Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File:                     qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier:          Mhbw25ABg6XpOfUpeGnITwCu2nMKt7hCxyqPUaCu0CY=
Subject key identifier:   41:41:9D:04:5C:D3:5C:BB:70:96:23:88:8F:AD:D9:23:6E:D5:CE:D6
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer:       /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial:       018F9760AB59F746248BC13967999ACEB237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number:          117D
Signing time:             Mon 20 May 2024 19:00:45 +0000
Manifest this update:     Mon 20 May 2024 19:00:45 +0000
Manifest next update:     Tue 21 May 2024 19:00:45 +0000
Files and hashes:         1: 1-HpsrpmMdTDHdfBKxbTpNc4byDw.roa (hash: Uphk+8aKqnGpFHYuk6i+WYE7+NxG7F7J9fYuqXCZa2M=)
                          2: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: 7lzbEuyWhXY3hIFniaWmxrWRP50CPo9QPoO7iaG/a5Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:60:ab:59:f7:46:24:8b:c1:39:67:99:9a:ce:b2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
        Validity
            Not Before: May 20 19:00:45 2024 GMT
            Not After : May 21 19:00:45 2024 GMT
        Subject: CN=41419d045cd35cbb709623888fadd9236ed5ced6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:70:1a:42:0e:46:64:9c:2d:a5:e5:c6:70:
                    74:e0:bb:ec:ff:e6:76:01:09:5d:2b:81:da:dc:c2:
                    2c:e1:ce:40:29:84:ba:85:18:0a:8a:67:90:00:fc:
                    d7:bc:56:5c:bb:9d:30:6b:61:91:49:74:2a:7b:44:
                    d5:ca:9f:6a:da:2f:03:53:08:10:40:4c:18:aa:6c:
                    e5:5e:a0:a2:29:7f:45:74:04:43:f8:04:d2:bc:71:
                    7f:21:ea:c5:8b:78:22:99:4e:9b:b2:1e:1b:6e:3a:
                    9f:0b:29:14:ed:f6:76:92:c0:b9:eb:47:b2:62:0f:
                    19:f3:d0:96:c6:0f:f7:34:6a:f8:1e:f2:c7:b1:e9:
                    a8:6f:c3:47:23:f5:51:17:5d:e5:b5:3b:d8:65:a8:
                    87:20:5d:ed:d2:a6:2d:8b:f2:02:af:cb:42:58:51:
                    44:4e:d0:aa:99:3a:ae:e1:9f:7a:b3:86:41:bd:c2:
                    ca:7b:87:90:c0:0a:8c:27:b1:88:af:61:1f:1c:85:
                    7b:53:47:1b:fa:69:1f:46:a4:08:6d:18:c7:ab:20:
                    40:45:f7:e2:b7:50:ba:a6:a9:bb:cb:80:42:b7:cd:
                    cb:ac:a2:e9:ac:29:b5:fa:f9:c5:b9:d2:cb:d5:f6:
                    14:c1:6e:f4:fa:d4:8e:c9:f9:b8:a6:6c:cc:ef:0f:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:41:9D:04:5C:D3:5C:BB:70:96:23:88:8F:AD:D9:23:6E:D5:CE:D6
            X509v3 Authority Key Identifier:
                keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:81:21:65:6d:47:b7:d8:40:c6:3f:da:14:18:51:96:cc:82:
         e1:7d:b9:18:4d:b6:93:34:ae:ed:9a:29:24:3b:34:ef:aa:81:
         87:99:7e:8b:1c:3b:12:33:71:44:49:f1:b3:38:33:51:15:12:
         b5:9a:9f:65:ce:77:41:0c:d2:71:7b:24:02:2e:f5:b1:85:2a:
         55:b5:75:60:81:94:c6:9d:e0:c7:1c:9b:68:7a:7e:2f:bd:c0:
         4e:b9:e7:d7:c5:97:43:cc:c5:8f:4f:f9:a9:a3:31:fd:6e:d9:
         ad:b2:4c:30:d1:16:5f:63:8e:6d:28:35:5d:2b:91:45:57:42:
         79:5e:6d:dd:e0:b5:46:eb:ca:b7:f4:b2:73:38:b4:88:27:a1:
         2d:18:34:ba:3f:7a:16:61:c5:d3:bc:f4:50:30:64:94:56:9b:
         7a:55:10:65:08:72:08:99:8d:19:d0:22:99:3e:c0:63:89:f8:
         17:70:a9:23:81:c8:0b:05:37:d3:f9:ef:57:8c:69:8f:d5:5f:
         31:a2:f1:7b:fc:38:66:d8:30:84:59:6b:79:5d:8d:16:b8:93:
         49:0c:36:f1:11:43:59:90:0d:d7:b2:89:1f:08:e4:33:04:28:
         c0:9c:14:2a:37:3b:43:69:81:51:42:04:7a:7c:1f:ad:45:44:
         1a:1e:a8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:06:59 2024 by rpki-client on console-ams.rpki-client.org