Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
File:                     Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json)
Hash identifier:          NuQjkQhMys38uwnRGv8gYsF0blf4bJ0AbQ3vA2VFrks=
Subject key identifier:   5A:51:03:46:3C:D5:A8:E6:34:51:3D:32:81:61:B4:8C:A6:12:78:4C
Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
Certificate issuer:       /CN=43d518d7307788fca3891878490e4f32d9aaf6af
Certificate serial:       018F8936F1CF261D70C7227EF4A42B298E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
Manifest number:          0BC2
Signing time:             Sat 18 May 2024 01:00:30 +0000
Manifest this update:     Sat 18 May 2024 01:00:30 +0000
Manifest next update:     Sun 19 May 2024 01:00:30 +0000
Files and hashes:         1: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: 0PnJysDHieu271I3rvSWrjuUHtrYod0jVsaJE2wWxEk=)
                          2: f8WYBESjByDrjILBuxDDauHMQAE.roa (hash: oc/WPycV/j9MXis6Yhh6nOSHEbwaDTsPiljQ3hh/TpE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:f1:cf:26:1d:70:c7:22:7e:f4:a4:2b:29:8e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af
        Validity
            Not Before: May 18 01:00:30 2024 GMT
            Not After : May 19 01:00:30 2024 GMT
        Subject: CN=5a5103463cd5a8e634513d328161b48ca612784c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:0c:aa:e2:5e:31:01:2e:71:2b:b2:7f:dc:
                    f6:36:8d:ee:1a:1a:de:78:5f:6f:7a:b2:5b:fc:2d:
                    11:6c:75:38:cf:58:2a:e7:b9:ca:01:5b:4e:e0:79:
                    f5:1b:48:05:21:d6:99:4c:24:d7:59:a1:de:ea:27:
                    1c:7f:ba:ff:24:bf:02:15:1e:8c:77:61:67:eb:fb:
                    e4:98:b3:9c:a5:30:a9:33:32:71:84:a7:dd:37:49:
                    27:8d:59:e2:34:11:f1:36:52:2a:4d:80:8a:7b:70:
                    12:8c:03:d2:ba:ca:1d:ea:17:8e:ff:15:ba:3e:cd:
                    9a:fc:4b:b8:39:da:6c:70:18:25:90:12:2f:96:5d:
                    7d:b6:b2:78:4c:0a:51:f4:d0:48:0a:7f:5f:a8:8e:
                    50:61:58:04:b0:cb:70:3f:53:1e:a7:cc:ec:3a:4b:
                    bf:a7:51:bb:ae:50:20:65:f3:ab:44:79:8b:1a:c8:
                    5d:41:b5:f1:a0:72:48:52:8c:b5:a7:1c:96:21:c6:
                    ae:f7:82:5b:25:d2:e0:f4:b4:a7:6a:14:0c:64:ee:
                    8a:31:63:a6:b0:c8:3b:73:46:ae:b8:32:0e:32:1b:
                    ee:35:d6:5b:90:ac:2e:0a:db:b0:f7:8c:8c:5b:e6:
                    db:05:a2:e9:73:8b:5d:8e:8e:8a:13:f8:be:13:4c:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:51:03:46:3C:D5:A8:E6:34:51:3D:32:81:61:B4:8C:A6:12:78:4C
            X509v3 Authority Key Identifier:
                keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b6:1f:3b:00:97:5b:ba:7d:47:bc:99:b4:c6:4b:d4:a9:4d:
         8d:ea:8d:06:f8:3b:29:86:02:8f:ec:80:2e:b3:20:11:a9:37:
         bf:5a:3d:75:13:a7:cb:5e:bf:b0:e0:2a:07:15:64:ae:1c:52:
         3a:f0:23:f6:54:83:b0:59:ad:0f:11:58:e3:53:eb:a9:c5:6e:
         66:7d:64:d7:90:63:3c:f7:04:9d:82:3b:ea:16:03:94:45:ad:
         8b:ed:30:e3:18:5c:e7:ff:1a:48:de:03:8f:77:88:1d:cf:94:
         65:42:e6:cf:73:a2:d1:03:d4:7f:de:02:03:b2:07:5e:e2:e2:
         bd:44:d7:15:80:e2:30:ec:39:91:a0:e8:82:ee:9e:9f:1d:d4:
         69:80:2e:f4:05:67:ad:d2:a3:39:8a:f7:9b:76:e5:c1:7e:74:
         ee:19:63:37:f1:e2:9e:43:be:93:b6:6b:6c:7d:79:f8:62:1c:
         13:15:5b:41:9a:fa:8d:be:db:c3:9e:72:a4:e7:a4:4c:38:b3:
         7d:8c:30:aa:00:5d:5a:19:c2:43:3c:40:5d:9f:64:8a:e1:3e:
         13:60:9d:f8:ad:d3:5e:c4:8a:14:23:97:36:32:02:3d:ef:4c:
         1b:71:43:88:50:b0:19:c9:13:8d:fc:1c:30:c4:f0:3e:77:f2:
         f3:92:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:27:30 2024 by rpki-client on console-ams.rpki-client.org