Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          yX28h17O8u7Ii5yEj6R2iGObQIIaNLAUBbmCFl36UeE=
Subject key identifier:   43:DE:64:44:3A:FE:DA:F9:EB:6F:53:65:F1:AE:46:F0:07:AC:EC:5E
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       019062CBFFF06F15FAAAB8C9CD17E86FDA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          11F8
Signing time:             Sat 29 Jun 2024 07:00:54 +0000
Manifest this update:     Sat 29 Jun 2024 07:00:54 +0000
Manifest next update:     Sun 30 Jun 2024 07:00:54 +0000
Files and hashes:         1: 8XOiLuiDB79SF_bFOXzNyUd6mgY.roa (hash: wbHhiZ6+L+HIDHxStmpUADHQLvEaHlId8vIup9qljK8=)
                          2: RP7UgJJkm8oH-RNR0e8Im-cDkmo.roa (hash: tuScYoRiFQ7Z6TVe9spGh9cA+N6fIAVpPmz6yh+zb/s=)
                          3: p9hDyWWyh8IshvG31so0RHh57QA.roa (hash: 0ojCNR2aHNAysY0v/vTIAH8zv40ffT0q7g9Dn07EkeA=)
                          4: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: o6yslL6X6eqjx9jaM9swr7s+KvFHvu0s6qYmMONhSKk=)
                          5: spQpOkkOxds2NfBhBUDVbd7FpG8.roa (hash: ODhUZ0jW2Yev4jC4Fr1mLrXYlUjfhvVcqiesYrKxvtA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:62:cb:ff:f0:6f:15:fa:aa:b8:c9:cd:17:e8:6f:da:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Jun 29 07:00:54 2024 GMT
            Not After : Jun 30 07:00:54 2024 GMT
        Subject: CN=43de64443afedaf9eb6f5365f1ae46f007acec5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:ef:08:8c:e8:54:39:01:21:03:e9:2c:89:
                    d0:70:1e:9d:de:2d:66:2f:27:52:38:ef:80:45:b7:
                    88:e7:80:58:9c:bd:b3:d4:e5:50:9b:02:87:3b:1a:
                    a0:b8:69:b1:68:29:c3:32:a1:7f:80:81:60:11:0d:
                    45:e8:c5:37:fc:60:e2:d7:cc:5d:8b:56:a6:0e:e3:
                    54:c7:f0:59:74:27:76:eb:41:cf:8c:e5:ef:7c:63:
                    6b:6c:db:2c:94:f8:b6:68:e7:f4:9e:63:8f:45:b1:
                    61:5f:8c:97:6d:1f:ae:b5:b0:67:35:ef:7b:42:51:
                    41:16:50:72:9b:bc:aa:1e:bb:cb:56:ba:d8:8c:de:
                    44:8b:7b:eb:81:78:2d:6c:52:39:5c:5e:1d:a4:87:
                    14:e3:43:8a:24:9c:4c:00:31:03:fe:e0:e5:76:26:
                    4d:1a:d3:6e:19:f4:7c:64:56:fa:68:2d:63:0f:db:
                    3d:ae:d0:c2:34:02:ca:09:c4:4e:7b:65:4d:82:42:
                    15:a1:b4:99:40:82:7e:71:c2:41:de:b5:c7:40:34:
                    62:8f:02:9f:8f:7f:c5:ed:f5:45:08:db:7b:04:c8:
                    50:8d:8c:08:5a:ea:79:b6:a0:14:1b:3f:8b:ba:7f:
                    35:8c:52:14:59:28:34:9f:2c:95:95:a7:0a:bb:7a:
                    d8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DE:64:44:3A:FE:DA:F9:EB:6F:53:65:F1:AE:46:F0:07:AC:EC:5E
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d2:6b:99:1b:fc:a9:d1:06:b5:7a:6f:7e:7f:d4:05:4a:03:
         a9:e3:3c:cc:a3:63:52:54:bf:97:db:1f:41:ad:74:6e:fa:ee:
         91:08:18:62:95:bd:9b:cc:a3:1e:7d:10:84:6a:00:ad:a7:de:
         d4:f0:f9:d5:23:21:31:6a:e3:a1:ff:a0:9f:4a:f3:e2:46:b9:
         e2:a9:32:07:57:29:a6:4f:e3:e2:70:4e:c3:7a:c7:47:a8:c6:
         a3:de:f8:18:24:a8:6a:71:b5:3e:13:75:c8:57:82:b0:89:3a:
         40:c0:3b:36:08:1d:3d:9b:cf:39:0b:68:85:91:45:91:c8:2f:
         e3:ca:82:4d:46:29:12:d1:50:76:30:2f:25:c7:c2:c8:97:6d:
         14:64:bd:ca:c2:1f:e7:eb:8f:10:49:e6:7b:15:38:ce:03:64:
         d5:00:ef:98:ed:f8:97:49:e9:00:fd:39:bb:f5:f5:aa:ac:82:
         89:56:19:04:b2:2e:84:4d:b8:5c:2b:b9:c5:fe:56:00:12:43:
         b2:c7:b3:46:47:dd:1c:fe:a2:c1:42:56:49:43:8e:23:c9:03:
         fb:7f:c1:74:41:a5:cf:bc:ee:a6:78:46:bf:0b:c7:40:52:50:
         0b:07:c0:e7:4e:8b:e9:1d:a0:2c:75:ab:00:f7:96:ee:fc:68:
         04:6e:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 17:49:15 2024 by rpki-client on console-fra.rpki-client.org