Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File:                     QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier:          v6AKkKtXzzAgsVpZxCo2AQiCCDxbQZKcDqTLf+6J1lg=
Subject key identifier:   16:52:CF:6A:03:57:96:C5:A8:D2:67:4C:A5:FA:12:B4:61:AE:92:8F
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer:       /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial:       018F8749DD819D5AE7816190105EEF7577B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number:          10CB
Signing time:             Fri 17 May 2024 16:01:55 +0000
Manifest this update:     Fri 17 May 2024 16:01:55 +0000
Manifest next update:     Sat 18 May 2024 16:01:55 +0000
Files and hashes:         1: 8Bp7HBxI3xmvueezCoGIzkeS1a8.roa (hash: kWb2UwXKiQRgptLU76HQVMZ+FbM72f71URGNB1ssOls=)
                          2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: GtbupmZrqUpbfvlxI82jHu6Rd7NradV/N5FIruc2Qf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:dd:81:9d:5a:e7:81:61:90:10:5e:ef:75:77:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
        Validity
            Not Before: May 17 16:01:55 2024 GMT
            Not After : May 18 16:01:55 2024 GMT
        Subject: CN=1652cf6a035796c5a8d2674ca5fa12b461ae928f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:3d:02:6e:90:da:a1:bb:b6:33:6e:c1:2e:
                    ba:2a:a4:e1:40:67:10:03:90:be:06:5d:ee:3b:61:
                    16:44:52:9d:e4:b4:35:80:07:2e:8d:47:f1:58:f6:
                    29:6e:01:1b:21:fd:40:75:cd:b1:b5:1b:ff:6b:0a:
                    94:ed:fa:ce:4c:e0:d1:57:c1:94:e5:0c:a5:a9:24:
                    66:ed:06:83:d0:04:4a:60:2e:dd:90:d5:e9:43:73:
                    91:f4:47:9a:53:68:17:bb:5e:ab:30:65:ff:f5:8f:
                    a5:5a:f4:43:cd:84:92:1a:5b:40:c7:30:55:a2:a5:
                    ef:7f:66:fc:14:4f:58:a6:60:dd:4a:37:ad:62:5e:
                    eb:6e:cb:1c:66:6e:4e:d4:0a:4e:f2:9c:99:a1:92:
                    08:e0:d7:af:dd:ba:82:7f:e9:9a:52:df:19:0b:c8:
                    81:35:ba:d2:e5:76:7a:1b:35:3b:11:97:ea:71:de:
                    5b:aa:14:28:f1:c3:74:bf:f9:08:7c:68:69:f1:f9:
                    a9:52:fc:26:a2:30:12:1c:76:ec:aa:bb:48:50:67:
                    b1:50:23:56:de:1e:cf:04:f4:c4:3e:ff:91:7f:ab:
                    80:3a:6e:3f:f3:de:10:ac:09:b6:49:4e:1b:25:06:
                    ff:68:9e:90:53:4f:f3:18:71:fd:e8:d7:b3:f7:41:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:52:CF:6A:03:57:96:C5:A8:D2:67:4C:A5:FA:12:B4:61:AE:92:8F
            X509v3 Authority Key Identifier:
                keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8f:d0:5c:ec:40:dd:f5:db:6f:fc:26:54:e8:87:63:cd:b5:
         41:97:74:98:2d:eb:b8:db:1b:93:1f:fd:2f:29:52:ef:64:5c:
         9d:4d:de:e4:b6:fe:e0:34:1b:10:e1:2a:6c:8b:8b:84:b2:e0:
         76:b3:dd:27:53:12:44:79:ae:2d:18:ed:7d:7b:7d:b2:da:d7:
         61:ec:03:0f:d2:11:f3:ac:91:36:6d:a8:38:b9:1e:8e:31:d1:
         ec:75:a2:96:e8:30:4c:95:82:0e:65:ef:69:52:2a:1c:08:e6:
         15:f4:1a:db:e0:cb:b8:27:97:81:3f:e6:65:ae:d6:a5:1c:96:
         0c:5b:7e:9f:7e:ce:9d:f2:fa:b1:e4:75:e6:b3:a8:48:0b:dc:
         13:5e:3f:9f:08:12:f4:1f:80:80:2a:51:c3:fd:5d:51:08:d6:
         14:36:6a:02:60:1c:92:8b:6a:5c:29:9c:8e:8a:49:62:9d:90:
         f9:ce:fc:55:67:e6:ff:9f:e0:7b:cc:72:93:cc:45:3f:e3:8d:
         c1:de:b8:a6:8c:3a:da:ad:56:c1:c3:b8:3f:3a:a3:c5:0a:9a:
         3b:b4:46:d2:b8:93:19:46:a6:8e:f0:67:cf:48:e0:0e:26:25:
         ea:df:b0:a6:7d:71:b1:15:12:95:fc:bb:98:0c:4d:a6:a2:6f:
         0f:f4:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:43 2024 by rpki-client on console-ams.rpki-client.org