Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File:                     qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier:          4dhqm+qJBl13dHwztCdR1JqFB3W24Z5QH7D+bfvsuFg=
Subject key identifier:   26:60:EB:CB:14:3E:8F:C5:9A:A1:D9:50:27:5E:43:F7:FD:47:51:42
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer:       /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial:       018F86A3A6CE7FA9CFAE1E26EC9B481E5CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number:          0FD4
Signing time:             Fri 17 May 2024 13:00:23 +0000
Manifest this update:     Fri 17 May 2024 13:00:23 +0000
Manifest next update:     Sat 18 May 2024 13:00:23 +0000
Files and hashes:         1: NxJiQY5ZuAk4cbmmT0obBE2GqeM.roa (hash: uvG90t78Ytlj9j18C5afdG1A5uZ3UGL4/SmNx1F6stE=)
                          2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: QDZAhH3gdPoJeJk1hStepW6LNpejb9nhzwmzELJ8Okc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:a6:ce:7f:a9:cf:ae:1e:26:ec:9b:48:1e:5c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
        Validity
            Not Before: May 17 13:00:23 2024 GMT
            Not After : May 18 13:00:23 2024 GMT
        Subject: CN=2660ebcb143e8fc59aa1d950275e43f7fd475142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:8e:e4:f2:7b:f5:ea:04:b3:4d:d6:d0:f6:
                    80:6a:8d:18:33:0b:49:68:fa:69:6a:63:3c:89:c3:
                    a1:70:f6:d5:bd:be:43:6f:ac:13:69:ce:38:fc:49:
                    93:5b:47:06:b8:1e:c1:fd:1a:60:9c:88:62:69:93:
                    5c:87:c3:31:0c:24:f2:21:99:42:35:79:ab:a1:ad:
                    fb:0f:1a:41:3c:02:02:a9:4b:d7:74:46:64:09:4c:
                    a1:08:32:47:8b:df:a7:c8:e0:bf:6c:3f:6e:42:1e:
                    ad:1d:b1:ef:3a:4b:53:17:8b:7b:b8:4c:a3:81:78:
                    0a:8f:6e:d8:7c:b6:c1:27:a1:9c:5e:57:6e:77:96:
                    ac:1f:a6:aa:d4:90:79:97:ef:3a:75:2e:16:11:d2:
                    d6:49:b9:d8:3f:cd:73:df:27:38:ca:b5:98:26:c5:
                    8a:0f:7b:6e:6e:4e:a6:d0:a5:f4:23:18:57:ee:fb:
                    54:1e:49:b9:be:10:e6:dc:32:7d:0a:0c:fe:16:5f:
                    d6:2d:db:88:40:2a:19:82:91:c7:3e:d1:ce:b1:db:
                    d5:7f:c2:f4:32:1d:97:90:7a:ce:e6:a0:38:1c:a9:
                    a7:ec:12:39:19:04:81:c5:4c:c7:f7:f5:8a:e1:d2:
                    89:6d:c4:cd:75:3d:bb:e8:10:f5:73:86:e8:33:27:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:60:EB:CB:14:3E:8F:C5:9A:A1:D9:50:27:5E:43:F7:FD:47:51:42
            X509v3 Authority Key Identifier:
                keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:a6:61:c3:b7:d5:23:52:c7:e1:63:25:3e:ba:36:2d:02:
         43:e1:a6:9b:8d:6c:4c:13:66:7c:62:eb:09:18:15:b0:06:89:
         ae:ec:a3:a6:42:1d:90:21:d9:a4:5d:3f:8b:1c:1f:0a:94:38:
         1a:de:a6:37:2b:5d:67:41:a7:32:b2:45:59:3f:ae:7f:eb:d6:
         66:ca:4c:fc:a1:3c:fb:aa:c1:a2:ce:9f:55:96:27:30:41:b0:
         56:3b:a2:3b:6d:a3:62:ab:ea:eb:c2:d9:66:f9:1b:b7:80:8e:
         af:75:39:21:aa:51:2e:8e:1b:74:be:7e:45:6d:40:77:03:02:
         76:8d:81:38:a6:c4:bc:d8:25:2d:08:7f:a3:6f:e9:e5:1f:7b:
         79:c1:dc:8c:9b:87:c8:4b:8d:34:1c:2f:48:39:b2:4f:03:7b:
         99:38:ce:5e:66:b5:c1:d0:4e:f7:81:74:6f:38:73:f6:12:16:
         1c:01:6d:b7:62:81:57:4f:e9:fb:9a:8c:0d:dc:68:d3:15:6e:
         f7:56:bb:2a:88:79:dd:a5:e7:55:17:af:c2:11:f5:50:7e:62:
         33:88:85:d2:b9:99:18:a2:a8:41:47:a9:1f:5a:91:1a:e7:fd:
         34:9a:24:43:5d:0c:23:71:91:9d:96:6a:b0:5d:ef:8c:e5:57:
         0d:c6:31:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:55 2024 by rpki-client on console-fra.rpki-client.org