Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File:                     Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier:          vi/JQidTf8xOJ8tdBbbUPevaqdqfZmsAnh10A46Cw3I=
Subject key identifier:   2A:67:ED:AA:0A:87:0E:6B:E4:CC:98:C6:07:DC:F6:1D:53:7F:65:FA
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer:       /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial:       01901D46538D746FF72799B95B0FA7C2B33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number:          078E
Signing time:             Sat 15 Jun 2024 19:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:06 +0000
Files and hashes:         1: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: OZXk/AujGxZ2LZIkivxGniwf1wydLpMp8ONmzwus3RI=)
                          2: picio05LQieYJOr_p2nKdI8qHSs.roa (hash: /ZYussasHipQVZ4aHqCMvJw86eSp+0OXBdXqKgEu1nU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:53:8d:74:6f:f7:27:99:b9:5b:0f:a7:c2:b3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
        Validity
            Not Before: Jun 15 19:01:06 2024 GMT
            Not After : Jun 16 19:01:06 2024 GMT
        Subject: CN=2a67edaa0a870e6be4cc98c607dcf61d537f65fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:6f:cc:f4:c8:60:5d:ed:0f:0f:ce:74:2f:
                    24:dd:58:ef:69:41:b5:a5:15:12:14:21:35:85:ae:
                    32:9c:4c:e5:2a:88:ab:76:85:88:ff:ea:71:cf:2b:
                    f8:2b:a9:b6:ef:6e:27:e1:27:e1:5e:61:cc:31:4c:
                    2d:b1:cb:7d:c9:27:48:ac:bc:e5:ca:c1:8f:13:c3:
                    7c:bd:d2:3f:f1:1b:45:7d:e5:76:2f:ce:0a:a7:c7:
                    ad:7f:d0:48:ed:73:50:23:eb:39:2c:74:a2:2d:cf:
                    66:ad:92:48:30:e7:b7:d3:45:31:6d:b8:b5:9a:f3:
                    f8:e9:1f:93:9f:3c:b1:0c:b3:ea:e2:70:b7:1b:d4:
                    b6:96:29:09:46:ae:9c:e8:93:f9:a1:92:d8:30:94:
                    0a:5d:b7:3d:a9:e8:70:9c:3d:8c:34:18:ab:e1:a2:
                    ae:ab:2b:2e:64:00:9b:1d:0d:e7:cc:17:9d:46:eb:
                    1b:2b:2c:94:80:79:fe:41:69:30:df:d9:32:c1:43:
                    6b:c0:33:50:71:85:36:a2:e2:14:d4:50:fa:32:bb:
                    21:95:6e:3e:98:94:98:0f:dd:d2:4b:2a:40:2a:80:
                    87:c0:fb:d8:05:8c:31:a2:6d:2d:3b:93:55:a3:b4:
                    7c:ac:f3:44:a1:69:f4:c4:95:ce:92:55:48:e3:d0:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:67:ED:AA:0A:87:0E:6B:E4:CC:98:C6:07:DC:F6:1D:53:7F:65:FA
            X509v3 Authority Key Identifier:
                keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:49:ef:7d:d2:92:74:04:bd:da:ad:ea:c5:46:d9:f2:1f:0f:
         92:fa:0b:02:aa:eb:45:b7:1f:76:db:c3:43:75:77:d6:59:62:
         85:06:69:a5:86:e4:ef:00:6e:96:1e:f1:b5:b8:b9:91:bf:0e:
         07:f4:04:62:7c:47:62:5b:c6:00:0f:2e:98:b4:13:85:69:1b:
         d5:1e:5d:2d:43:4c:41:48:ce:63:b9:9d:e2:7f:58:33:f0:ed:
         f9:57:0c:25:34:26:16:60:58:1a:80:1c:43:5a:b8:0d:9e:0d:
         dc:cd:d3:68:71:71:5c:26:29:f6:3e:fc:5a:30:e9:98:de:a7:
         b4:eb:3f:f1:5b:3e:ab:0b:85:4a:9b:8d:a3:ad:43:f9:ae:32:
         65:a1:9f:f2:d3:5d:2d:fd:fc:2d:fc:16:7c:f2:de:64:c8:4b:
         29:57:cf:47:1a:f2:09:2e:a6:05:0c:ec:1d:72:43:c9:61:05:
         bc:a4:53:dd:d0:4a:0c:00:18:0e:b1:fa:ef:8f:f0:4a:4f:5b:
         7d:87:89:e9:32:cc:be:3c:c3:db:3c:ce:45:42:84:cb:14:7c:
         7b:41:72:55:eb:18:ac:ad:1d:7d:1c:5c:1a:1c:c5:39:04:c6:
         a3:47:2e:8d:48:ea:69:3f:d5:36:04:50:b8:f6:a2:d1:c9:34:
         61:97:17:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:54 2024 by rpki-client on console-ams.rpki-client.org