Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File:                     qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier:          zJX7mqmUT5h+Dj41auvKpGoefl8vFHfHRIf1mGdTjYs=
Subject key identifier:   80:19:8A:C6:5C:7D:15:2F:6B:3B:25:5C:69:01:E3:0C:8F:DF:FF:4C
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer:       /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial:       018F87ECF9DDB7EF555C195773AB867DB629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 19:00:05 +0000
Manifest this update:     Fri 17 May 2024 19:00:05 +0000
Manifest next update:     Sat 18 May 2024 19:00:05 +0000
Files and hashes:         1: AvX0VH2eKLcaFb8br_UqZavPGyQ.roa (hash: PbQRRKnXo9gFfubt1ZmPsfg7jFepZHmJTJ2DTV8PnZs=)
                          2: pdeX3UTRJYihda8ucxvyOvEBlEg.roa (hash: nt1CXZ5oduz7ro4Qx0MTGK9Gk6hfpb37Qgi5PeyvT1s=)
                          3: qEMDGPH0rbaT5wdIIXRwbHQRsRE.roa (hash: xOPdyDIOiAVGZocEaTutEY0vyiydaUQPKgkFPNuY5WA=)
                          4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: wDRap36DAowLp2OVI9ouEEI2QRO2IDSqfzx/0xHidPw=)
                          5: tp5CnE7seLBnK2P8uYvYxeOLfcQ.roa (hash: QXV7959LB9Ph1leJkJnEs0ypKmjIP7PsdPmL/ofEugo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:f9:dd:b7:ef:55:5c:19:57:73:ab:86:7d:b6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
        Validity
            Not Before: May 17 19:00:05 2024 GMT
            Not After : May 18 19:00:05 2024 GMT
        Subject: CN=80198ac65c7d152f6b3b255c6901e30c8fdfff4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:34:0c:37:c1:52:47:99:ec:82:12:f6:7f:
                    75:c5:8d:3a:11:56:28:08:02:64:58:d1:91:c7:52:
                    80:89:55:96:3c:07:13:be:c7:9f:ea:07:d9:50:44:
                    38:32:57:d8:38:3c:e8:2f:fc:04:04:f3:cf:a1:9e:
                    7d:48:3c:25:93:06:8f:e5:59:3a:1a:41:1c:bc:0f:
                    3e:f4:00:b7:9c:14:ca:23:1b:7a:92:e1:18:87:2d:
                    14:67:a4:28:d0:2a:14:b5:4e:77:95:4b:b6:8d:28:
                    35:84:85:5f:9a:b0:d8:73:a2:d8:fd:21:b0:6f:7a:
                    db:a9:d9:db:6f:bd:b2:1d:e3:f2:54:98:74:3f:a0:
                    56:d1:36:f5:12:3f:cf:49:af:35:82:15:42:27:fa:
                    34:81:d8:64:0a:4b:61:8e:1f:f4:33:6a:ef:c3:0e:
                    be:a9:94:45:b9:c8:92:c2:7b:89:31:a6:98:aa:dc:
                    bf:6e:b1:26:3c:e7:80:bc:1f:51:09:88:9a:a6:ee:
                    cc:17:b7:c3:7b:e8:b5:67:4e:5c:46:d7:69:98:1e:
                    e7:99:91:2f:d0:c6:e2:c9:49:61:5c:6a:2d:1f:8b:
                    a7:02:ce:59:f3:f3:4a:9f:02:c3:32:57:9c:b0:0b:
                    a7:2f:3d:cb:97:15:8a:ca:7a:06:18:31:ea:90:e7:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:19:8A:C6:5C:7D:15:2F:6B:3B:25:5C:69:01:E3:0C:8F:DF:FF:4C
            X509v3 Authority Key Identifier:
                keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f8:df:7c:7d:62:27:7b:eb:04:07:5b:b8:3e:20:ba:d4:b6:
         9c:ab:44:23:f8:d3:6f:f1:79:41:21:11:82:a0:00:0d:50:15:
         b2:af:ce:e8:8b:a1:0b:c5:1b:d0:ac:7d:ef:50:c8:1f:fc:d2:
         ef:81:7d:3a:5e:51:49:22:7e:08:60:92:fd:ef:b0:dd:fc:ac:
         15:9e:c0:97:1d:b1:7f:c5:b2:a2:44:bc:45:53:bb:ae:82:bc:
         f4:a1:27:bd:77:b6:8d:e5:38:09:4f:57:e2:ff:b7:4b:d9:58:
         b7:6a:cc:9d:c4:5a:87:f5:a8:42:d8:4c:eb:ab:a7:4a:a0:05:
         70:9e:89:f1:c1:d7:60:68:e9:6d:ee:80:82:7e:f5:97:2f:6e:
         cf:8c:8b:d0:fb:6f:5a:1e:63:60:2b:55:3c:e3:7b:50:3a:4f:
         68:ca:af:21:d4:6b:93:d2:ed:2d:f5:51:f2:a6:18:1e:16:9a:
         dc:1f:01:47:e8:42:46:37:52:1d:18:72:6f:65:bd:c5:91:47:
         e5:af:ed:02:c4:77:77:4a:8d:f0:3a:60:7d:63:8f:8b:bb:af:
         5f:31:39:75:f9:ec:f1:9b:de:6b:e3:71:89:d3:3c:65:cd:7d:
         5f:e1:7a:e3:f3:f3:4f:48:8a:1d:74:39:30:54:e0:18:28:6e:
         da:23:2f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:09:44 2024 by rpki-client on console-ams.rpki-client.org