Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File:                     qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier:          d+Dvhnu4l7N+LFudvBmlSCUIF3FPDqxKxzqf3MyE4BE=
Subject key identifier:   A5:56:AF:EA:36:CE:83:2D:C7:72:75:C1:A2:53:C1:A3:A4:D7:E1:47
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer:       /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial:       018F8748C8D059FBDD3716BF0CB5A0380A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:00:45 +0000
Manifest this update:     Fri 17 May 2024 16:00:45 +0000
Manifest next update:     Sat 18 May 2024 16:00:45 +0000
Files and hashes:         1: aAq3Bt5BJ_h0KiNu_5bxFSguLfQ.roa (hash: rMl12EXpxLp9FPIJY+FfSuZfIC4RGE9sfm8GUZNDkg4=)
                          2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: tTaVBpZajvwPAdWyQziwZiwPgsJCzW1Kql6/VHxKRvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:c8:d0:59:fb:dd:37:16:bf:0c:b5:a0:38:0a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
        Validity
            Not Before: May 17 16:00:45 2024 GMT
            Not After : May 18 16:00:45 2024 GMT
        Subject: CN=a556afea36ce832dc77275c1a253c1a3a4d7e147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:16:df:d1:8d:49:ba:d0:29:2f:33:df:aa:
                    de:1c:6a:18:f5:cc:e4:d3:5a:95:c4:87:0c:07:6a:
                    f8:8b:c9:db:70:5d:a7:6a:b5:74:a6:1f:b0:cf:75:
                    29:76:3d:74:6d:be:e6:bd:4d:e0:2a:48:9b:0a:f8:
                    78:c5:c8:be:f2:f4:31:98:d7:1d:c3:10:39:2a:41:
                    7e:26:43:ef:11:88:6d:cd:10:2f:c3:71:3c:e8:5f:
                    73:fe:21:45:e8:5e:96:60:c3:f0:0a:95:95:d6:8c:
                    62:74:4f:56:41:cd:02:a1:20:bb:3f:16:5e:9f:f9:
                    cf:e4:e7:c9:47:7c:40:c1:76:72:9c:37:4d:2f:9f:
                    1c:50:00:2e:f0:0e:7b:a4:6c:f7:a4:df:c5:b9:8f:
                    68:b1:0f:ce:0d:3c:ad:dd:59:0b:90:13:a2:77:85:
                    b3:d4:46:66:bc:93:b9:cd:6f:21:49:9f:f4:d0:38:
                    be:27:da:56:60:6f:1a:24:50:a2:82:fa:9e:3b:ac:
                    ea:1f:27:b6:09:e6:e7:77:94:61:5f:9a:2c:60:38:
                    16:0d:0e:b1:7f:15:27:8f:3e:17:3d:df:3c:19:52:
                    cd:a7:39:44:44:f7:4d:76:9a:8c:25:92:4e:df:ce:
                    a2:75:59:0a:87:2e:90:40:d1:f9:d1:9a:0e:77:f8:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:56:AF:EA:36:CE:83:2D:C7:72:75:C1:A2:53:C1:A3:A4:D7:E1:47
            X509v3 Authority Key Identifier:
                keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1c:fa:98:ac:ce:b1:00:33:cb:98:6a:05:7a:78:7b:5d:a0:
         e2:28:05:5f:c1:bf:c6:32:ab:88:4c:66:17:b7:ed:94:3a:8b:
         8f:88:94:fa:c9:3d:17:b7:5c:05:d8:bf:a1:34:da:2c:e4:1e:
         b2:59:5b:13:f1:6b:5d:01:8d:a4:ea:a4:57:27:53:ea:09:82:
         3c:56:b6:1d:d1:a3:a2:59:93:15:ea:64:c4:df:e8:2d:49:68:
         35:f6:59:ff:24:d6:aa:32:92:38:de:83:13:93:d2:3a:60:7a:
         23:67:81:5b:bc:e7:58:0c:97:82:a3:9e:b1:89:f5:59:d8:74:
         2c:94:f6:49:8d:d3:1f:29:37:c2:0f:97:26:d1:b5:cd:57:08:
         92:97:77:05:66:a6:4e:02:30:2b:c4:ac:90:c0:60:1d:03:0f:
         9f:d2:df:f0:21:67:95:1f:d1:b7:c9:9b:5a:f7:c4:6c:86:cf:
         bc:76:fe:71:ac:30:4d:bd:64:d5:59:27:09:ec:93:97:95:30:
         69:d0:6d:de:59:11:ba:05:e8:d1:42:2a:f9:3f:89:a4:f2:4e:
         4f:71:f3:92:c9:47:a0:e7:33:52:43:fb:c9:b8:77:5a:5b:58:
         90:3d:4c:c6:66:53:dc:b7:22:d1:87:80:04:91:82:00:37:5f:
         79:36:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:07 2024 by rpki-client on console-ams.rpki-client.org