Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File:                     qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier:          lPfLDF1XioLeWaGjt6s6zN+G51AsI8/fP38HP5JfcGw=
Subject key identifier:   02:95:C5:55:75:BF:5D:28:CA:4F:A1:2E:D8:CC:B0:D0:38:2B:F9:F2
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer:       /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial:       018F86A3F1E76372067978CCBB5AD7E0FEB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number:          0E84
Signing time:             Fri 17 May 2024 13:00:42 +0000
Manifest this update:     Fri 17 May 2024 13:00:42 +0000
Manifest next update:     Sat 18 May 2024 13:00:42 +0000
Files and hashes:         1: MMo9UONCcYnOEOMv59LH3KlWgSc.roa (hash: 2l62Fiww5bnNBLpgmRWZjr0mK648sWpUPwWWj/s41AU=)
                          2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: cK7EYuXOEg2iRlBdjvlLE6OmodcFf4sTfgP+aeuo9iU=)
                          3: w2m972IFHtKEUt0oSW19Tc8ZJhA.roa (hash: Wr3HbgKyKcRU9MvKghOJeetZfXQqrV+TDjaQZtWNKf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:f1:e7:63:72:06:79:78:cc:bb:5a:d7:e0:fe:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
        Validity
            Not Before: May 17 13:00:42 2024 GMT
            Not After : May 18 13:00:42 2024 GMT
        Subject: CN=0295c55575bf5d28ca4fa12ed8ccb0d0382bf9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:bc:d0:94:0d:d0:9b:51:7b:95:6b:08:4c:
                    c0:0e:94:0e:9e:72:ca:25:ee:5e:52:65:f9:e0:94:
                    4c:32:fe:9d:ca:d8:3e:7f:65:17:b0:df:f4:e0:02:
                    c6:cf:0c:8f:b1:2c:81:5f:c9:ac:68:d3:30:90:82:
                    f6:a0:3a:38:fc:fc:1d:b2:53:dd:de:ba:0c:28:e5:
                    39:f3:de:58:2f:b6:3d:f1:b6:42:4e:d8:f4:f8:f7:
                    55:ff:2f:83:1f:36:ba:c1:96:16:e3:19:88:00:40:
                    56:1f:a8:bd:05:af:1c:5f:a8:59:6c:8a:05:39:15:
                    fa:2d:1a:9d:0f:1c:cc:9a:ae:ce:f1:03:de:bc:2c:
                    82:83:76:c2:04:e8:34:cf:b9:f0:97:58:fd:9d:d9:
                    ab:2b:5f:a3:cf:26:ce:79:3f:a6:ab:05:2b:a7:bd:
                    f2:01:3f:de:90:e5:b5:25:60:3e:38:36:4a:4a:f8:
                    53:d2:ca:ad:f0:b1:fa:5b:88:17:49:9a:fe:72:35:
                    88:84:74:28:ee:52:b9:ac:91:d0:80:06:ad:88:e1:
                    34:aa:37:f7:10:cb:d7:6a:47:e1:0a:6d:35:0d:f6:
                    1f:0e:c1:57:9b:e7:25:79:8a:8f:43:af:54:81:a9:
                    7c:a2:dd:32:02:0f:03:79:a3:91:23:fe:ba:0b:0d:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:95:C5:55:75:BF:5D:28:CA:4F:A1:2E:D8:CC:B0:D0:38:2B:F9:F2
            X509v3 Authority Key Identifier:
                keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:c7:73:f9:17:1d:c3:51:4f:85:47:88:5b:35:c7:11:82:
         4c:e0:7f:b4:32:8c:ae:37:31:8b:c3:86:1a:2d:0f:b3:4f:da:
         6c:dc:4f:53:91:21:cd:04:b8:f6:ce:7a:e0:c1:7f:23:13:b1:
         fc:55:6a:0b:7d:b7:c3:77:2f:50:b7:93:75:fa:26:33:81:47:
         d7:1e:ec:71:0c:2f:b2:04:e9:1a:2d:c6:3a:26:b3:ce:16:d6:
         af:c5:14:54:d0:e6:86:50:6a:1b:9e:70:e7:4f:7f:7d:a0:11:
         c2:a5:7c:f0:94:e6:56:ad:64:aa:f4:dc:0a:16:83:e1:bc:ce:
         44:b5:e6:f0:83:91:70:30:33:86:df:ce:d9:a6:ad:4a:25:21:
         cb:ec:97:9d:d7:75:32:7d:0e:ed:40:29:57:8c:fd:43:d3:f8:
         13:56:70:a3:ae:e3:12:c3:03:d5:67:61:ac:4c:15:93:b1:7a:
         df:91:c5:58:d2:88:aa:5e:00:6b:86:76:8a:28:a8:48:60:d0:
         40:a3:8e:30:a2:17:cb:56:9f:fa:da:aa:1d:49:86:0f:55:59:
         8a:5c:38:f6:fc:8d:38:03:e3:a0:38:ad:e9:41:96:0a:03:99:
         eb:20:a1:32:c5:af:e8:1e:c8:63:cd:e9:2b:91:ce:c7:b3:b2:
         c3:e1:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:03 2024 by rpki-client on console-fra.rpki-client.org