Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File:                     1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier:          orZIgXFDfBiK5PjzunKwhagsEmv1/+SebjkV6ywtIG4=
Subject key identifier:   66:AF:A0:97:CB:46:8E:9F:B9:A2:0D:44:1F:24:2A:0F:0F:49:7E:AF
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer:       /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial:       01901E8FA64BB018D6841546CFE310222208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number:          05D3
Signing time:             Sun 16 Jun 2024 01:00:49 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:49 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:49 +0000
Files and hashes:         1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: NCbvjy9f8h4Fe7zdgrJET5nYSFTds99geMbFmIrDHmQ=)
                          2: zLVd2KSZFVzGAzCsp4qkjH2ROUg.roa (hash: c8cdmjACfrWc+i/lpPbA+SgfaQW8+wph1RE8gz+vPtY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:a6:4b:b0:18:d6:84:15:46:cf:e3:10:22:22:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
        Validity
            Not Before: Jun 16 01:00:49 2024 GMT
            Not After : Jun 17 01:00:49 2024 GMT
        Subject: CN=66afa097cb468e9fb9a20d441f242a0f0f497eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:19:7f:ef:c6:42:fd:56:ee:c8:20:cb:84:
                    35:ff:f9:26:ca:a1:f2:e1:e5:b5:a1:63:78:46:95:
                    55:dc:c3:41:1e:ab:ae:ff:d1:e2:52:5e:1d:2c:76:
                    b6:1a:57:54:94:da:b3:1c:37:9b:56:88:8a:da:44:
                    0a:c6:07:74:b2:a7:2c:40:8c:e6:28:cd:1a:90:8b:
                    b2:48:4b:47:03:44:fd:dd:33:38:95:c7:70:e1:ef:
                    b5:fb:3c:1e:42:f2:a6:a3:76:e1:f2:b1:ba:fa:26:
                    76:24:b6:db:e9:38:eb:3a:9a:6a:64:78:e8:03:ff:
                    a8:91:5f:00:fe:81:a9:ad:57:26:9d:11:0e:b0:4c:
                    59:74:ac:c3:44:ea:d9:75:d5:fe:bf:cc:72:84:ff:
                    93:95:22:bb:3e:67:0a:1e:23:08:17:4a:b4:ef:f9:
                    6f:ad:27:45:3f:21:d4:24:49:a6:cd:6f:21:87:50:
                    e8:02:97:ec:d6:cf:9a:4b:2a:fe:84:f9:e4:69:5a:
                    21:88:5a:ba:8d:56:71:66:20:6d:c6:3d:3d:f0:9a:
                    a9:2b:5f:b0:b0:23:11:3d:43:4d:7e:29:e0:c1:df:
                    1f:71:3f:0e:8d:9f:64:cb:3b:7c:4e:77:ee:cc:7e:
                    6c:ba:e1:18:ac:2c:d0:0e:be:38:28:56:3f:a1:95:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AF:A0:97:CB:46:8E:9F:B9:A2:0D:44:1F:24:2A:0F:0F:49:7E:AF
            X509v3 Authority Key Identifier:
                keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3d:d6:36:7a:7b:c8:9a:d6:4f:0b:fc:07:89:1c:58:a5:82:
         2a:f9:ac:e4:39:a4:b3:86:20:f7:58:0b:c8:51:4c:b3:4c:f6:
         ed:11:e6:30:e1:08:03:f1:14:e1:fc:23:7d:1a:30:d3:ec:58:
         ea:60:91:19:ba:9f:8b:1a:b6:17:04:3d:1f:19:f4:b6:5a:a6:
         af:e6:74:9d:9a:1c:cf:f9:44:cf:d4:93:8d:50:9c:0f:f0:b6:
         78:d1:03:c7:b4:be:9b:67:95:a7:40:a6:60:11:b9:4b:95:d0:
         8a:05:40:d4:22:8d:d4:85:6f:98:d6:27:29:e6:c0:2c:9a:aa:
         2b:5d:24:57:a4:25:b8:68:ab:84:5f:2c:61:61:75:e4:c9:24:
         33:dc:fb:3c:0c:8e:aa:a6:0c:22:b3:ad:43:bb:bd:ee:6d:00:
         a9:ee:2c:b9:ca:fc:64:05:37:ba:84:fc:de:5c:2a:19:71:0b:
         b7:77:06:81:69:0f:27:2a:de:c6:ac:32:47:66:43:d8:1f:11:
         6c:cd:b6:db:f4:a1:0a:79:26:16:35:25:b4:f0:50:6f:75:d1:
         ac:01:08:bd:ea:98:9d:44:bd:51:c6:ef:83:be:13:dc:17:88:
         cd:2c:5c:75:66:f1:96:3d:82:ef:60:a9:f8:ba:c7:79:f6:b3:
         7e:be:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:18 2024 by rpki-client on console-ams.rpki-client.org