Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File:                     qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier:          OZYoUC0UF5lRwh51IvsxZEw6d1hGr+QB0/OjLfXiwlI=
Subject key identifier:   8B:2D:C9:51:B0:A0:4A:05:82:8C:A4:0A:5A:96:5E:A8:2C:B6:54:59
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer:       /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial:       018F874A2902CE511D52E2CDB8F9E2649DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number:          042D
Signing time:             Fri 17 May 2024 16:02:15 +0000
Manifest this update:     Fri 17 May 2024 16:02:15 +0000
Manifest next update:     Sat 18 May 2024 16:02:15 +0000
Files and hashes:         1: fWA6gfjGNfVmUIhS-Wyiz7NFx2Q.roa (hash: sAcjgthsqM9uYhWCylT+9oS6kRfZAzv5mZVci8aOheA=)
                          2: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: dG9oyU2DBsydMdUgIZEApBXHtSxYwp2n5QY1rYvxGhs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:29:02:ce:51:1d:52:e2:cd:b8:f9:e2:64:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
        Validity
            Not Before: May 17 16:02:15 2024 GMT
            Not After : May 18 16:02:15 2024 GMT
        Subject: CN=8b2dc951b0a04a05828ca40a5a965ea82cb65459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:5b:d9:81:12:f6:1b:27:ef:94:eb:d4:82:
                    eb:f1:9c:a7:89:54:77:9b:09:cd:c1:be:4e:41:ce:
                    dc:e2:4d:b9:4b:6d:4a:3a:59:fc:83:1d:bc:7b:dd:
                    e8:45:84:67:a0:5e:ce:44:a4:66:5f:db:1b:10:9f:
                    26:33:e8:c3:64:9e:1a:a3:9b:55:9a:8e:e1:ae:14:
                    15:0d:35:7f:01:06:06:ef:24:0f:bd:d3:43:50:51:
                    d2:a8:07:d0:27:98:ed:d0:93:ce:1f:0b:2c:34:f4:
                    67:a0:3b:ce:3e:59:ec:a3:95:25:1d:bc:5a:36:f0:
                    d3:ee:20:a4:27:26:5e:9b:e0:41:f3:4a:a5:e3:64:
                    58:13:c6:c9:e3:ee:00:a3:c6:fe:dd:67:9e:0d:94:
                    e8:19:2a:37:b9:ea:a0:49:c6:22:4b:ef:24:e3:c9:
                    89:7f:10:df:e9:60:a9:71:f4:a3:cd:4e:8c:b1:18:
                    ac:76:2c:2b:51:1d:3e:cd:a9:7c:84:39:6c:e9:2c:
                    c7:cf:b9:72:fa:9f:09:20:14:df:3e:15:e7:a7:1b:
                    c5:13:46:44:06:e7:ea:72:40:e7:b5:a6:c5:e0:d3:
                    f5:0b:b2:83:11:fb:e4:15:c0:c8:54:e1:0a:10:e4:
                    88:f8:41:4c:4a:1c:9b:b3:26:07:11:87:e5:9c:2a:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2D:C9:51:B0:A0:4A:05:82:8C:A4:0A:5A:96:5E:A8:2C:B6:54:59
            X509v3 Authority Key Identifier:
                keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:69:79:85:a3:3b:1b:10:ef:17:98:d1:6f:61:68:57:ff:c7:
         5e:0b:fe:89:14:68:c2:77:bc:bf:5c:d1:e8:68:97:b4:78:4a:
         92:ce:12:8e:ab:ea:03:af:7c:94:49:8d:51:3a:2d:4f:9b:fb:
         bf:2d:93:a0:22:11:b3:6c:36:6b:40:70:af:5c:40:36:a9:2a:
         4e:61:2f:5b:81:d2:36:65:8e:99:63:0f:0d:a0:da:8e:7a:59:
         91:e8:1e:0a:31:ef:03:57:aa:6c:16:b5:f0:28:89:47:ff:de:
         bc:eb:d0:9d:d9:3b:97:3f:1a:cb:c4:84:e1:4f:cf:24:7c:b7:
         bf:f7:b1:fc:69:c7:17:8e:2f:4d:9a:7a:40:e5:69:54:6d:33:
         85:fe:e0:3f:8f:17:2b:77:1b:cf:de:12:b8:41:8f:17:7e:6a:
         d6:a0:a6:3f:db:b6:6f:38:7f:29:01:ff:f1:03:54:5b:8b:a1:
         51:6a:05:c2:ae:0f:4a:13:11:9c:f2:fe:78:e1:67:85:20:5b:
         ec:e5:3b:7d:e7:9a:15:2a:44:e9:d5:7f:4e:4f:6a:53:87:de:
         2c:3d:22:ba:8d:6e:66:99:d0:8b:88:b6:6d:2e:d3:23:21:0b:
         d1:bd:6a:9c:ad:99:d7:5d:7e:37:1c:95:cc:ab:8f:dc:04:cc:
         63:03:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:21 2024 by rpki-client on console-fra.rpki-client.org