Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File:                     Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier:          fOXKH8zHkXthYJJ00wKASAvKwel8lKcoVxuqE+pkBHY=
Subject key identifier:   8C:62:CA:3F:19:80:EC:14:ED:FF:BE:EF:99:74:C4:47:A3:57:50:47
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer:       /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial:       019041C04E90B04EB0259A27BC88DECABF20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number:          1123
Signing time:             Sat 22 Jun 2024 21:00:40 +0000
Manifest this update:     Sat 22 Jun 2024 21:00:40 +0000
Manifest next update:     Sun 23 Jun 2024 21:00:40 +0000
Files and hashes:         1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: pQOlhsRvfcUHnWNlhI2FNEnE944CZitn+Hhva/b5kyA=)
                          2: lMCG7NIrMs6XGLm8OXJbxZMC0_Q.roa (hash: gywpZCgbXQvAhskQoV7qmcegwj81M9xemTamamghxEo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:4e:90:b0:4e:b0:25:9a:27:bc:88:de:ca:bf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
        Validity
            Not Before: Jun 22 21:00:40 2024 GMT
            Not After : Jun 23 21:00:40 2024 GMT
        Subject: CN=8c62ca3f1980ec14edffbeef9974c447a3575047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:81:45:72:c9:e0:4d:f2:a3:8d:f5:ea:52:
                    98:14:27:68:b1:a2:dd:ec:87:10:12:47:e2:77:5a:
                    96:ee:7d:52:a5:36:38:db:80:64:25:64:5b:14:7b:
                    ac:f6:ec:ff:00:20:da:8a:f8:21:f3:63:e3:ce:d3:
                    cf:ea:ef:ba:a1:ef:d4:5b:20:6f:ad:95:a2:2e:3d:
                    5e:b4:16:8f:da:b1:a5:48:f5:f1:a4:71:4d:01:d8:
                    05:f8:9f:c6:bc:c1:0e:c4:35:50:cc:c0:75:f5:14:
                    61:0e:29:b4:99:56:a1:f8:e4:04:2a:59:d0:77:c8:
                    cc:02:b3:b7:3a:07:51:bc:73:ff:6a:a1:fa:8c:68:
                    11:cd:eb:ee:8c:2d:2e:16:01:09:fb:ab:97:f5:10:
                    2a:ec:bb:92:da:04:be:c1:2c:21:ca:2f:a1:0f:30:
                    9c:e9:0b:85:ed:32:da:92:7e:da:44:2d:79:5d:66:
                    72:80:60:49:b6:30:c3:1f:51:b2:01:ac:bb:89:bb:
                    c5:79:c1:98:66:aa:25:c9:5c:75:33:b9:10:ba:82:
                    5b:3c:24:20:2a:27:df:33:6b:db:ed:87:ca:f1:21:
                    b5:01:8d:ee:35:3c:82:fe:c3:e1:38:22:dd:ec:dc:
                    53:95:31:6c:c7:61:c9:54:a7:0f:8c:8e:45:6d:3a:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:62:CA:3F:19:80:EC:14:ED:FF:BE:EF:99:74:C4:47:A3:57:50:47
            X509v3 Authority Key Identifier:
                keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cf:23:94:59:01:fb:38:f3:ef:16:13:a7:9f:7b:83:d4:5a:
         e2:a3:24:56:cb:ab:1b:6a:18:82:31:51:6a:dd:46:7b:00:ff:
         9a:4e:bf:d1:ac:a6:c0:fa:43:49:c2:f9:c3:99:b1:c2:06:09:
         52:2d:00:4a:a4:92:86:65:2b:61:69:f2:1e:ae:ea:e6:41:cf:
         41:32:07:f2:9c:81:25:f9:2d:0d:7d:2d:eb:4f:f1:ec:75:fa:
         13:9b:b1:c0:ad:5f:29:c9:c0:ea:0c:67:4d:12:d0:b8:0f:fe:
         dc:fa:bb:22:ce:98:12:a4:31:45:4b:e4:11:6e:42:d0:9c:88:
         8d:20:77:1d:89:9b:6b:c0:69:cf:de:21:84:47:e6:59:85:dd:
         c8:04:fb:2e:8b:62:57:10:25:e0:66:6a:d6:3c:c0:4b:e9:bf:
         16:a0:2c:c9:e6:b9:d3:19:41:a8:3e:f9:21:b5:23:6c:7e:4a:
         65:31:80:1f:00:bf:82:72:2d:f0:8c:59:76:3a:67:b9:29:b0:
         36:3f:f3:72:1e:fb:63:81:20:a0:18:9c:dc:ea:c6:41:1e:32:
         cf:82:8b:01:c4:23:d5:72:99:c2:c3:53:b0:08:00:6b:94:cf:
         a1:91:26:a7:e5:e1:17:31:a4:79:15:06:6c:0e:36:4a:8f:a8:
         d1:58:25:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:06:24 2024 by rpki-client on console-ams.rpki-client.org