Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File:                     sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier:          ZTCVoHR1IN8XZGqgYLNrh7QAvkv25nRN8DRyqqbGKPs=
Subject key identifier:   78:92:E2:59:14:11:5E:B7:34:9C:B9:F2:08:76:37:23:A3:F0:06:C0
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer:       /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial:       018F87B64B5E5E2E1E26F0799231691E593B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number:          0BAA
Signing time:             Fri 17 May 2024 18:00:21 +0000
Manifest this update:     Fri 17 May 2024 18:00:21 +0000
Manifest next update:     Sat 18 May 2024 18:00:21 +0000
Files and hashes:         1: 1-a39z7QxSwXINXjEzfHUDUeEco0.roa (hash: XLOBEAzDicgz8NM2DH5SXec99CT5hFVlrdk0nf+Vg1M=)
                          2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: OyPeMEffIiBVqu1nPn28kGYyuJmwytV6++j1S5jj9OY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4b:5e:5e:2e:1e:26:f0:79:92:31:69:1e:59:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
        Validity
            Not Before: May 17 18:00:21 2024 GMT
            Not After : May 18 18:00:21 2024 GMT
        Subject: CN=7892e25914115eb7349cb9f208763723a3f006c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:77:52:28:dd:73:8c:0b:1d:18:7a:56:ea:
                    bd:49:56:ba:ee:5f:02:6e:92:f0:16:dd:71:a9:d6:
                    ef:e9:6a:65:11:73:0d:3d:80:a7:3a:e9:7a:1a:68:
                    30:e6:36:ba:29:58:1a:ef:62:7f:9d:e7:64:d5:27:
                    a1:06:3a:db:3e:c8:01:c6:5e:36:e5:d0:e4:8f:26:
                    89:91:5d:c3:5c:0e:22:8f:ce:1e:3a:d9:6f:29:a8:
                    07:0f:30:07:23:63:aa:a3:50:22:17:a8:23:95:ba:
                    47:4f:ce:2c:7f:79:25:55:93:ea:b6:6c:a7:55:48:
                    50:a5:07:f1:46:e6:c5:fe:b6:32:8c:48:83:7e:07:
                    3e:ef:61:eb:36:90:6d:4c:0f:75:a9:65:51:d8:17:
                    2f:15:6f:07:ce:88:e1:70:f6:29:86:d5:6e:c6:1d:
                    2f:6c:3a:0c:6e:84:33:c1:a5:bf:8d:bb:af:c6:5b:
                    fc:bc:c7:3a:ed:e1:32:66:bf:93:b2:f0:0a:e7:a3:
                    34:f6:7b:33:03:48:a6:d0:56:7b:4a:16:fe:c0:0a:
                    66:7c:b6:f7:3b:9b:5f:84:72:a3:08:3e:ba:8b:93:
                    8d:08:67:55:bc:a0:4a:b5:dc:2d:e8:f8:b2:b3:d5:
                    20:f1:61:a7:2a:67:92:f4:b3:cb:86:0e:90:cd:47:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:92:E2:59:14:11:5E:B7:34:9C:B9:F2:08:76:37:23:A3:F0:06:C0
            X509v3 Authority Key Identifier:
                keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:27:cb:08:31:f2:2f:06:53:3e:38:2a:f3:40:d7:4b:e4:
         db:04:5d:e5:ac:7a:e0:48:55:28:93:a3:38:e2:06:f5:46:38:
         30:98:18:6e:6b:0a:02:6b:b7:d9:9d:11:37:cf:68:c9:d1:dd:
         87:01:ba:40:47:f5:12:df:b9:a0:a2:39:2f:2e:b0:d6:d0:3a:
         86:f3:04:ff:19:e4:4f:58:22:8e:92:15:0d:a3:31:9c:73:05:
         31:14:0f:cd:9d:1a:af:7c:f9:69:f5:9c:c8:37:10:f6:b2:d0:
         0f:88:27:25:d3:0e:a8:a0:13:84:00:27:e4:23:ab:86:9c:aa:
         e2:60:22:19:17:e1:40:90:55:91:89:ca:b2:01:34:ff:a9:45:
         f2:7a:b3:dd:21:f5:6c:99:fd:2f:55:53:78:a7:c7:e3:02:93:
         e9:a1:34:bd:c5:0f:34:6f:56:25:da:4a:8c:e3:b0:64:64:9c:
         cf:78:bf:5f:88:80:d9:84:84:db:ae:62:e7:0f:63:bc:3e:fa:
         b9:55:93:ee:bc:cc:63:30:4c:4e:ab:f9:10:e0:ac:6e:05:4d:
         23:03:6b:bb:d0:72:15:ff:1a:af:19:f3:23:97:d9:eb:ed:9a:
         ed:90:0e:89:ae:4a:bb:59:37:5b:a3:e2:10:28:ec:a1:a4:82:
         28:e2:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:53 2024 by rpki-client on console-fra.rpki-client.org