Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File:                     QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier:          joFFMzMso4F610U+vJC1Fly/IZfXKuvbaPrFMhtW0m4=
Subject key identifier:   4D:C6:D1:06:D3:DB:D1:F0:9E:7E:5B:4B:F9:77:5D:43:51:B7:A5:2E
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer:       /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial:       018F58F0AEB21FB7A13433152773D6B92559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number:          0800
Signing time:             Wed 08 May 2024 16:01:59 +0000
Manifest this update:     Wed 08 May 2024 16:01:59 +0000
Manifest next update:     Thu 09 May 2024 16:01:59 +0000
Files and hashes:         1: BgCeZFCB2RMaktGv9snknt9TtSM.roa (hash: t/c3YUoSm8O+J8KrnhkjpjuXIjTY9Ee2L5Sp3DdKY14=)
                          2: Diypr3vJjsD6oVhZFFFgmZ4Hn28.roa (hash: rCPb0zDx4dgT3wiTjczBCZVUACNVtuDeom59aFDPsoM=)
                          3: EIn7EucLGwpV_Zp5i3VjUrdNBvQ.roa (hash: VPbH/Rx8XwgzWw4FjzZCZpUIC0oD0mZMzAfdStUkCbc=)
                          4: ODYuP52ifkHVkda4BnvvoBDv3i0.roa (hash: Syk81rlFJd8p740MNbqd4MRXy4L2MpqIbjxMgMnVoMM=)
                          5: POtqDp-uNr2xhVOvytwoisQsuC0.roa (hash: sqoPPrxe2RJxQ7fSAL55+fer/bU3keZN/k8nanE/tyE=)
                          6: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: /MvSbuJ/5rhXwG5OjRApPvYFHKAG8i39EyMxRe54N1w=)
                          7: Sxjz3NY_O1vji8e2B0--kwuKDbM.roa (hash: Mw5J8HVoPGiP7zU2Q4JhQLVHUPnTELI3cV+zpplsPc0=)
                          8: Ul_Tp0R6u8dHBXCqpPTU5mse70A.roa (hash: Ldrtrg7TUaE7diVL6ebvVQ9ZqDiuGqSiVClETwyh/t8=)
                          9: gHIxv1Syx4N_MipL-mYRocClN5U.roa (hash: 4V2Q3xl5NdrU3cdeWKohfRMgjcg0GYls2kGKgJM/ft0=)
                          10: hnHVyGRLcu1kg1RVRTq8QzQI8Mw.roa (hash: gB+giofzDq/t4wm+GqFajWlrkh/milAjApkGfh5nqaQ=)
                          11: kD9Ri_S_wjXmk9bzA9CrlDrUyfM.roa (hash: D+RWoVLgnzMnFuVVhvWy4dekOMpHGrdCJ7EEIjFPgbg=)
                          12: qI5P-YHRugxDVMXrqCYsQ0UM1UU.roa (hash: MKTtJoZblyxIHUHeB94f6dI7dqMVaGTmtPOEVOaiM4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f0:ae:b2:1f:b7:a1:34:33:15:27:73:d6:b9:25:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
        Validity
            Not Before: May  8 16:01:59 2024 GMT
            Not After : May  9 16:01:59 2024 GMT
        Subject: CN=4dc6d106d3dbd1f09e7e5b4bf9775d4351b7a52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:b5:73:66:c0:6d:cf:aa:e5:a3:24:3e:90:
                    7d:93:b1:1a:f0:45:4b:27:eb:b3:88:2f:c8:d2:2f:
                    b5:9e:7d:0b:4c:b1:8e:1c:ad:58:35:49:f0:b7:9c:
                    9a:39:83:67:3d:33:34:d7:b8:0c:34:c7:98:a8:88:
                    db:68:d7:a3:e4:9b:44:fe:5c:7c:ec:ab:62:94:1f:
                    27:01:2c:35:06:53:af:ef:59:81:70:5d:ae:3b:2a:
                    af:6f:6e:a8:cf:e7:0d:1a:ab:86:c7:03:02:51:0b:
                    1a:cf:7c:b3:25:15:bc:2f:b7:23:ce:f2:77:49:b3:
                    e2:fc:a7:93:e0:0d:63:3c:d4:a3:15:44:bd:e2:4c:
                    0b:95:70:4a:fd:0b:53:63:58:e0:e8:1d:6a:51:5a:
                    f0:91:bf:52:c8:4b:43:27:6e:5b:9a:4b:32:f8:a3:
                    46:13:ed:21:fa:db:33:2a:4d:12:a0:06:99:82:68:
                    43:8c:80:c2:87:6a:67:da:d5:cc:59:11:98:cb:63:
                    8b:67:de:26:0e:e0:23:40:af:09:66:f9:54:d0:fa:
                    2e:cb:8a:c9:cc:70:a9:a1:ce:30:6a:b5:86:5c:de:
                    98:3f:79:d7:45:7b:b9:89:26:c1:8b:b4:14:40:6c:
                    db:39:01:d0:90:18:6c:27:60:c9:1e:9b:52:8b:02:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C6:D1:06:D3:DB:D1:F0:9E:7E:5B:4B:F9:77:5D:43:51:B7:A5:2E
            X509v3 Authority Key Identifier:
                keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:42:a4:69:6b:c0:3c:c5:fa:2e:ad:85:e0:0d:67:68:c0:f3:
         5d:ca:15:dd:d4:71:d8:01:4f:e3:a1:46:d6:45:4a:08:b1:ce:
         6b:ec:98:75:be:be:37:a0:c8:22:f6:f7:fe:35:7c:c9:48:78:
         05:fc:10:4d:86:5a:a2:4e:b3:26:b9:df:06:e3:36:cf:85:a4:
         1b:49:b1:26:9c:c0:d3:bd:9d:95:81:1b:bd:5d:eb:d7:67:76:
         5d:51:98:e4:40:06:f4:33:ec:26:d5:2d:92:2f:63:82:c7:38:
         98:e7:b2:a8:f4:30:cc:5e:c8:04:d4:c5:98:a1:b4:78:3a:40:
         2c:58:73:8b:62:b4:73:89:74:0a:52:5f:49:75:0d:fd:a2:45:
         13:9c:b4:5d:28:18:24:92:5a:ce:62:14:32:e3:63:39:2d:24:
         48:0a:c4:d5:b4:54:b8:24:56:fb:65:d6:a2:30:cc:bb:44:4c:
         6c:d3:14:31:d8:eb:ac:cd:d8:e2:7b:0e:6a:f1:c9:73:06:af:
         88:1f:29:ff:f6:47:40:fa:7e:1c:f2:f3:4e:58:9d:a9:eb:ca:
         28:c0:32:02:5a:c1:28:83:7e:3b:87:8f:c2:8f:df:7b:a1:b9:
         86:58:14:05:46:52:59:e2:9e:1a:a4:8a:b7:40:6c:07:fa:01:
         2b:96:ed:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 22:38:21 2024 by rpki-client on console-fra.rpki-client.org