Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File:                     qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier:          66nRky5LkE9DL59rwtWUNwgKYp9WeMmRoE8/ffbrt9Y=
Subject key identifier:   59:B5:76:6C:A2:3F:AB:72:6F:88:10:6E:B3:4D:BC:F8:98:A7:A1:2F
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer:       /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial:       018F87498F3A7A39ED05DBB8A723A4FA1BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number:          0C59
Signing time:             Fri 17 May 2024 16:01:35 +0000
Manifest this update:     Fri 17 May 2024 16:01:35 +0000
Manifest next update:     Sat 18 May 2024 16:01:35 +0000
Files and hashes:         1: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: dJafbTJWtRMgMIVra/FPmB6KUiORbcBJdI7bu5yteTU=)
                          2: xUHsZNTWzjq7DW6hbZbuiyYcvbw.roa (hash: 8uyskJQ/8rrjaSaT6jQj8gNtu3UpBxMcV6Ys+WVxwhw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:8f:3a:7a:39:ed:05:db:b8:a7:23:a4:fa:1b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
        Validity
            Not Before: May 17 16:01:35 2024 GMT
            Not After : May 18 16:01:35 2024 GMT
        Subject: CN=59b5766ca23fab726f88106eb34dbcf898a7a12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2e:87:a0:a9:71:1a:52:f3:3f:8d:7b:c2:db:
                    3d:7f:c3:6d:55:25:b0:7f:45:54:7d:b3:37:31:19:
                    b4:83:23:c9:32:43:f9:5d:22:11:42:93:bf:d5:8d:
                    98:f8:66:f2:a2:ba:87:e3:9b:db:41:99:fb:20:0a:
                    de:6e:83:fe:a5:35:ca:ff:3b:d1:a5:23:39:cf:0e:
                    6e:68:c7:86:03:34:21:2c:f4:15:54:0f:3c:3c:63:
                    39:8a:b4:e4:4d:9a:99:e3:a8:f5:ac:bd:45:f7:c8:
                    46:c8:03:b7:f7:3c:c6:93:96:f3:55:d1:b4:df:e0:
                    59:dd:58:81:83:f8:85:dd:a0:f5:16:7d:7c:13:d5:
                    bf:1c:51:3d:cd:a9:83:12:9f:13:5a:23:f9:1e:a0:
                    70:63:72:4c:a8:b9:3a:7c:74:82:b1:79:4e:2f:e9:
                    3f:d3:4c:47:a9:b7:e1:43:f8:da:92:ee:00:af:aa:
                    d2:ff:6a:ca:10:9c:0e:e7:bc:f6:53:b4:cb:9d:40:
                    51:4b:85:5f:36:7f:a4:da:6c:0f:40:e9:1e:b1:79:
                    6a:05:9d:05:c5:d2:28:b0:5b:52:d8:a0:01:69:8c:
                    64:82:27:a5:03:7c:4f:da:74:c2:43:3e:b8:a7:5e:
                    b6:86:a4:08:2c:95:61:92:f7:f1:15:9b:24:02:50:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B5:76:6C:A2:3F:AB:72:6F:88:10:6E:B3:4D:BC:F8:98:A7:A1:2F
            X509v3 Authority Key Identifier:
                keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:49:8c:42:e3:81:8d:18:ea:95:1d:60:fc:59:9c:b3:17:9b:
         1d:59:44:f7:e8:75:b6:fd:ef:14:18:35:d4:44:82:6d:03:60:
         1e:05:5b:4b:7b:71:6b:ef:33:a5:ac:88:87:2d:70:ed:64:a0:
         e0:b4:dc:17:c8:d0:18:63:65:c4:32:9d:51:0d:52:59:45:06:
         ba:c3:b2:d9:e1:94:ef:11:18:56:94:89:5e:26:1c:80:2d:bf:
         96:ff:df:09:f5:e6:eb:c3:64:8e:3e:fb:1e:d7:c9:3e:4e:cc:
         48:7b:f3:3f:c6:0e:64:dc:bd:95:2d:5f:42:db:38:11:fc:53:
         3e:9f:42:c4:a5:59:ff:e0:01:79:43:4d:92:39:68:3e:7b:bb:
         ee:0e:50:10:66:8d:fd:f8:9d:01:3a:74:80:36:63:4d:96:0a:
         e6:22:20:c7:74:eb:fa:ab:74:e6:bd:97:58:50:87:62:9c:24:
         fa:d5:3f:20:ce:60:6f:ba:fd:e9:68:6c:ea:0d:01:8d:25:27:
         50:16:c9:2b:5a:18:d0:d2:a1:de:46:26:b6:d6:91:79:ad:e5:
         d2:4f:f2:b8:67:42:91:00:54:34:f5:bc:b7:75:51:99:da:7e:
         73:78:76:21:05:0e:ae:b5:ba:42:46:7d:04:71:47:7c:fe:7b:
         95:a7:76:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:29 2024 by rpki-client on console-ams.rpki-client.org