Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File:                     qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier:          cnysghc6eQIViUO5INEgPHhg6xx5ZwQmx2Uf3pLTulo=
Subject key identifier:   C8:9E:78:67:CC:AB:48:31:CF:29:9B:73:19:01:C2:AC:CB:FE:88:E3
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer:       /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial:       018F877F349B14850081FCE0D2DD37131C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number:          E7
Signing time:             Fri 17 May 2024 17:00:11 +0000
Manifest this update:     Fri 17 May 2024 17:00:11 +0000
Manifest next update:     Sat 18 May 2024 17:00:11 +0000
Files and hashes:         1: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: Xxk3w/E5xSewgO8rP77Oc5JJejHhBVi9Fx+H2EuzQJI=)
                          2: sEbq72kKyq0MUlSHy28OobqTc1U.roa (hash: uhKLj1XsZrQ5VHi2PEIYIMK44bGkjfRIEa82qiy1OFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:34:9b:14:85:00:81:fc:e0:d2:dd:37:13:1c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
        Validity
            Not Before: May 17 17:00:11 2024 GMT
            Not After : May 18 17:00:11 2024 GMT
        Subject: CN=c89e7867ccab4831cf299b731901c2accbfe88e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:93:eb:79:26:7d:4d:f5:16:b0:85:86:3c:85:
                    2c:e3:cc:d2:57:3e:e0:6a:ae:55:08:66:36:2e:74:
                    8c:2a:13:e5:7b:7b:ec:74:28:32:87:48:91:4e:1d:
                    02:b6:89:ff:c4:0a:65:e7:27:33:49:3a:8d:90:fb:
                    f3:81:5b:53:cd:3b:aa:92:db:d6:3a:5c:f5:84:5b:
                    fc:73:95:b5:81:b3:13:fb:62:bb:ad:c4:94:5b:20:
                    43:7e:9d:01:75:f0:9e:8c:a8:58:18:35:1f:d1:a0:
                    55:61:7f:5d:a3:5f:03:4d:18:0e:d2:b5:10:8e:21:
                    07:20:6a:36:d0:c3:f7:63:da:be:cc:51:a9:3d:25:
                    93:7f:6f:75:f3:de:46:04:09:ea:89:72:ab:b2:ec:
                    e7:98:b7:b7:b2:20:66:6e:ab:e8:8d:64:6f:fe:11:
                    c5:fa:60:0f:9a:e7:43:84:8c:ff:2e:ea:0a:cf:c0:
                    88:0b:af:6f:1f:90:ab:0f:52:02:c6:67:7f:48:f9:
                    cd:cc:9d:ce:56:b8:c9:ac:1a:88:ba:08:06:fd:f9:
                    a8:c6:95:59:e6:d9:cb:b1:36:f2:89:0a:9a:ee:8f:
                    6a:9f:60:5d:de:bc:57:98:3f:6b:36:b5:8c:79:b3:
                    64:87:b0:a9:c3:10:2f:68:42:b4:0c:bb:88:c8:32:
                    92:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9E:78:67:CC:AB:48:31:CF:29:9B:73:19:01:C2:AC:CB:FE:88:E3
            X509v3 Authority Key Identifier:
                keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b1:e6:db:6a:1e:15:36:7e:56:30:47:8f:0e:1d:59:52:dd:
         d2:4b:a1:89:80:01:b2:da:a0:96:ca:be:0a:49:f5:84:d8:c9:
         68:3e:21:d0:e6:d2:76:b3:c5:0e:64:02:ac:64:d8:2d:ac:4f:
         b3:da:c5:e8:28:46:b8:52:75:bc:08:cd:ad:7f:7e:a4:35:95:
         4e:6e:3e:70:91:b9:14:3d:13:53:10:e4:11:8c:2b:8e:c9:5e:
         61:60:3a:b6:a7:d1:d9:df:d2:4c:2b:84:aa:42:a6:cd:76:cf:
         73:5a:44:e3:34:84:cd:b8:7c:83:36:ea:35:65:9e:11:90:e6:
         a6:26:5f:d9:7a:58:63:3e:15:dc:21:8d:dc:1f:43:aa:a0:dc:
         d7:df:d5:11:d3:be:31:f8:46:fe:1d:f4:db:26:86:24:5a:f3:
         02:cf:49:ef:8a:1a:a5:f3:bc:ea:8a:13:91:47:cb:31:29:32:
         0d:bc:ed:1b:2f:46:78:c2:b0:1b:27:85:8a:12:77:72:8b:ac:
         34:6d:04:22:20:18:db:f3:28:a5:4d:09:61:51:f5:b7:01:7d:
         56:09:19:db:6f:e8:4a:c0:77:d8:f2:de:bd:ff:32:3f:75:a7:
         ff:dc:53:90:e3:b7:36:79:29:83:a8:18:cd:e0:2e:08:af:37:
         d2:b2:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:49 2024 by rpki-client on console-fra.rpki-client.org