Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File:                     Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier:          TjIqnyGg+ykKCfpa1nz6aW8rM4hmCbSe4nj2X2aPuqU=
Subject key identifier:   AA:C8:8F:9E:B1:4E:B6:B3:2C:94:71:C0:2F:42:93:9D:4B:66:5F:BF
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer:       /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial:       018F8749001FA30E283B9939E78FE1DB0701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number:          0927
Signing time:             Fri 17 May 2024 16:00:59 +0000
Manifest this update:     Fri 17 May 2024 16:00:59 +0000
Manifest next update:     Sat 18 May 2024 16:00:59 +0000
Files and hashes:         1: ICVYsxsxs8sHl_gF4LQLzpKR4fY.roa (hash: aPTwl+y1VHEC6N1GGG6dMVEHeZ9mR0+4yqluC7UL8a0=)
                          2: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: XeCRwJc7nI2z6DnaFqZQdNfCV3HN24HlaTAcIFPmmfo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:00:1f:a3:0e:28:3b:99:39:e7:8f:e1:db:07:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
        Validity
            Not Before: May 17 16:00:59 2024 GMT
            Not After : May 18 16:00:59 2024 GMT
        Subject: CN=aac88f9eb14eb6b32c9471c02f42939d4b665fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:62:df:0d:04:44:d7:a7:01:15:dd:28:ca:4f:
                    ac:fc:d1:bb:86:93:43:49:cb:06:05:fc:8b:d2:38:
                    86:c0:a1:ee:8c:f0:50:b2:50:7e:04:fd:c4:9c:61:
                    53:ee:d9:2b:d1:42:98:a3:73:11:19:0b:95:a8:d4:
                    5c:e5:b4:f0:5c:2d:02:53:ce:a5:19:72:34:04:2b:
                    53:ad:0d:7b:2f:fb:96:f2:2d:46:4e:30:95:0f:11:
                    8b:90:6a:7e:16:e2:09:90:06:8c:bb:70:8b:37:6c:
                    46:7e:c8:6f:43:03:7d:39:e6:1b:11:8c:f8:34:7c:
                    0b:63:53:43:c4:bd:5f:9c:65:c9:40:83:13:24:f3:
                    11:39:f3:c7:69:04:e0:dd:25:c8:95:d8:9c:d7:27:
                    d8:0b:99:2f:72:54:f3:b9:91:cd:68:f2:bb:9a:96:
                    fc:c7:89:8e:b6:f3:86:5c:b9:11:38:54:7e:94:69:
                    1d:ed:60:0a:6d:6c:08:a1:b0:c3:98:78:7f:b3:88:
                    92:fb:a4:5c:62:f2:83:87:15:cc:12:87:03:6c:b2:
                    fe:5d:50:7c:76:0b:72:94:f9:f4:2d:5d:ca:ce:1d:
                    90:d5:43:22:4b:3d:46:f6:7d:8c:ac:7e:5f:cb:8c:
                    e6:d7:72:b3:cd:ff:0b:ea:75:f6:40:6b:65:6b:af:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C8:8F:9E:B1:4E:B6:B3:2C:94:71:C0:2F:42:93:9D:4B:66:5F:BF
            X509v3 Authority Key Identifier:
                keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:38:fc:e4:f8:fa:38:c3:08:b1:8a:04:a5:b3:62:4a:d5:73:
         76:b0:d9:5b:b2:93:f4:b6:14:b6:83:a6:ca:75:1c:fe:78:4c:
         72:5d:9d:64:ba:8e:19:5f:34:17:28:32:5e:02:b3:ad:e3:8d:
         ce:c8:d8:30:50:68:1e:b1:d7:cd:a7:47:86:c2:2d:27:2a:a2:
         41:5b:8f:e8:fd:75:dd:46:ac:cd:85:01:ec:16:b4:4f:07:ad:
         42:72:d4:96:b1:e7:97:49:e0:ae:49:9c:f7:ea:75:c2:4f:1d:
         b5:2c:98:7f:8b:13:6f:a0:b1:6c:5c:af:07:aa:ed:93:18:2c:
         1e:ee:b8:bb:c6:85:73:90:d0:61:10:00:27:96:3d:6a:aa:01:
         fd:74:e7:52:b3:6a:45:90:19:90:27:95:00:f8:c7:3e:06:19:
         9e:f6:09:1c:74:9e:84:d8:ca:7d:5c:1c:a3:a9:fa:69:ce:81:
         45:cb:be:a0:8c:20:15:e1:54:a2:cd:8a:e1:f6:cc:3f:7f:30:
         36:93:48:eb:f9:f5:db:b6:57:63:c8:a9:2e:5a:87:72:05:22:
         dd:15:d1:62:b0:43:9a:33:25:41:06:41:bd:af:c9:3c:55:4f:
         f9:a7:dd:07:37:76:08:a0:60:78:3e:01:e7:bb:6b:9a:30:90:
         94:f9:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:37 2024 by rpki-client on console-fra.rpki-client.org