Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File:                     qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier:          dS4iXNj9+CoqrIDb22C/YkctCgv7trpJz1X34fYlN5U=
Subject key identifier:   E5:A1:02:4D:1F:A2:5A:03:94:FB:66:58:93:9C:42:01:6D:05:B7:89
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer:       /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial:       018F885B058F06AADE087A7FFC56C375F233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number:          63
Signing time:             Fri 17 May 2024 21:00:17 +0000
Manifest this update:     Fri 17 May 2024 21:00:17 +0000
Manifest next update:     Sat 18 May 2024 21:00:17 +0000
Files and hashes:         1: 28St0on-J0hduJYqWHWbs0v0BwY.roa (hash: YiEmDySV9jbEaIPG3IZ7d1zI23PBN4yG+/4S9nDZE4o=)
                          2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: +H64SNnrN1OZ/QU9hJbKeuMOC58sWDkEBroj53U0DDk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:05:8f:06:aa:de:08:7a:7f:fc:56:c3:75:f2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
        Validity
            Not Before: May 17 21:00:17 2024 GMT
            Not After : May 18 21:00:17 2024 GMT
        Subject: CN=e5a1024d1fa25a0394fb6658939c42016d05b789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:9c:d6:b9:b8:00:96:b6:38:a9:e6:cf:f0:
                    07:22:cb:5c:d8:d5:ec:b7:0d:ee:02:84:f1:77:35:
                    58:09:6b:93:41:5e:13:76:fc:07:48:90:20:14:85:
                    99:64:48:5b:6a:bd:12:47:80:f9:a8:af:ea:51:b7:
                    a8:9c:78:bf:b4:0d:6c:53:5e:cb:d2:17:41:cc:24:
                    0b:f0:6f:4f:02:b4:48:98:4f:b9:a6:da:0a:5f:04:
                    58:cc:d7:5a:a9:d0:13:dd:5c:5f:77:3d:70:c7:fc:
                    25:43:b0:f6:3d:96:75:fd:89:da:2f:d3:fd:f1:a2:
                    42:06:4f:50:ac:6c:d5:d1:08:00:fb:67:0c:48:6e:
                    8c:b2:e3:b5:e7:c6:f2:7c:93:c3:20:c9:c9:f7:29:
                    73:b9:8a:33:93:18:52:35:57:14:04:a7:41:ef:87:
                    fb:7c:b3:a1:8a:a3:f2:39:bd:85:64:b9:da:35:a3:
                    4b:0e:04:00:8b:a9:e5:f4:34:b6:3d:8d:27:80:25:
                    94:f8:4f:71:60:70:0e:b3:7f:f9:fb:82:33:f9:f5:
                    75:61:d5:4d:06:c4:31:08:1a:d7:7e:fc:4c:45:18:
                    5b:cc:89:e5:93:6d:a6:e6:44:e4:31:0f:45:61:34:
                    2e:40:4e:cd:df:94:bf:ff:f1:52:4b:dc:63:3d:a8:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A1:02:4D:1F:A2:5A:03:94:FB:66:58:93:9C:42:01:6D:05:B7:89
            X509v3 Authority Key Identifier:
                keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:58:08:34:d4:1d:59:80:8e:e4:2a:76:76:3d:a1:0e:2b:e8:
         06:ca:39:94:05:77:b1:97:e4:8f:73:f0:75:eb:3e:ba:a8:31:
         ac:78:0e:10:b5:be:57:68:d6:9c:f4:3f:34:32:45:c6:1c:e8:
         41:a7:47:a9:2a:83:3b:97:65:db:a8:b2:4e:16:5f:5c:0f:3a:
         08:77:90:4d:bc:0f:cb:e3:8e:69:a4:0f:42:af:be:88:5a:55:
         73:a6:7c:72:91:21:71:d9:5d:df:8b:01:f5:70:34:97:a3:da:
         8a:fd:cd:e3:13:11:5c:5f:f9:61:72:50:10:99:e5:dc:1f:b1:
         6f:56:6c:87:d7:f1:b8:10:83:01:27:05:a1:b4:08:be:67:fc:
         67:59:14:42:e6:79:06:ac:42:41:4c:d3:0d:11:2d:c6:98:48:
         4c:20:89:f4:8b:8b:96:87:f8:b0:c0:f6:42:09:15:f1:e3:e3:
         fa:cc:90:26:80:28:20:36:8a:a2:16:6c:9d:c6:18:1f:ed:37:
         80:c8:ed:06:e0:ac:6d:84:4e:0d:a9:1f:cd:69:22:e1:0d:d2:
         cb:59:34:f2:32:40:a4:14:1a:d0:1c:71:e6:6a:e8:ff:fc:23:
         e1:88:4c:1b:c2:bc:07:1d:2d:86:55:41:25:33:c1:0e:aa:0c:
         ad:75:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:06:39 2024 by rpki-client on console-ams.rpki-client.org