashes:         1: QFVjGcBmqDgkmCxcPC-ydqjIa-w.roa (hash: Nt4AjtSOLcVnjtcNU/k+vz+3/otZC8mkXBF5v2kV9no=)
                          2: h0kmkGrFBOzt5v0CadgdRMML0Vs.roa (hash: KySeJR1ImOZjk3OXHk4uL03a+8VhH+bgym0fdLvSRMI=)
                          3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: QpM8t1vNAisjvA98Y44yAjE21m6rbeo3QUD1zXp7mbk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6d:27:c7:b0:fc:f2:0e:4c:97:3d:3c:59:f7:11:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
        Validity
            Not Before: May 16 22:01:59 2024 GMT
            Not After : May 17 22:01:59 2024 GMT
        Subject: CN=571e28cde4176c91a038fb6f08b07521e2dea238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:e3:68:d3:61:dd:f1:0a:5c:38:49:41:48:
                    e8:c6:8a:19:60:5d:76:1f:e8:e1:d6:f5:e0:12:5a:
                    f5:02:16:eb:ed:fd:17:0d:5c:7e:03:18:88:be:be:
                    49:59:24:a8:ec:0a:d7:a3:b2:eb:a9:47:62:2a:59:
                    37:cb:44:bf:90:b9:95:e5:5d:18:cf:84:02:96:ce:
                    a1:b8:fb:16:fe:4a:75:71:f8:b5:dc:e2:0c:0a:d1:
                    fe:43:2a:cb:d5:da:e9:f1:b4:cb:e6:2a:41:04:39:
                    98:4d:9e:df:68:09:b1:ce:3d:35:c4:bb:92:ec:f4:
                    93:4b:4e:5a:62:a3:f2:c4:b4:2e:a7:5f:90:48:ad:
                    0b:5f:56:72:a2:02:6b:f0:58:3b:5f:a7:a5:1b:71:
                    51:5d:7e:cc:91:ee:21:26:0c:de:9f:21:1d:96:3f:
                    15:1f:50:c5:39:8e:95:eb:ed:6a:5b:20:f4:ab:10:
                    bf:2b:65:fd:b6:61:56:5a:5e:39:68:ee:92:18:83:
                    68:28:f2:77:7a:2b:df:9e:90:04:03:77:06:97:64:
                    7c:cc:c1:6b:b7:5f:80:52:f0:11:88:c3:4c:18:2d:
                    ed:2d:8e:ce:a6:38:71:c0:51:84:79:a4:a9:c5:3f:
                    c7:f7:6c:3c:0e:6c:06:76:36:99:a5:26:3e:2f:e7:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1E:28:CD:E4:17:6C:91:A0:38:FB:6F:08:B0:75:21:E2:DE:A2:38
            X509v3 Authority Key Identifier:
                keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bb:a2:88:98:a5:99:40:72:5c:59:bc:b5:57:93:01:39:90:
         d9:e6:67:6b:1c:b9:c7:b0:e2:a4:66:49:64:bd:8c:3f:47:eb:
         33:96:6f:2e:13:ed:02:67:35:48:1f:9a:ee:d6:c3:7b:d7:2e:
         ee:48:26:d0:a6:7c:21:94:9f:0e:5a:44:8e:02:f8:5f:46:aa:
         40:11:a8:85:82:bd:4a:b0:70:be:5c:8d:64:63:49:47:b9:85:
         ce:61:70:1e:15:65:a0:18:9e:d8:26:c6:e0:51:dd:32:dd:9c:
         d4:a0:ab:67:eb:e3:d5:b3:54:22:03:4a:5b:3d:dd:83:5f:55:
         3f:e5:03:01:83:3b:5b:a1:54:cc:a7:8b:4e:95:9b:a1:48:61:
         71:90:af:8a:ee:d9:1e:6d:c4:01:6f:5c:9a:26:00:b3:07:a3:
         d9:b4:c8:5e:89:c6:83:a5:1d:89:62:63:2d:7f:54:31:2a:c3:
         c9:9b:b8:4c:1a:86:47:f6:a1:6f:af:67:a8:91:33:be:d2:00:
         a6:bd:ba:97:31:1b:0d:11:b3:a5:de:a4:f4:db:ed:d3:de:c7:
         14:52:f4:c8:f5:72:c6:87:58:bb:50:4b:e9:7c:59:57:70:9c:
         4e:9c:5d:b8:d3:7c:dd:cd:49:20:38:8f:82:40:6e:02:39:84:
         d0:c3:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:46:46 2024 by rpki-client on console-ams.rpki-client.org