Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File:                     QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier:          Wf8U4o/9aoZRsNYsQRm4w0cTRrN4iO6bvUIeRkSJRQE=
Subject key identifier:   22:DA:44:1A:02:80:EA:68:6D:0C:1D:7F:F5:C1:6B:57:D5:3A:5F:40
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer:       /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial:       018F97CE1CCD5C5662D70362060828FB8703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number:          1187
Signing time:             Mon 20 May 2024 21:00:18 +0000
Manifest this update:     Mon 20 May 2024 21:00:18 +0000
Manifest next update:     Tue 21 May 2024 21:00:18 +0000
Files and hashes:         1: 1-WPwpTGZzJ93rYEBC7FW1IzgvTk.roa (hash: fwcI4FjpDgzoA3g95Wp2FmqtoZBdwzNitbZj+TBBykc=)
                          2: IOMjdokz1YYnp8LzTUiSqwYWMeU.roa (hash: H3ZHoLmhdrJ/FLg2fkvOBTcsyIubEYv2crBlJwQ42QI=)
                          3: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: rHmaRh579fuUe387mCdm1zomiTA6z4iY6CF8naVD+qA=)
                          4: qdCJzRn9h1AO0aPQq61UhhhuZoY.roa (hash: ZidyMEetsQkkLnPLT6tvfnQYmU3K06ODkcY8u5S11YE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:ce:1c:cd:5c:56:62:d7:03:62:06:08:28:fb:87:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
        Validity
            Not Before: May 20 21:00:18 2024 GMT
            Not After : May 21 21:00:18 2024 GMT
        Subject: CN=22da441a0280ea686d0c1d7ff5c16b57d53a5f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:54:12:a9:42:07:db:f1:e1:0a:8a:ea:37:
                    86:94:f3:80:84:69:bf:2e:50:25:b3:82:85:39:f9:
                    de:04:1e:91:17:52:eb:ea:b3:37:3f:af:af:5a:bb:
                    1c:df:d0:93:66:24:5e:bf:85:8f:8b:97:f4:3e:30:
                    6e:d2:4f:b0:f3:ca:38:46:f6:1b:cd:29:03:d8:a9:
                    f6:8b:0f:12:eb:f2:18:b4:4c:ed:1f:72:bb:be:46:
                    3f:ec:f3:28:3b:7b:27:c5:c1:18:b1:a5:b4:e4:7a:
                    d7:2d:36:55:05:5e:99:d5:f3:d5:05:5c:72:8c:25:
                    1f:67:c5:91:30:ce:54:45:77:5a:f3:ac:e4:9a:bd:
                    b1:17:c4:54:78:d0:09:f4:e9:c4:d2:33:54:63:13:
                    c9:f7:ef:53:bd:b4:05:71:b8:68:a9:65:a8:5a:78:
                    3f:2c:03:c2:83:23:25:38:84:7f:51:c0:49:70:31:
                    73:b7:db:26:0b:16:6f:ef:c8:6c:83:65:7d:96:79:
                    40:c0:ae:ae:6f:be:5c:d2:64:31:cb:b6:c2:b5:68:
                    dd:ff:35:e7:0c:e3:96:cc:61:aa:21:8b:e4:7c:5f:
                    4c:c7:06:51:4b:f0:5e:67:a1:a0:9a:7c:42:f5:ee:
                    c6:5a:5c:50:de:85:07:ed:20:e9:12:fd:4b:f7:00:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:44:1A:02:80:EA:68:6D:0C:1D:7F:F5:C1:6B:57:D5:3A:5F:40
            X509v3 Authority Key Identifier:
                keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:49:22:7e:d0:60:26:66:ff:74:7a:5d:7a:6a:92:57:f5:
         44:bd:22:41:3c:5b:4b:32:f9:1e:df:90:8f:ed:1f:fc:db:c2:
         dc:79:3d:f5:18:11:8d:17:f4:f2:fe:13:a7:dd:f1:05:3b:5b:
         26:fb:72:6f:e8:2d:b8:e7:7c:00:ad:72:65:db:be:84:48:dc:
         2b:d0:d1:4a:12:29:83:b7:0e:ba:1f:2b:15:45:76:db:a8:74:
         72:2b:75:f9:58:34:b1:42:89:f7:50:10:df:b3:2f:ff:fd:ba:
         f3:9b:33:aa:16:69:eb:1b:c4:4a:95:b6:1f:8a:ad:4a:28:34:
         c8:2d:40:9d:d7:b1:1c:84:05:64:79:ba:24:d2:92:62:55:dc:
         6a:2b:fa:b0:71:14:d6:d8:05:d8:e5:87:c9:37:34:ca:d5:1a:
         4d:b3:9f:7a:b0:ee:7d:b4:36:93:48:b7:8c:c5:bf:c2:a1:4c:
         10:8a:d5:0c:d9:16:54:b0:1a:17:81:f1:74:9e:9c:46:0d:78:
         5e:69:df:de:dc:f8:6a:1c:7e:d2:90:80:6b:01:30:82:d8:0e:
         bf:42:3f:b6:98:84:5c:c3:54:c1:ae:11:21:a5:ab:67:1d:3a:
         ab:9b:17:aa:68:5d:27:9a:52:4f:8b:0f:6e:22:87:43:f7:57:
         ec:a1:e9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:42:50 2024 by rpki-client on console-ams.rpki-client.org