Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File:                     qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier:          oC1ABCJCPchKq0cZz//RXsMBaXMqQEwK66Eb8Iki0XI=
Subject key identifier:   97:90:F1:73:86:43:C1:CC:88:9D:43:88:C1:67:74:5F:53:9B:0C:9E
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer:       /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial:       018F87483326C552509BE85694429A7DB3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number:          0FD7
Signing time:             Fri 17 May 2024 16:00:06 +0000
Manifest this update:     Fri 17 May 2024 16:00:06 +0000
Manifest next update:     Sat 18 May 2024 16:00:06 +0000
Files and hashes:         1: ilDKw7-E1doCFmV5gdTB66ZBwAg.roa (hash: bHDo+bldPttKDhKsvvOzcdyKBOO2cLviC2PvrAW2Xvs=)
                          2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: jSylMRYyHKu3Xo8xbY4HfUA4Um8txRvvoauMZ4japI0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:33:26:c5:52:50:9b:e8:56:94:42:9a:7d:b3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
        Validity
            Not Before: May 17 16:00:06 2024 GMT
            Not After : May 18 16:00:06 2024 GMT
        Subject: CN=9790f1738643c1cc889d4388c167745f539b0c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:6b:30:a9:d7:f9:2d:e3:04:5f:31:2f:30:
                    2b:a3:ff:72:85:5c:3b:18:29:1e:6e:16:c9:b0:b9:
                    96:df:b8:a9:b5:19:ac:8e:f8:6b:bf:e9:2a:a4:37:
                    cf:5d:ce:0e:ad:55:d8:a3:94:75:1b:ed:b4:4b:d4:
                    1a:85:96:60:05:31:3e:25:6c:4e:de:e5:36:59:3a:
                    97:16:64:7a:e5:93:08:50:9f:e9:84:4d:d1:1d:24:
                    61:d0:dc:aa:cb:a8:26:d4:54:5e:4d:be:1b:98:fc:
                    01:28:ad:51:ed:df:e3:2f:9c:ec:2e:9f:f6:1e:86:
                    ba:08:c0:86:b1:75:ef:74:70:b9:e3:30:e5:17:fa:
                    a0:02:01:e5:b4:be:c1:5b:9f:d5:6a:d2:d0:00:33:
                    62:e2:3c:f1:30:bf:ea:bf:26:fd:d5:b9:fc:7a:2d:
                    f1:9f:12:cc:99:91:f3:b8:29:d6:6d:f0:e5:03:0a:
                    2a:b3:78:fd:5c:e3:20:d5:f7:c4:08:57:ec:f8:25:
                    d5:91:3a:f7:7d:7e:6f:95:75:a5:f9:bb:02:d7:e7:
                    b1:f0:dc:65:76:c0:c0:0a:82:0d:5e:8b:d8:99:a0:
                    1f:d8:5b:50:f7:8b:e0:a8:51:f0:d0:8f:8c:01:df:
                    35:0f:ed:2f:75:93:00:94:e7:7d:ae:b1:81:fe:11:
                    90:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:90:F1:73:86:43:C1:CC:88:9D:43:88:C1:67:74:5F:53:9B:0C:9E
            X509v3 Authority Key Identifier:
                keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6c:cd:23:c9:2c:20:81:7b:cc:5e:54:13:b1:03:d6:73:58:
         c6:b5:46:e2:6e:f6:9e:fe:22:46:4c:fc:c6:41:2e:79:9f:40:
         3c:d0:e0:27:7e:04:dd:e3:88:7b:ee:c7:07:59:08:97:3a:3c:
         45:ad:7e:45:12:ad:f7:e9:24:a5:41:7f:33:05:ae:52:c2:c2:
         3c:e4:eb:eb:b1:eb:d2:a1:77:2d:de:33:61:ee:29:85:d8:a2:
         1d:89:91:7b:f2:21:b5:27:05:33:20:fe:22:68:16:6d:0b:cf:
         11:8c:e3:b2:aa:aa:25:62:8c:78:59:b5:51:d9:aa:62:6f:0f:
         70:54:c7:77:35:e9:5f:73:ae:86:1a:ae:77:70:28:83:1d:cd:
         ce:70:ab:df:90:97:be:c8:d6:bd:d9:a0:90:9b:66:07:bb:7f:
         f8:a3:a0:a7:7b:fd:5c:23:38:2d:dd:dd:00:09:fa:69:4e:10:
         5c:ef:bb:f5:b8:a2:0e:43:42:1a:da:fa:c6:f9:9e:85:27:67:
         0c:7c:4c:70:02:5b:94:6b:c5:47:37:31:36:18:db:8b:95:fd:
         12:83:34:71:30:c5:aa:85:db:5d:9a:a9:16:ae:50:27:93:13:
         43:ee:7a:65:92:85:09:ab:87:9e:be:aa:1b:39:16:8a:2a:04:
         07:51:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:11 2024 by rpki-client on console-fra.rpki-client.org