Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
File:                     QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json)
Hash identifier:          cfWlue65Jf/QzGFExt1jbYsKr8xaNxBkaKFHGRlLvOc=
Subject key identifier:   B2:DE:6E:7F:5A:FA:8B:CE:34:66:73:64:11:53:D0:CA:FA:0B:F4:8D
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Certificate issuer:       /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial:       018F87B67F508757ED53F15AFD450CE12629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
Manifest number:          07F1
Signing time:             Fri 17 May 2024 18:00:35 +0000
Manifest this update:     Fri 17 May 2024 18:00:35 +0000
Manifest next update:     Sat 18 May 2024 18:00:35 +0000
Files and hashes:         1: IZ00nLA87apsGFhrgOSziCyvLIw.roa (hash: HOOWV8CM8keoyHiB3Lv/mWUTqDsbRl9tTtIYERqrAxM=)
                          2: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: 0W7/OftXuGAPvJFZ2a+5cOIQQ0hemsvwshtVFcuhTIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7f:50:87:57:ed:53:f1:5a:fd:45:0c:e1:26:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
        Validity
            Not Before: May 17 18:00:35 2024 GMT
            Not After : May 18 18:00:35 2024 GMT
        Subject: CN=b2de6e7f5afa8bce346673641153d0cafa0bf48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ed:a1:4b:9f:a0:6f:00:bc:1f:a0:e1:7c:13:
                    be:a9:ca:eb:91:f2:42:1d:cd:35:74:c5:ed:d2:8e:
                    dd:46:ac:97:55:9a:69:05:05:6c:1e:3b:eb:66:77:
                    af:f8:71:e4:8d:d4:d8:fc:d3:03:f8:00:18:70:38:
                    8b:dc:e3:90:3c:ad:76:a7:d3:73:08:b5:38:14:10:
                    2d:03:d5:97:3d:11:7c:b2:f8:9b:21:08:ad:f1:95:
                    a8:e8:fc:1a:e5:16:89:b9:b0:24:1e:5c:9b:04:61:
                    03:bd:0d:01:08:92:19:7a:d5:9d:48:f9:7b:f3:68:
                    1c:4a:56:55:82:5c:f3:c8:a6:70:b9:34:7a:7c:b9:
                    82:31:7b:0d:38:08:13:83:77:62:dd:8d:bd:c2:88:
                    b4:cd:8c:af:8e:c8:32:15:63:0e:81:76:52:d2:21:
                    c6:7d:2c:e7:fb:3c:60:49:9a:db:65:4a:21:2a:c6:
                    7d:83:04:80:b4:d6:c3:15:e2:ce:44:dd:93:47:6a:
                    63:b8:53:bb:82:7e:c0:57:9d:44:85:d1:b8:b7:91:
                    54:8f:71:b4:a5:8e:e3:b7:c1:c3:66:e0:d6:81:ea:
                    29:1a:62:ee:e2:ac:d4:08:52:6d:1b:6d:6a:79:ba:
                    71:c6:2b:51:36:f7:d9:b3:b7:72:83:da:6e:37:03:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DE:6E:7F:5A:FA:8B:CE:34:66:73:64:11:53:D0:CA:FA:0B:F4:8D
            X509v3 Authority Key Identifier:
                keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:26:65:89:b7:eb:db:8e:d9:f0:dc:62:6d:f3:27:5c:ee:dd:
         9a:d3:ed:1d:eb:7c:78:de:7d:ae:6e:58:52:81:8a:31:0d:bf:
         70:fb:e3:bc:36:40:fe:cb:09:c0:2c:a8:29:5d:1c:83:b0:07:
         77:0d:ba:e0:aa:de:47:85:be:da:87:cf:da:0e:56:79:92:e0:
         b8:de:17:4d:d2:7e:c9:88:d8:07:42:36:c9:d8:61:e6:5a:6b:
         ba:9c:f1:75:7d:50:b8:5f:78:24:75:32:50:05:37:68:96:62:
         0f:e9:e1:06:f0:bb:f4:53:6b:d7:b2:ba:23:eb:12:36:bf:83:
         ec:4d:a6:1c:e8:0d:8a:d1:92:25:d8:f9:d8:54:e5:b0:df:2b:
         7c:ca:a8:b6:a3:a8:ca:8d:61:f4:92:2e:71:b3:a7:db:ad:b3:
         c7:2a:d0:fa:9e:54:42:f3:b4:ec:00:25:54:40:5b:db:7b:6e:
         56:dc:49:35:0a:a4:55:25:de:c3:0a:38:3c:7a:10:d1:10:9a:
         57:9d:9c:3c:78:bc:9e:6a:c0:f2:2c:77:e9:c0:4c:ef:cd:86:
         0f:aa:3d:a2:1c:24:df:11:ed:1d:67:02:91:a2:d2:dc:97:64:
         f3:e2:ce:db:0e:fb:21:2c:20:64:e2:8c:36:a8:57:92:3c:9c:
         01:ef:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:20 2024 by rpki-client on console-ams.rpki-client.org