Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.mft
File:                     qvNQYhzAHooe03KB3zKwlxy95Vc.mft (raw, json)
Hash identifier:          ZwPlVZoXW6jBqNNYBLl5J7TC8vXCecfBbkDN7KB+C6E=
Subject key identifier:   C2:EA:4C:74:5E:C2:5E:94:0F:57:FA:CD:30:87:A5:7C:D1:27:8F:92
Authority key identifier: AA:F3:50:62:1C:C0:1E:8A:1E:D3:72:81:DF:32:B0:97:1C:BD:E5:57
Certificate issuer:       /CN=aaf350621cc01e8a1ed37281df32b0971cbde557
Certificate serial:       01901E8F9F804C97FA5C28A9B0128ABB23CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvNQYhzAHooe03KB3zKwlxy95Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 01:00:47 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:47 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:47 +0000
Files and hashes:         1: qvNQYhzAHooe03KB3zKwlxy95Vc.crl (hash: bCZKwyhSnCGoVJLjd1GMGyOLNSEIBtsQsO3iQCefvCA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvNQYhzAHooe03KB3zKwlxy95Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:9f:80:4c:97:fa:5c:28:a9:b0:12:8a:bb:23:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf350621cc01e8a1ed37281df32b0971cbde557
        Validity
            Not Before: Jun 16 01:00:47 2024 GMT
            Not After : Jun 17 01:00:47 2024 GMT
        Subject: CN=c2ea4c745ec25e940f57facd3087a57cd1278f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:51:e0:71:5c:98:e0:0b:8b:6c:c8:73:11:4d:
                    2f:14:48:3a:b0:35:3f:e0:45:da:c2:5a:9b:f1:a7:
                    11:f9:8b:71:35:91:c4:68:a0:90:be:30:8a:1a:b7:
                    d3:6f:77:0c:78:b5:f8:03:f0:d1:bb:bb:8f:06:c9:
                    54:25:1d:9b:1a:46:1c:cd:b9:8a:3a:c7:08:f4:07:
                    ab:11:b6:83:73:4c:2b:5b:af:5f:d2:3a:9f:d1:b4:
                    87:db:10:00:11:e2:56:51:d7:01:e4:37:3f:25:76:
                    1d:0e:9d:90:21:21:06:ef:bf:65:05:df:a5:9c:c1:
                    91:4d:11:57:66:07:d9:f4:e4:6d:3c:9e:4c:1f:94:
                    3f:e7:5a:82:97:04:3b:b6:f7:44:22:9b:1f:90:53:
                    e8:2e:b2:e5:8c:4d:89:36:e0:9b:d7:86:14:67:7e:
                    e5:69:27:d8:33:50:e9:4c:4d:a2:3c:7f:3a:d8:62:
                    89:f7:1b:d7:25:c8:c4:44:1d:13:c7:7f:2d:de:b0:
                    0f:9a:22:3a:bc:cc:04:e7:0d:cf:2f:0d:92:06:9e:
                    af:f5:a1:55:d0:48:c3:e8:b6:c4:d6:a0:59:f3:03:
                    bf:86:f1:30:41:36:f1:57:82:00:a6:06:54:5b:54:
                    b8:24:10:13:67:2e:08:78:66:99:f4:a3:4c:70:95:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EA:4C:74:5E:C2:5E:94:0F:57:FA:CD:30:87:A5:7C:D1:27:8F:92
            X509v3 Authority Key Identifier:
                keyid:AA:F3:50:62:1C:C0:1E:8A:1E:D3:72:81:DF:32:B0:97:1C:BD:E5:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvNQYhzAHooe03KB3zKwlxy95Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:45:81:8a:ed:e3:40:ee:7f:0e:3e:b7:71:1c:a7:d3:94:f4:
         00:fb:0b:d9:d4:fa:b5:68:76:8b:65:d6:a4:24:5e:8f:9e:44:
         d1:ab:2a:bb:fb:d9:70:a3:6c:96:97:be:d1:33:c1:b6:58:28:
         7d:36:fc:03:a1:b6:61:bb:e1:0a:c5:de:8e:c2:e9:eb:28:94:
         56:9d:5d:36:91:51:17:3b:ac:10:09:ae:aa:f9:03:4c:09:2e:
         df:39:d9:8f:89:31:f4:ae:39:ad:cd:3c:cd:3d:f4:17:f9:c3:
         96:53:ba:26:3b:13:1d:eb:81:80:4e:51:0d:16:4a:78:f0:ef:
         bf:3a:0e:c4:1f:51:24:05:77:3d:5f:c7:d8:28:c0:cd:cc:3b:
         3d:0c:ce:cd:f5:ac:e4:97:d6:38:69:5e:6c:ee:64:76:cc:61:
         7e:88:18:f5:a1:f8:6c:81:39:42:e3:59:9e:2f:83:63:35:fe:
         ea:4d:e7:59:0e:94:0b:2d:f0:14:a2:fe:85:98:84:1c:63:73:
         14:07:aa:b3:55:9a:8b:59:4b:22:0a:1d:1c:e7:0a:e8:9f:d7:
         a4:68:8e:ef:98:9a:8b:a1:89:fb:8e:19:97:dc:ad:b5:d1:6f:
         8b:7f:22:10:6e:7a:aa:85:14:a0:b2:a7:ca:80:6f:32:30:24:
         45:42:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:03 2024 by rpki-client on console-ams.rpki-client.org