Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File:                     qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier:          9mdg7oCmNHG4W/5muOaS0DSb7pyRf829l0GUEzz0CHg=
Subject key identifier:   D1:55:F0:DC:55:46:39:5D:4C:11:45:2D:E4:E0:2D:69:74:9F:F7:38
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer:       /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial:       018F87B62574FA9F23C94647A2C993D63F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:12 +0000
Manifest this update:     Fri 17 May 2024 18:00:12 +0000
Manifest next update:     Sat 18 May 2024 18:00:12 +0000
Files and hashes:         1: H5hHGG3h35Gchd4iNE9bC0fNlag.roa (hash: t/Tbib9QFi9AjBFjnD9A6MSEi28p6N2KE8gYilIa01M=)
                          2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: omwu/4NnEtws5Qa8vbhpmPL+WM48ME9EmOu90O32SrY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:25:74:fa:9f:23:c9:46:47:a2:c9:93:d6:3f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
        Validity
            Not Before: May 17 18:00:12 2024 GMT
            Not After : May 18 18:00:12 2024 GMT
        Subject: CN=d155f0dc5546395d4c11452de4e02d69749ff738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:c3:51:a4:f9:21:b4:97:ba:2a:71:8d:a2:
                    06:c6:e6:42:e4:46:4c:cb:11:52:5b:c7:ab:05:4b:
                    58:3c:27:03:3e:f4:1a:80:2e:7a:31:6c:ff:31:9e:
                    c0:0a:3d:93:da:f5:32:6d:b7:05:76:3e:44:ec:21:
                    b3:9b:b2:31:47:0a:5a:ab:ba:cb:a1:c1:70:fc:fb:
                    12:fc:4a:8c:e3:4d:a2:a8:d9:93:bf:5d:8a:96:e4:
                    ae:75:b4:22:aa:d5:f2:70:16:0f:99:44:d7:47:08:
                    7b:34:1f:59:1c:54:0f:3a:58:63:d7:97:50:b9:72:
                    2d:79:39:1c:bb:e0:75:3e:56:b9:b1:8e:1f:29:8f:
                    88:51:7d:a4:b4:f7:90:0a:2c:5e:6d:27:64:97:6b:
                    9c:9f:36:cb:9a:5b:05:9c:58:c7:6c:9b:01:6d:be:
                    70:9c:f4:fc:f9:85:ef:c6:40:f6:f4:2a:7b:3c:01:
                    04:44:99:69:12:ee:e1:d5:5b:ae:c0:9a:70:b7:ad:
                    ed:39:3d:37:9d:7f:00:2d:16:90:a8:8e:41:6e:aa:
                    f1:fa:4a:0b:1f:86:4a:64:2e:99:19:46:10:6c:48:
                    4c:2f:ef:c6:b7:42:70:ec:ee:73:2a:32:55:c4:f8:
                    99:57:b1:ab:78:9c:06:6c:ab:53:b1:a3:3c:43:2f:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:55:F0:DC:55:46:39:5D:4C:11:45:2D:E4:E0:2D:69:74:9F:F7:38
            X509v3 Authority Key Identifier:
                keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:45:a4:27:d5:3d:96:f0:b1:e5:8e:13:df:0a:2c:e2:84:cf:
         93:df:dd:96:91:62:01:fa:64:54:e4:92:6c:f0:92:37:23:56:
         aa:bb:b7:76:fe:d0:df:24:70:46:2a:19:82:0b:74:6a:9d:1c:
         57:f8:8c:6e:d7:23:ac:2e:d3:dc:3d:93:1d:24:b2:6e:5d:76:
         86:d4:61:02:59:ed:f2:78:b5:03:db:7a:16:7f:a5:9a:57:03:
         92:ff:63:e4:0c:a3:47:8b:17:2a:9c:f5:97:61:38:92:66:5b:
         93:09:34:e8:5b:0f:e4:79:7b:80:fd:3e:45:8b:1b:74:dd:6d:
         d7:10:94:08:59:1e:f8:cd:40:9c:f5:d3:71:e5:be:74:6c:f4:
         72:68:a0:24:f8:f2:a4:02:3d:9a:7b:ae:7e:9e:14:6b:2d:77:
         48:86:f7:b6:8c:bb:f8:ba:0a:d4:d9:13:bb:8c:fc:76:0f:50:
         33:7b:0f:1e:ed:42:3e:60:c8:32:a2:da:fc:3b:c7:0d:ae:05:
         c4:2b:12:0e:dc:4a:a6:ef:c7:2e:80:7a:ee:27:30:71:88:55:
         4c:b5:ee:48:8f:76:5b:36:7d:8d:0c:e6:2b:9d:9d:78:e4:32:
         13:3d:d7:73:9d:39:df:9b:cc:04:ed:86:dc:06:c7:17:7d:79:
         83:45:04:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:21:10 2024 by rpki-client on console-fra.rpki-client.org