Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File:                     QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier:          QzezGYirOlrpry+Q9yI25rOUEXsn1IVtqNHgaZEzHaw=
Subject key identifier:   89:B9:D9:A2:B1:7E:EB:41:55:7D:35:AF:86:70:51:2A:97:4C:6D:E8
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer:       /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial:       018F882430163E7E4EA7D38C55BC0E115FD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number:          0A7B
Signing time:             Fri 17 May 2024 20:00:23 +0000
Manifest this update:     Fri 17 May 2024 20:00:23 +0000
Manifest next update:     Sat 18 May 2024 20:00:23 +0000
Files and hashes:         1: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: jG0W/8Zrnb9AjgawhmE3tqM9LrSEf9X3h+0Xr/q8tdk=)
                          2: wLJxukTw44pz05fLwYwmNT-WvRQ.roa (hash: dHyhSlyfmpGiaTi4SPBAXON/ilyMaOFe/OsftTxOw6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:30:16:3e:7e:4e:a7:d3:8c:55:bc:0e:11:5f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
        Validity
            Not Before: May 17 20:00:23 2024 GMT
            Not After : May 18 20:00:23 2024 GMT
        Subject: CN=89b9d9a2b17eeb41557d35af8670512a974c6de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3c:84:59:be:74:5a:29:ea:6a:58:cb:3a:b7:
                    05:4d:56:ea:11:a1:f9:66:33:64:e1:1a:6a:f8:37:
                    5e:09:27:79:c1:1c:95:45:8b:d3:e2:27:85:57:fb:
                    f8:cc:fa:26:31:c0:72:1b:e4:ef:98:ec:73:d0:58:
                    0d:e7:57:6d:83:24:17:17:a3:22:47:3a:9e:a5:cf:
                    b0:51:c3:99:8b:0c:92:da:74:ee:7d:bb:82:11:9a:
                    c1:58:04:b0:76:53:b1:88:a4:2b:81:ea:73:97:33:
                    12:3c:25:26:07:2c:40:19:fb:ae:fc:87:ca:5a:d5:
                    3d:7a:2d:1a:e9:0b:c3:64:1b:55:49:3c:ae:8e:81:
                    71:f9:ea:60:ee:59:4e:7c:d7:76:41:bd:91:7e:f7:
                    cf:32:e7:d3:fa:d3:8c:f5:98:03:23:c1:4b:6d:7d:
                    bf:0d:96:49:fa:63:d9:ab:84:56:7e:97:97:0f:aa:
                    10:dc:f3:65:68:2c:af:f5:fd:cb:94:64:c8:50:14:
                    11:b3:6d:95:0e:58:da:2d:ee:77:cc:61:de:d4:7b:
                    75:e4:7f:2c:e4:84:71:51:ad:e9:94:2a:f0:96:f9:
                    51:36:68:a9:5e:68:e6:6a:bb:e5:9f:c3:95:36:92:
                    13:d0:51:63:22:5d:e6:20:c4:56:aa:0a:55:4c:e6:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B9:D9:A2:B1:7E:EB:41:55:7D:35:AF:86:70:51:2A:97:4C:6D:E8
            X509v3 Authority Key Identifier:
                keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:fe:1e:c1:e7:e7:14:e5:ae:b3:c4:1e:e2:15:74:a1:5b:
         91:7d:34:5d:03:4d:03:26:11:5d:53:d7:7e:b0:92:8e:20:ea:
         31:e5:1e:df:09:d1:97:28:de:07:5e:e1:3f:3f:5c:73:61:08:
         9d:aa:d2:3d:87:9c:39:2c:72:85:9d:16:83:dc:fb:c3:74:71:
         60:9d:b0:c4:b3:fa:8d:e6:af:2b:63:62:6c:60:ec:77:dd:fe:
         aa:93:e8:ce:4f:94:30:90:35:61:77:6f:65:62:ff:76:86:31:
         55:df:2a:1e:70:2e:43:a0:e9:77:a9:c9:8b:f8:ea:17:1f:7a:
         66:d0:f9:34:8f:c6:7d:e9:58:b8:f5:95:8b:d3:3b:4b:b0:72:
         33:95:4d:c7:b9:bb:eb:77:71:84:a9:25:54:99:bf:67:57:f8:
         7c:58:8f:70:3c:d4:43:69:8e:57:1a:c1:d8:66:64:ab:9b:c9:
         8d:a6:0b:85:12:43:72:c2:de:7f:63:27:b1:e1:2b:97:bf:79:
         f4:2a:f4:73:a3:a5:e5:0b:e1:5f:13:30:64:bf:67:22:b4:58:
         f5:37:06:4c:75:c3:3c:ea:cc:61:65:c3:08:30:ea:db:43:08:
         de:96:ee:76:8b:64:d3:1c:c6:d5:6d:e7:3b:50:c7:a9:8d:39:
         27:da:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:42 2024 by rpki-client on console-fra.rpki-client.org