Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File:                     QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier:          U9AKbuZtNaG5WAf+9FdBC2Kpj0z1ZMMEdD6gnYV4z4w=
Subject key identifier:   C8:7A:EE:7B:62:56:E0:40:65:84:7D:A2:3D:6F:80:99:7F:81:97:EA
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer:       /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial:       01902983B0DF83B5A436A93AEFAA7A379AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number:          0AA4
Signing time:             Tue 18 Jun 2024 04:03:34 +0000
Manifest this update:     Tue 18 Jun 2024 04:03:34 +0000
Manifest next update:     Wed 19 Jun 2024 04:03:34 +0000
Files and hashes:         1: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: W9XTO21EqqhdlViEA/7NmRFyj0+NHv/Y9WOjCQKB/gM=)
                          2: oE59or5LjZXam8R59JCmbyYAY4M.roa (hash: Odk6iQcHpzLNBhtamxzd6i7YU4DEmOVJ2rp+NLDDr4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:83:b0:df:83:b5:a4:36:a9:3a:ef:aa:7a:37:9a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
        Validity
            Not Before: Jun 18 04:03:34 2024 GMT
            Not After : Jun 19 04:03:34 2024 GMT
        Subject: CN=c87aee7b6256e04065847da23d6f80997f8197ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:45:0b:cc:4f:bb:31:d9:63:64:ed:6a:a4:
                    cd:37:c5:e8:de:17:e2:79:b0:89:5c:84:1a:7a:64:
                    60:ac:81:27:b9:5b:2b:db:66:62:95:6b:68:4d:ae:
                    37:f0:a1:e4:2e:e1:5c:ec:bc:c3:ee:59:c7:35:28:
                    2f:99:a3:9f:64:3e:93:0a:48:04:cd:4b:15:5c:2f:
                    00:d1:2e:20:17:33:cf:9c:a4:94:8f:14:10:c4:ad:
                    7e:ea:b0:db:d5:a6:e8:13:26:fb:d8:34:04:84:02:
                    b5:66:66:df:5d:cf:d4:83:94:7d:66:ca:d7:a6:65:
                    64:83:bc:9d:0c:70:1c:2d:7a:c3:9a:af:97:56:43:
                    30:3a:8a:2f:c6:c6:5e:ad:5a:7b:9e:38:70:22:65:
                    42:48:32:4b:04:7a:1a:25:8f:91:15:dc:74:01:79:
                    ea:a2:42:f6:e2:ab:ce:0b:d7:e4:45:a0:ee:6d:ac:
                    e2:7a:a1:22:fa:b6:22:53:54:39:c3:f3:00:8e:f1:
                    87:49:b2:90:49:75:a1:1d:89:28:22:39:c8:fc:8c:
                    dd:1a:9d:3f:6f:49:d3:47:41:6a:fc:8d:7e:36:4d:
                    9d:5d:c2:04:80:70:07:8e:f4:a7:f9:07:a2:2b:01:
                    c5:59:18:0a:9e:46:65:af:16:3f:75:ee:9a:1b:ca:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7A:EE:7B:62:56:E0:40:65:84:7D:A2:3D:6F:80:99:7F:81:97:EA
            X509v3 Authority Key Identifier:
                keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:11:f3:7c:a1:54:99:e6:bd:40:8a:59:ef:15:ad:61:c5:e2:
         10:80:84:6c:40:65:3f:14:59:1b:67:f8:22:e2:36:43:9f:79:
         54:9a:a3:ce:ef:df:65:a2:6c:6a:68:ac:35:cd:a1:97:72:2c:
         52:93:a0:17:f0:02:e9:68:d5:17:27:0f:1b:35:82:85:60:95:
         05:08:92:c7:69:65:66:d9:fa:23:53:57:36:5c:dc:a8:25:b2:
         99:19:76:18:a0:28:00:4b:41:ad:19:54:f9:19:95:23:c3:60:
         58:ca:eb:7a:ae:1f:fe:c3:d3:56:60:e0:40:55:e3:bb:15:f4:
         4e:3e:9e:ef:c4:c9:5a:8f:9e:ac:98:a4:44:1e:54:d1:02:7e:
         00:ae:f9:23:9c:a8:52:a3:61:a1:92:5e:d9:5f:1a:56:62:38:
         38:15:5c:e7:50:88:ad:2c:5e:c5:b9:5c:33:7e:dd:ad:ee:64:
         9b:35:2d:79:38:6b:50:de:21:ef:7a:45:c4:4a:db:ae:f6:56:
         19:29:c0:30:44:e9:0d:46:e9:70:ea:ac:ac:83:1f:02:06:6a:
         4a:76:60:6f:bc:8f:a5:84:69:76:44:cd:e4:91:3e:36:08:6f:
         4b:0c:b2:ea:91:13:23:69:ef:2d:fb:73:45:2e:6b:fc:00:d6:
         e3:f2:e4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:52:09 2024 by rpki-client on console-fra.rpki-client.org