Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/69e65d-2d5f-4a26-9711-00a20675fe52/1/Qdb8quhRR7C2Qb-svssXVkTojBg.mft
File:                     Qdb8quhRR7C2Qb-svssXVkTojBg.mft (raw, json)
Hash identifier:          PGhnOQKd+p5eUel4b5iErn4I9VSYVt05BuPXJ8V5zEY=
Subject key identifier:   9A:D2:0B:36:62:F4:10:5B:FB:2B:71:5C:4D:C9:C0:53:61:A0:1A:E5
Authority key identifier: 41:D6:FC:AA:E8:51:47:B0:B6:41:BF:AC:BE:CB:17:56:44:E8:8C:18
Certificate issuer:       /CN=41d6fcaae85147b0b641bfacbecb175644e88c18
Certificate serial:       01901BFEB97D03E3F18DF0B1D9603A7D313C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qdb8quhRR7C2Qb-svssXVkTojBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/69e65d-2d5f-4a26-9711-00a20675fe52/1/Qdb8quhRR7C2Qb-svssXVkTojBg.mft
Manifest number:          03E9
Signing time:             Sat 15 Jun 2024 13:03:16 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:16 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:16 +0000
Files and hashes:         1: Qdb8quhRR7C2Qb-svssXVkTojBg.crl (hash: mBJLzQbvuhyHK6BcmXR0AriVYLwcuAJ/vTPgRr+jO1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/69e65d-2d5f-4a26-9711-00a20675fe52/1/Qdb8quhRR7C2Qb-svssXVkTojBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/69e65d-2d5f-4a26-9711-00a20675fe52/1/Qdb8quhRR7C2Qb-svssXVkTojBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qdb8quhRR7C2Qb-svssXVkTojBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:b9:7d:03:e3:f1:8d:f0:b1:d9:60:3a:7d:31:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d6fcaae85147b0b641bfacbecb175644e88c18
        Validity
            Not Before: Jun 15 13:03:16 2024 GMT
            Not After : Jun 16 13:03:16 2024 GMT
        Subject: CN=9ad20b3662f4105bfb2b715c4dc9c05361a01ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:d5:93:12:6d:66:13:dd:4a:1e:7e:d4:84:
                    8d:fd:ea:d1:27:dc:9b:bc:71:8b:f5:8c:70:69:93:
                    92:27:4b:ba:b1:b5:74:bd:87:04:60:41:b3:37:21:
                    2e:a2:20:75:0b:2d:74:88:2c:39:9e:8f:98:9b:40:
                    b7:54:4d:87:dd:95:32:98:36:f1:23:e8:74:75:68:
                    79:60:47:47:12:48:4e:58:33:e8:38:0f:d0:d6:60:
                    07:10:1f:54:3a:aa:d2:1b:1f:42:30:b2:50:48:5c:
                    74:9d:39:96:32:fc:f4:d1:18:a7:08:cc:28:55:6e:
                    3b:23:84:e4:38:f8:d0:78:f2:c5:bf:72:05:8e:5e:
                    b7:e1:9b:c4:37:b1:7c:06:c7:f0:af:eb:bd:50:b0:
                    7f:92:cc:8d:e8:6b:58:02:dd:eb:aa:38:de:6c:ce:
                    66:27:d7:fb:ab:fb:5b:1e:9b:1f:0e:20:71:ef:fb:
                    40:79:71:b6:fa:39:e4:84:e2:df:0d:6b:aa:5a:b2:
                    07:5a:17:a4:03:30:b3:f9:b5:87:d7:77:31:a3:0e:
                    d9:8d:ea:16:5f:9e:1e:b0:91:d7:00:80:15:8d:28:
                    0e:5d:e2:e0:c0:8f:c8:45:14:f2:d0:10:77:bd:ec:
                    ed:77:17:de:9c:8c:9b:03:53:64:75:60:6b:bc:2a:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D2:0B:36:62:F4:10:5B:FB:2B:71:5C:4D:C9:C0:53:61:A0:1A:E5
            X509v3 Authority Key Identifier:
                keyid:41:D6:FC:AA:E8:51:47:B0:B6:41:BF:AC:BE:CB:17:56:44:E8:8C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qdb8quhRR7C2Qb-svssXVkTojBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/69e65d-2d5f-4a26-9711-00a20675fe52/1/Qdb8quhRR7C2Qb-svssXVkTojBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/69e65d-2d5f-4a26-9711-00a20675fe52/1/Qdb8quhRR7C2Qb-svssXVkTojBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f9:a2:2f:71:09:d6:a3:ec:3d:2c:f0:5b:99:b1:8b:1c:3a:
         d9:5a:51:67:50:e9:b2:14:dd:d8:a5:7f:c1:c0:3e:0e:53:16:
         09:b5:01:99:e2:5f:97:54:dd:96:21:71:bb:2f:8b:22:79:ad:
         22:75:b0:a9:33:62:b8:4b:06:25:37:5e:cb:4d:57:de:0b:c0:
         5f:bb:cd:b4:b9:7f:af:be:fa:da:70:d1:0a:c8:1a:6a:5f:a1:
         57:b2:06:56:b9:e1:c7:38:c5:c1:eb:68:73:e4:d5:45:63:f1:
         ca:0a:31:cf:5a:28:2f:e9:5b:4d:8a:67:9b:87:04:eb:2f:46:
         0a:f4:bb:bf:d2:78:a3:12:3c:f3:37:e8:d9:3a:00:ec:9e:75:
         09:58:ec:16:03:dd:a6:8e:dd:7b:15:b7:9d:fe:e3:94:27:a4:
         f9:ae:7c:f5:6e:3b:8a:2e:03:49:06:6f:11:65:d4:c6:4e:c2:
         7d:ec:24:6b:dc:3b:40:18:5c:f0:4a:92:60:48:26:a2:79:2b:
         b7:4f:a3:74:29:03:fd:46:5a:fd:c3:be:e0:be:5a:4e:ea:d4:
         1d:72:83:a9:f7:06:24:cc:ac:a4:ac:bd:a2:db:07:4f:bf:f5:
         a6:38:6d:67:cb:34:66:65:14:29:40:a1:01:ff:1c:08:22:91:
         5e:38:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:55:35 2024 by rpki-client on console-ams.rpki-client.org