Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File:                     BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier:          UEQreFhK5Dyjy7fW44gPiiZVl42lBZgHzQun9wKWWL8=
Subject key identifier:   3A:23:1A:62:DC:A6:13:DE:A5:3E:67:F1:5B:D3:14:20:78:16:52:60
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer:       /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial:       018F381BC3C590D5B8036EFA6963C58CEDDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 07:01:34 +0000
Manifest this update:     Thu 02 May 2024 07:01:34 +0000
Manifest next update:     Fri 03 May 2024 07:01:34 +0000
Files and hashes:         1: 0sgoD6aJeFTD6HYv5yJCd51zydw.roa (hash: M4KVBErkT0yZXP9ywJlJd4HaAwTOJUBDoedQW8VZOjQ=)
                          2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: wO5E3WUiwrngDLzrqJTdBpZzHYN/7B2yZakgWORnqlE=)
                          3: MDtGeTSubU8bjpY9bqoRVhZJxxk.roa (hash: +WN3gZ5BPY4nAvzwYdPz3iOWZfwW9Qbr335QJOMPkoM=)
                          4: QLO2VyVtyhzo35Mp7Hn5Fnanlz8.roa (hash: OMCwpAgfsNKBBKaK3GJopD7aAY0Bz+29a2mFhlZxDsM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:c3:c5:90:d5:b8:03:6e:fa:69:63:c5:8c:ed:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
        Validity
            Not Before: May  2 07:01:34 2024 GMT
            Not After : May  3 07:01:34 2024 GMT
        Subject: CN=3a231a62dca613dea53e67f15bd3142078165260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:43:6c:45:14:57:e7:76:88:3b:99:40:cc:
                    20:58:bc:4c:b8:69:69:38:63:b3:1b:79:25:75:a8:
                    d4:43:08:0c:34:2b:b7:07:f2:b8:d7:80:29:45:09:
                    15:3a:9c:4a:d2:82:c0:14:b2:10:14:bf:4e:bf:4d:
                    20:d2:55:4f:8a:48:bf:c3:2c:47:ff:96:69:99:e6:
                    52:e4:7d:80:39:9a:0f:36:43:13:71:9d:0f:a8:8c:
                    75:fe:e4:c2:b4:d9:40:fe:51:0b:f0:09:8a:cd:6f:
                    59:a8:39:b7:77:da:d5:03:00:7a:5f:f9:82:69:5d:
                    6d:11:96:a1:86:88:37:7e:ca:47:23:1d:68:d6:e5:
                    0f:76:e9:0a:4e:06:35:ef:cd:45:a4:90:b8:8a:a6:
                    fe:10:24:b3:6f:c4:38:09:c6:b9:7a:b1:a5:1f:e6:
                    85:89:a7:45:15:b4:61:69:51:a9:85:2b:87:dd:28:
                    e2:f4:6d:b9:9e:b4:42:fc:04:ea:6a:7e:3c:cd:e6:
                    ed:a4:30:73:ae:ff:b6:65:e8:8a:84:9c:64:ff:b5:
                    7b:aa:45:c4:f9:e5:41:a4:9e:96:d3:37:21:08:a7:
                    ff:ae:62:49:73:90:eb:db:a5:9f:96:01:ef:03:06:
                    41:a3:e2:bf:3d:86:51:9c:ea:f2:5b:74:c7:2c:9b:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:23:1A:62:DC:A6:13:DE:A5:3E:67:F1:5B:D3:14:20:78:16:52:60
            X509v3 Authority Key Identifier:
                keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:25:59:db:87:35:d5:fb:45:e3:e1:d6:9c:ec:49:fb:3c:9f:
         a7:49:b9:6d:a9:f8:1b:99:7d:32:68:e7:0b:b6:a5:40:fa:45:
         7e:21:58:7f:f9:12:9d:5c:a2:74:ee:b0:8c:0e:97:4a:b3:33:
         d3:d7:f1:a8:7a:75:a5:a6:0d:48:1b:89:f0:03:c0:0c:ca:27:
         75:cd:ff:41:50:ff:ca:0f:62:1e:2c:37:8c:19:61:9f:fc:d5:
         13:c3:14:1b:24:dc:d6:d3:c6:fa:b2:f2:2a:6b:7f:fa:40:a2:
         40:5d:c3:95:86:0b:8f:ab:d0:ae:6e:86:db:66:90:b1:d6:a2:
         93:70:56:06:77:09:f3:61:ff:26:c7:66:b8:7d:39:5a:ee:f9:
         f9:50:9a:2c:d5:5e:ec:96:87:34:f6:e2:5c:ab:f3:f1:2a:d6:
         2a:ce:74:63:b9:a1:1e:d1:16:a5:51:8a:4c:e1:30:57:4f:96:
         52:c9:f0:93:82:01:8b:b9:60:44:84:91:ae:1b:1a:f8:27:26:
         0c:16:65:7f:78:ac:50:46:e1:7e:be:c3:bf:08:a2:1e:1c:f3:
         94:74:6a:60:31:ca:d2:78:b9:b2:a6:15:3e:54:a3:b2:76:89:
         2e:75:7b:cb:2c:3e:7c:ef:ca:ea:aa:16:e2:db:3f:22:c9:b8:
         04:ce:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:34:09 2024 by rpki-client on console-ams.rpki-client.org