Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
File:                     QnbajwSHyFCAm0qYcoysIXKycD0.mft (raw, json)
Hash identifier:          TjAgszdkxZiz1ydZLyH7xH1r630R5+IKrH35yLGPhQo=
Subject key identifier:   C4:3E:6E:C9:5B:D8:98:7D:44:CD:66:5C:72:CE:0A:4C:F2:02:32:F6
Authority key identifier: 42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
Certificate issuer:       /CN=4276da8f0487c850809b4a98728cac2172b2703d
Certificate serial:       01901DEBCF381BB3023C242B30EB8B669D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:01:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:51 +0000
Files and hashes:         1: QnbajwSHyFCAm0qYcoysIXKycD0.crl (hash: 34idX8W6rKpsJD5fYWIIMZ8kxBOxRE7sRGBscY5NLEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:cf:38:1b:b3:02:3c:24:2b:30:eb:8b:66:9d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4276da8f0487c850809b4a98728cac2172b2703d
        Validity
            Not Before: Jun 15 22:01:51 2024 GMT
            Not After : Jun 16 22:01:51 2024 GMT
        Subject: CN=c43e6ec95bd8987d44cd665c72ce0a4cf20232f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:f6:f7:aa:d3:66:95:bb:e7:2b:1c:f5:93:
                    69:59:ad:98:85:4c:61:96:bc:ae:1a:f5:10:ef:19:
                    14:c7:6b:e6:21:74:24:03:e7:66:a3:48:80:91:10:
                    41:ec:5a:02:0e:22:51:10:5e:35:fb:f5:af:c1:31:
                    d4:1c:f7:15:38:6e:ec:d8:10:b0:e7:fa:57:d0:70:
                    15:6c:25:86:75:06:1e:9e:5e:91:7e:73:3b:c1:d9:
                    48:c9:d6:f6:44:9c:6a:e3:e1:36:3b:35:fb:a5:a3:
                    e5:14:53:9e:9a:a5:f1:4f:95:7e:ef:eb:3f:2d:c7:
                    d5:45:a9:49:82:7e:99:a2:9d:c9:fc:11:a2:9a:af:
                    83:ed:fd:9f:b6:46:b0:60:75:a2:77:3a:32:8a:ff:
                    db:51:25:8d:78:11:4e:53:2a:04:64:19:01:7e:57:
                    de:9d:22:17:df:fb:5f:50:1b:bb:95:6c:8e:a3:a1:
                    21:ae:04:23:97:1e:2a:6f:7c:9e:4e:a6:c2:ee:fb:
                    67:41:4d:67:6a:96:f8:1a:35:b4:71:09:bf:7f:6b:
                    56:e9:55:03:ca:e8:e9:ea:11:64:b9:49:14:82:1b:
                    7c:b1:dd:80:44:7f:82:7f:52:cf:f8:95:11:1f:7a:
                    61:b5:02:67:63:17:93:6c:ef:09:c1:d4:96:7e:ec:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3E:6E:C9:5B:D8:98:7D:44:CD:66:5C:72:CE:0A:4C:F2:02:32:F6
            X509v3 Authority Key Identifier:
                keyid:42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:26:08:08:b9:c1:75:0e:19:c1:41:d1:6a:0a:fc:a0:c8:
         28:9f:2a:7e:cf:02:5b:96:5f:55:24:00:f4:a5:13:4a:de:18:
         d8:0d:e7:69:5c:76:da:6f:c3:e9:dc:55:a2:3f:66:e2:ad:c5:
         f4:63:9a:65:13:54:83:84:f4:b4:f7:2d:1d:78:e4:26:8b:71:
         db:12:7b:b0:19:8f:05:8b:85:fc:2e:a2:89:63:70:cf:fc:3f:
         a2:0f:f0:5c:af:d0:fb:97:55:00:85:ad:c0:18:0f:66:c2:59:
         c7:28:1a:bb:55:e3:ae:3d:29:79:69:74:84:2f:a7:77:73:74:
         4b:50:b6:45:d3:9a:ee:f8:04:7e:88:40:49:b6:05:3a:39:9d:
         3f:a0:bc:c1:ff:21:0f:bb:e7:38:9d:1b:75:91:68:3b:7f:8b:
         c6:bf:8f:da:6c:ee:41:64:a0:58:70:5c:74:ec:c7:f9:af:2d:
         db:82:17:aa:61:e7:40:d3:61:de:6f:20:fd:3a:52:2a:05:37:
         29:4e:1f:bb:96:f0:4c:bc:80:3b:ec:8a:e3:03:71:a6:23:10:
         36:bc:a7:9e:d1:a3:0b:dd:17:7b:a6:36:7d:92:8b:ee:1b:43:
         98:23:97:e1:6a:4a:b5:12:53:ef:e5:9d:2c:2c:ce:a4:ae:4b:
         37:41:62:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:48 2024 by rpki-client on console-ams.rpki-client.org