Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File:                     qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier:          O9OClp2mJDvS+IhX8AA3l17biU7+nlTv2UAatKEQB8k=
Subject key identifier:   6B:22:54:04:6E:5C:65:71:DA:22:0B:DD:17:D8:0A:3B:C4:6F:31:2E
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer:       /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial:       018F874A1686409506AD06321FEC96A30476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:10 +0000
Manifest this update:     Fri 17 May 2024 16:02:10 +0000
Manifest next update:     Sat 18 May 2024 16:02:10 +0000
Files and hashes:         1: j2TJmD1Cy9KhO1Ls2NOaHGYyFA4.roa (hash: aDaq3Di7x/RzXtZeLgsqgHFqufosi3b9aeYdhGQK4uk=)
                          2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: Pjzo/Qh3WNz+y6Fu1NFJHrA8s4CyCPH8Mr6FdB4g+Z4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:16:86:40:95:06:ad:06:32:1f:ec:96:a3:04:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
        Validity
            Not Before: May 17 16:02:10 2024 GMT
            Not After : May 18 16:02:10 2024 GMT
        Subject: CN=6b2254046e5c6571da220bdd17d80a3bc46f312e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:f7:a2:cf:75:ad:aa:7d:ba:78:1c:21:ca:
                    0f:15:fd:64:d7:ae:ba:82:f6:d4:dd:af:71:1e:c7:
                    84:4f:f3:e1:19:42:a3:34:b8:19:d0:aa:0f:d2:66:
                    6f:21:34:78:47:9f:54:4d:4b:2c:b3:c8:1d:bf:82:
                    2c:0d:96:c2:9c:58:9b:84:a2:fa:85:94:60:ba:79:
                    91:d5:2f:fc:78:20:b3:0e:25:29:7b:48:dc:24:8c:
                    6b:fd:77:b7:40:43:f0:25:c3:84:6f:9f:bf:03:57:
                    de:c8:ac:1f:7c:c4:b5:e7:8d:3b:c8:f4:26:b9:a6:
                    82:b7:ae:67:9d:21:b0:80:82:75:34:57:1e:9e:0d:
                    cc:a0:95:59:dc:83:80:c7:fe:65:9d:bc:29:0f:a0:
                    8f:0a:7c:4a:1e:a7:96:ff:bb:98:19:34:66:c0:1d:
                    36:c0:12:08:db:ba:c1:6d:cd:45:c2:e4:f7:25:cb:
                    3a:f0:6e:27:63:ae:e9:b6:5b:c1:75:af:d4:29:09:
                    d9:df:82:ad:b3:ef:49:46:16:cb:88:0d:27:b0:a1:
                    ca:2b:5b:3b:8d:41:10:da:58:86:80:9d:64:1d:e7:
                    00:78:a3:63:0f:c1:8c:62:19:1a:e8:23:06:de:bc:
                    0c:6d:7d:1b:65:a4:55:13:04:15:d2:08:81:b2:b5:
                    eb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:22:54:04:6E:5C:65:71:DA:22:0B:DD:17:D8:0A:3B:C4:6F:31:2E
            X509v3 Authority Key Identifier:
                keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:8b:67:d1:97:63:d5:9f:ae:d2:1e:c7:77:0e:0b:58:c5:
         7b:86:c9:40:96:2a:b6:89:93:82:88:0f:2a:c1:36:0f:64:e4:
         42:5c:53:8d:03:24:ad:93:e4:ae:20:17:68:ed:1c:7f:07:d0:
         d6:c7:cb:5b:79:2b:23:75:87:ef:f7:f5:f2:70:76:dd:b7:52:
         bb:3b:a7:e6:9b:28:ff:c2:98:1f:80:06:ed:a5:51:ee:7e:f7:
         a8:ca:97:e2:1e:4f:a0:62:d4:a9:8e:a0:b0:a4:b9:97:66:57:
         84:ac:f3:34:cc:8c:78:6d:9b:ee:0a:e1:24:36:4f:9a:6b:f4:
         7c:ad:e7:84:3f:e1:f9:08:ef:00:7b:ea:48:d9:2f:5e:4a:62:
         88:69:bd:1e:53:b2:35:75:07:0b:b7:ea:e7:46:27:e8:88:07:
         41:ce:d0:75:ee:03:94:6f:da:c4:e5:39:24:04:79:19:fd:e9:
         a7:29:50:bc:c2:28:18:9c:b7:42:b7:20:3c:a4:8f:db:39:88:
         68:d3:80:f6:64:3e:7d:4e:27:d8:a8:3b:a4:28:65:c3:25:a2:
         f0:f9:75:33:98:6b:54:26:5d:aa:28:c2:99:19:2a:dd:25:97:
         f7:43:63:90:7f:3c:3b:f4:99:ba:c9:a2:bc:68:94:04:c6:bb:
         63:77:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:45 2024 by rpki-client on console-fra.rpki-client.org