Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
File:                     Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json)
Hash identifier:          DnVSais4hGq08TPKlmHiBk+sQ4FA6Bs1tcaq+SWnKjs=
Subject key identifier:   31:36:D9:7B:7C:49:24:CC:53:4D:2C:9D:A8:E2:16:D2:1C:41:2E:A6
Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Certificate issuer:       /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Certificate serial:       018F87498F97C9333D567A1F99C9B7DBD821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
Manifest number:          0397
Signing time:             Fri 17 May 2024 16:01:36 +0000
Manifest this update:     Fri 17 May 2024 16:01:36 +0000
Manifest next update:     Sat 18 May 2024 16:01:36 +0000
Files and hashes:         1: B8Unapy6VhGi9bD4ZmmZpDYflvo.roa (hash: nb6s0aiIqIu2vemDdMA8yHWFyWx6W9iEZ8XACMgeuIQ=)
                          2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: ebq76aPLFU817afATrTyBjMawv+Mnr3VeJAkgyNPoVI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:8f:97:c9:33:3d:56:7a:1f:99:c9:b7:db:d8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
        Validity
            Not Before: May 17 16:01:36 2024 GMT
            Not After : May 18 16:01:36 2024 GMT
        Subject: CN=3136d97b7c4924cc534d2c9da8e216d21c412ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:78:8c:d6:97:b5:97:42:71:26:fd:c3:e6:
                    e5:ec:a7:3d:78:93:9f:f2:51:a5:36:13:72:ea:ef:
                    35:d8:ce:f4:8b:f5:13:bc:e9:93:45:3d:18:be:a7:
                    c8:a9:83:85:78:16:40:96:a5:82:e0:a6:52:c8:0e:
                    e8:48:a0:55:4b:cd:f6:84:62:57:29:bb:5d:45:56:
                    96:e7:91:6e:c6:6a:f1:ff:49:b4:08:44:b7:b8:a8:
                    19:3c:ca:78:19:15:b2:2c:a9:8f:29:0d:1c:06:bc:
                    fe:f1:1b:0e:73:f2:a3:14:c9:19:f5:26:ba:97:4e:
                    19:d6:be:94:46:ae:c2:62:20:ee:d5:38:da:0b:02:
                    43:db:82:5d:43:e7:92:93:73:25:7d:61:10:24:64:
                    9b:a7:ce:de:65:c3:02:a3:d4:94:ab:df:ba:e9:30:
                    3e:58:79:c6:e4:3b:b5:04:8b:67:02:9c:c6:05:42:
                    c5:a4:9c:19:01:f7:ab:7d:da:dd:2b:42:31:7c:a9:
                    96:9b:86:43:9d:41:8b:8a:1d:37:c9:0a:48:95:2e:
                    1a:65:d3:61:c3:61:f6:fe:70:99:2d:51:13:e1:5b:
                    ed:e9:cf:32:8e:63:7e:d2:65:cd:df:f7:6c:3e:69:
                    5f:36:b4:39:4c:77:ef:8d:b8:cd:ba:18:ac:64:f3:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:36:D9:7B:7C:49:24:CC:53:4D:2C:9D:A8:E2:16:D2:1C:41:2E:A6
            X509v3 Authority Key Identifier:
                keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:46:2e:19:bf:fe:f3:a9:fe:37:6d:3e:ea:10:c9:ff:1d:10:
         91:01:53:d8:fb:ea:b3:fc:5d:17:22:1f:56:ff:33:a1:39:c9:
         15:d9:6e:45:98:58:82:67:97:3e:00:18:5f:02:b8:a6:7e:35:
         57:c5:4d:1c:d2:45:ce:59:4d:32:47:ab:2c:d9:10:d3:db:ba:
         b7:5c:0b:81:7a:ab:61:d5:f2:71:35:5e:58:bf:e5:44:e8:02:
         78:21:09:6d:e3:df:dc:d4:c9:1d:6e:a9:8c:07:d4:eb:42:79:
         a3:3e:3f:a3:86:e1:b1:eb:94:0f:27:33:3b:09:b5:4d:79:32:
         bb:32:1c:9d:f9:5c:02:85:0b:78:ab:4d:02:c1:d1:60:13:15:
         b7:62:ab:a4:66:12:a5:b3:03:83:97:46:28:bd:6c:e4:84:12:
         75:be:ba:5e:32:aa:f5:5c:a1:6b:6c:ce:3c:40:13:97:51:42:
         a1:39:2d:75:bf:8f:87:f8:ca:cb:ff:5f:c2:ae:f8:7c:45:7f:
         42:f1:06:3b:4d:3d:4a:81:d9:9d:83:52:c4:b8:02:ab:d8:db:
         ce:a0:17:b5:e8:5d:a6:1d:49:b2:33:71:6c:44:68:e0:6c:86:
         8b:08:b0:c1:8a:6c:5b:60:ff:eb:81:d2:5d:8c:aa:03:fd:b7:
         d6:2b:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:43:49 2024 by rpki-client on console-ams.rpki-client.org