Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File:                     Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier:          7yQs1Yr/u1jXuoBMRe/YS3tIhvqRWW3JcGWWR712dgE=
Subject key identifier:   07:D7:F3:0D:F0:54:79:07:1E:67:93:E7:F6:31:F1:B4:DF:B3:9B:06
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer:       /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial:       018EE511044E19B16CFA0506AD14F28349C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number:          1124
Signing time:             Tue 16 Apr 2024 04:01:21 +0000
Manifest this update:     Tue 16 Apr 2024 04:01:21 +0000
Manifest next update:     Wed 17 Apr 2024 04:01:21 +0000
Files and hashes:         1: 1-vRSdKtXWz9Y8mE7p_Cq4jrVhwo.roa (hash: nfJ5goiu4O+tWwlJChwreXXDqhJJCYf3x2gmK+c+gp8=)
                          2: Dk0pfIg8YqWyY_3RrBWdnN1GV3M.roa (hash: kegvfqEIiNBVkJJoxo4vcTPEvO1b2cN435KWv6jgAZ4=)
                          3: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: Mvuy5CQqJVXfjlZukidf+cCrpmlrSypuDJHHPdvTDyU=)
                          4: dOYC4COGFul6i3yyWrC0C1CmAJ4.roa (hash: lmqcFn7ikNWuJd4CBK7vIa/tEPcy/mvuzZDHZPpZRlQ=)
                          5: rOzu6vCcdfq32Zg3Oi-x3Bp5M6M.roa (hash: rpHpMwLqX4C6bvXhlqKRizVrfpj51/Duzu29qbZAEhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Apr 2024 23:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e5:11:04:4e:19:b1:6c:fa:05:06:ad:14:f2:83:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
        Validity
            Not Before: Apr 16 04:01:21 2024 GMT
            Not After : Apr 17 04:01:21 2024 GMT
        Subject: CN=07d7f30df05479071e6793e7f631f1b4dfb39b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:84:91:87:6f:e8:98:49:0a:ea:c3:75:63:13:
                    5c:22:ad:0c:49:ed:20:5c:90:22:40:4d:14:e1:a1:
                    e6:d1:33:bf:99:e9:b9:5c:df:04:74:b9:19:1b:12:
                    04:1f:94:bd:97:29:bb:27:f3:52:de:7a:68:fb:a2:
                    82:2b:12:d5:6f:5b:4a:9e:1c:0a:43:00:97:0f:3c:
                    9a:0d:21:98:b4:9c:dd:bd:d7:47:9d:d2:86:4e:c8:
                    e0:73:96:2c:17:d9:b6:29:47:d1:69:3f:42:31:50:
                    11:14:f2:8f:95:78:9d:53:de:18:0e:50:6c:18:91:
                    f2:7e:9c:3e:c4:06:14:e2:56:ae:57:3d:d1:7f:88:
                    3e:9c:c7:ba:3b:32:13:1d:b1:a6:7b:8c:1e:cc:08:
                    bc:03:6c:24:20:a5:c9:2f:6f:69:63:5d:e4:5b:88:
                    3d:fd:6e:eb:2f:a7:25:d4:32:f8:84:ac:1c:ab:29:
                    8e:ba:f4:fd:b9:a6:b3:68:80:25:1f:d1:18:73:61:
                    77:5a:89:07:1e:c7:c0:40:df:3e:c3:12:2f:1b:d4:
                    b3:11:50:7d:ce:f3:3b:0e:37:ce:c1:e5:f0:25:6b:
                    80:af:a3:eb:9b:2e:8b:87:1f:64:0e:3d:0f:9d:a2:
                    fb:47:e9:19:6e:83:16:4e:eb:cf:07:80:6a:a4:fe:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D7:F3:0D:F0:54:79:07:1E:67:93:E7:F6:31:F1:B4:DF:B3:9B:06
            X509v3 Authority Key Identifier:
                keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b3:13:8e:a5:e0:b7:13:27:c0:11:77:12:95:16:d4:ad:10:
         fc:f5:a9:20:19:3b:ee:dd:be:06:cc:59:25:83:cb:20:30:6a:
         75:25:41:2c:03:85:f1:a7:fa:1d:13:59:01:23:42:3e:e0:40:
         03:13:cb:26:f0:e8:bf:cc:43:3e:ea:f8:51:81:41:a9:a3:37:
         d2:ab:9d:ae:a1:42:f7:c4:61:23:98:c2:56:71:e9:8d:59:d3:
         e1:a4:7b:00:94:ff:95:bf:22:b4:ca:54:f6:5e:4b:84:c7:0c:
         69:0e:a3:63:55:2e:c4:40:80:bb:66:82:b9:f3:2f:73:a6:6f:
         ad:0c:ff:c1:f5:dd:ba:12:a5:12:b0:a8:e6:24:75:87:fb:ee:
         25:e6:9f:3e:5d:dd:3e:6a:a2:f3:d0:01:54:1f:9b:c0:53:c4:
         c5:69:7e:4c:ff:34:20:2b:7a:18:a3:6f:2c:87:a6:88:54:f9:
         ff:3d:87:f6:72:9e:ad:bb:c0:0c:a9:fb:72:85:d9:59:fe:de:
         a5:3a:16:57:5f:ce:33:85:94:a2:71:c3:45:b3:75:23:e6:83:
         b7:7f:f9:5b:f4:9f:50:29:2a:04:9d:e2:b4:27:b7:5c:f0:55:
         ca:93:b5:f5:ad:cd:48:1d:32:d1:4b:24:58:28:09:bd:9e:e7:
         24:ad:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 08:34:20 2024 by rpki-client on console-ams.rpki-client.org