Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File:                     CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier:          AMIfg4mgCq2fkoJswXPXk9G0XCWsJ34ir6iRdVqNrrk=
Subject key identifier:   7D:5A:6D:2D:10:22:14:8D:8C:C7:7A:65:D8:4B:EB:7F:DE:5D:A9:30
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer:       /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial:       0190637173FB499749DBED3C75953A09FAAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number:          107D
Signing time:             Sat 29 Jun 2024 10:01:37 +0000
Manifest this update:     Sat 29 Jun 2024 10:01:37 +0000
Manifest next update:     Sun 30 Jun 2024 10:01:37 +0000
Files and hashes:         1: BdIvvSKtoO61Mm09j1q4N44n5dw.roa (hash: oHHuSs7VPyUBvVsyfnOsrEQ6A0NkfQzz0U16iFCu/Mw=)
                          2: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: OfjB+UwFiJR0gjmXM7DcyUoNTUq1Wo6Izdr6dIX0Rdw=)
                          3: ao45pnomhvoUWN-ZIkGZU_Txwr4.roa (hash: e65/rhjh/drm3mtDAz3S+/FPm1NTSoV6J/nAiVO7pgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:63:71:73:fb:49:97:49:db:ed:3c:75:95:3a:09:fa:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
        Validity
            Not Before: Jun 29 10:01:37 2024 GMT
            Not After : Jun 30 10:01:37 2024 GMT
        Subject: CN=7d5a6d2d1022148d8cc77a65d84beb7fde5da930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:e8:ba:e3:4b:28:e9:0d:96:b5:cf:19:18:
                    34:64:fc:e7:1b:2d:96:6d:3d:f6:c7:03:7e:f3:98:
                    6d:89:be:59:f9:17:8f:bf:f9:cb:3f:af:ee:7a:46:
                    04:16:7c:80:90:d7:dc:76:48:27:46:ee:bc:c4:29:
                    09:75:9e:92:28:1f:eb:a5:9e:9f:91:64:0b:9f:f1:
                    a7:59:e9:4c:df:2e:16:d6:0f:4f:39:81:66:74:fb:
                    3e:c7:4a:37:f7:97:cc:ed:a6:6b:75:92:58:73:7c:
                    da:4b:0b:54:a8:ed:95:f0:84:31:f9:e1:30:4d:ba:
                    1d:6c:ee:ce:ca:f7:2b:39:32:31:27:4b:a8:c2:63:
                    97:fd:7c:96:72:86:82:ee:e0:ad:71:da:05:6c:fc:
                    62:63:ab:7c:a8:7a:02:87:5e:f4:ff:b9:ed:b5:ea:
                    84:f3:b0:2e:8e:be:cd:f2:b8:11:c1:11:c3:66:38:
                    59:75:36:c4:55:1a:9e:d9:34:32:b3:a5:66:60:88:
                    58:08:ef:98:a0:0f:b7:e5:b3:41:78:09:01:81:e5:
                    37:ac:9c:17:13:20:00:cf:de:98:b7:98:7a:74:7f:
                    51:f4:19:92:d0:b0:55:ea:32:f6:7e:1c:ed:b8:9b:
                    bd:de:5a:9e:40:7d:70:30:a8:39:15:2a:f4:ca:e7:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:6D:2D:10:22:14:8D:8C:C7:7A:65:D8:4B:EB:7F:DE:5D:A9:30
            X509v3 Authority Key Identifier:
                keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:99:2f:29:88:8a:f4:2f:b4:af:35:07:64:c7:23:9c:e1:3e:
         44:a8:87:bb:fd:75:52:8c:1b:ce:7f:d8:ed:16:a6:57:59:17:
         a5:44:56:71:23:82:71:41:43:cf:b6:94:44:26:9c:85:0a:06:
         8d:cc:b9:fb:c2:68:d0:41:08:63:89:04:05:48:40:64:13:56:
         ba:e7:d1:27:2e:83:03:a1:2c:cd:11:2e:59:65:5a:17:51:75:
         db:67:95:2a:4c:be:e8:d4:9d:84:65:af:77:1f:db:4b:fd:d4:
         b1:4f:d2:fc:04:6d:ea:f3:88:60:24:cb:4c:77:8c:75:4e:96:
         fd:11:48:b5:0a:6b:6a:a5:68:46:34:77:d1:0c:aa:a2:e0:53:
         b7:52:49:16:d1:f0:fc:46:9a:b7:54:53:2f:8a:4a:d4:3b:46:
         9e:84:54:27:51:bd:28:46:86:54:4d:0d:ad:ee:6b:1a:b1:b8:
         bc:b7:bb:90:c1:84:6c:07:12:0a:71:5f:b5:b1:54:e3:fe:45:
         a9:65:33:16:36:86:b1:d9:78:cd:fe:09:aa:21:46:c5:9a:4d:
         4e:6b:8f:b3:91:0c:c3:49:e8:70:8c:b1:8f:e7:49:40:00:64:
         e6:a1:4c:91:bc:bf:5a:dc:03:58:61:cc:fc:2a:d5:50:6e:a3:
         45:0a:b9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 11:43:17 2024 by rpki-client on console-fra.rpki-client.org