Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File:                     qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier:          1KEx21IIzt2AzISif7GHN37al9Jn4DxOCfdqqlm1A60=
Subject key identifier:   4A:2E:2E:08:D8:44:54:DC:86:1E:E4:29:8E:CF:B6:8B:6D:A9:EE:17
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer:       /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial:       018F8824850B6462CF7E8373427A6956383B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number:          0BF0
Signing time:             Fri 17 May 2024 20:00:45 +0000
Manifest this update:     Fri 17 May 2024 20:00:45 +0000
Manifest next update:     Sat 18 May 2024 20:00:45 +0000
Files and hashes:         1: OK53yNinYE0h2sPPenopljfak8E.roa (hash: Wfx9xX5/M6XWMKoqb9HfW8O0MzBmYBkz5pJrZz4MCAg=)
                          2: aLaiV6mXhmyKCRkeyxf1ZnUNYe0.roa (hash: UPnIIURQla7GQTIgzw8y5aMLmeaNNaxHFIL1SF9RSnA=)
                          3: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: fGkyjwSIyGlFhE1T5aWGc4gKU413kiY8XHepZKVY5TA=)
                          4: zcn5H5b4mt5vCsLVE4tEEgOdkDw.roa (hash: Z8R7cGmKx8YBM+S6O6qi7RKKCiSr+umSZ9rN/Zs78SM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:85:0b:64:62:cf:7e:83:73:42:7a:69:56:38:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
        Validity
            Not Before: May 17 20:00:45 2024 GMT
            Not After : May 18 20:00:45 2024 GMT
        Subject: CN=4a2e2e08d84454dc861ee4298ecfb68b6da9ee17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:68:14:94:b3:a7:56:87:64:18:61:0a:58:
                    21:e1:89:35:07:88:d2:73:c9:78:f1:35:0a:94:c8:
                    ee:af:18:52:5d:e1:41:81:db:98:71:f1:70:15:9b:
                    ad:49:a5:19:97:5b:fb:82:37:cb:7e:df:8c:6a:17:
                    d7:cc:9c:5c:a4:cc:1d:3a:ec:b0:4d:22:a0:2d:cd:
                    2f:2a:f5:65:b2:83:1a:18:5c:52:52:fc:9e:12:27:
                    af:44:28:2f:33:27:2c:56:7e:72:bf:4c:ec:28:6f:
                    b7:44:55:26:af:1b:41:24:83:6d:e4:00:7d:e6:52:
                    2f:4f:67:1e:5b:3f:0a:47:e2:8f:da:9b:d7:8c:28:
                    42:73:87:63:e3:b9:44:5e:4f:81:98:0e:1c:c7:1a:
                    4b:ae:bc:86:b9:e9:dd:a2:07:03:99:a5:8f:5b:01:
                    20:f3:22:51:08:94:63:59:58:3b:0c:bb:87:c2:16:
                    03:e2:b8:2f:ba:ac:da:69:76:b6:98:63:45:98:2a:
                    57:e6:be:40:39:7f:81:54:cd:3f:d2:fb:3a:e0:3f:
                    2d:8f:19:b0:cf:1c:32:e8:fd:e6:93:95:30:5b:e5:
                    ea:05:ff:51:8f:9c:8f:d1:42:35:c4:3e:0c:dd:fc:
                    53:88:fc:9c:e7:23:62:a0:c9:17:e3:2c:23:7c:6c:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:2E:08:D8:44:54:DC:86:1E:E4:29:8E:CF:B6:8B:6D:A9:EE:17
            X509v3 Authority Key Identifier:
                keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d3:13:38:b8:9a:c3:28:df:37:7f:b9:93:9b:0f:39:a0:cc:
         f0:12:3b:3a:44:ca:bc:3e:c5:2f:a6:35:37:e9:4a:17:06:fd:
         d8:fb:d0:c7:3c:d5:3a:5d:32:a5:a3:c6:0b:6a:f7:62:9f:58:
         70:35:4d:d2:22:26:3f:27:0b:1f:1a:15:45:36:e8:ec:91:7d:
         35:78:ec:52:d3:7b:ea:c2:99:19:14:1b:d5:ea:f9:44:fc:bb:
         4e:2a:c6:85:da:0d:99:c0:94:13:d2:90:90:39:c9:34:1f:f9:
         38:d2:02:9b:a0:3b:97:40:8d:84:9f:75:ff:c0:9b:88:9c:10:
         1f:e3:cb:5a:fc:7c:98:f8:84:9b:59:ca:51:e7:0a:f7:1b:ec:
         8b:c1:74:ae:1e:32:32:55:a7:67:38:ac:a9:58:f3:32:2d:65:
         d9:8a:3b:98:24:81:d1:e9:33:45:a9:08:e6:b0:f8:44:d4:ab:
         9c:6d:c3:1e:f1:d0:c2:c0:08:f1:ea:00:8c:97:8e:1b:73:75:
         9c:27:64:c8:d6:0e:db:d5:2d:7a:2b:dc:fe:da:47:04:ff:d2:
         a2:f5:88:98:40:8c:fe:8d:9c:ad:3d:41:87:32:ea:8a:26:af:
         d1:3b:12:0a:08:cd:bf:6d:18:4d:66:e9:44:3f:1e:28:16:77:
         be:17:98:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:03:07 2024 by rpki-client on console-fra.rpki-client.org