Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7fc20e-d80c-4b3e-b412-e3a4878cd631/1/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.mft
File:                     cqmrE6Rgkl6zsjbT9PNnAKuAmAs.mft (raw, json)
Hash identifier:          /Bq9Zm13RDzPsN6fQ/Eiq9ERLpkslZPkOhpoGjlpLeQ=
Subject key identifier:   47:E8:30:5F:97:1C:FD:28:44:E2:F5:52:14:0A:D9:21:68:FC:0B:52
Authority key identifier: 72:A9:AB:13:A4:60:92:5E:B3:B2:36:D3:F4:F3:67:00:AB:80:98:0B
Certificate issuer:       /CN=72a9ab13a460925eb3b236d3f4f36700ab80980b
Certificate serial:       01901DEC86617A20E99B109B9AE378AFB6C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7fc20e-d80c-4b3e-b412-e3a4878cd631/1/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.mft
Manifest number:          0AF7
Signing time:             Sat 15 Jun 2024 22:02:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:38 +0000
Files and hashes:         1: cqmrE6Rgkl6zsjbT9PNnAKuAmAs.crl (hash: mNJFmnQEGvJ3aTqkugHKPzp33CB+oVOSy+c1GulDfjg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7fc20e-d80c-4b3e-b412-e3a4878cd631/1/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7fc20e-d80c-4b3e-b412-e3a4878cd631/1/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:86:61:7a:20:e9:9b:10:9b:9a:e3:78:af:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a9ab13a460925eb3b236d3f4f36700ab80980b
        Validity
            Not Before: Jun 15 22:02:38 2024 GMT
            Not After : Jun 16 22:02:38 2024 GMT
        Subject: CN=47e8305f971cfd2844e2f552140ad92168fc0b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:0b:62:f3:67:22:46:55:e5:ec:e7:66:91:
                    74:b0:a2:5d:58:61:e4:7d:7e:08:9c:36:2b:49:b0:
                    99:a0:12:76:dd:82:9d:e2:12:f1:bb:be:c4:e2:9c:
                    17:a3:9e:1c:09:94:71:75:28:00:f4:ae:48:43:c6:
                    4d:ee:f2:2c:57:92:41:86:22:83:b1:6e:85:2f:6c:
                    69:e9:27:87:11:d8:32:96:a0:98:4e:18:7e:6c:01:
                    18:34:0c:9c:9a:b9:ab:9f:44:c8:d1:36:63:03:73:
                    dd:fd:13:aa:57:ae:5b:a8:30:3a:2f:c4:e0:fc:cc:
                    76:09:51:cd:6e:fc:79:3d:be:cd:93:85:5f:46:70:
                    97:61:e5:07:5a:68:7a:50:68:61:52:50:15:1f:86:
                    c6:a9:dd:43:3e:83:77:b0:18:a1:0d:fc:b6:67:50:
                    05:f1:77:b8:b5:15:2c:5e:67:91:45:30:34:f1:78:
                    c0:9d:9c:5a:08:3b:7f:35:1c:48:58:fa:e2:62:2a:
                    e7:47:f7:c4:5e:d0:3a:23:04:17:a1:9c:b0:b7:21:
                    4f:41:d1:d6:d1:43:da:ad:a8:a4:8f:72:2d:10:00:
                    a1:a0:42:0f:82:1f:75:e3:d6:85:d5:f6:56:e7:aa:
                    36:bd:c9:62:68:fc:f8:8e:ee:3e:49:fc:bf:87:34:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E8:30:5F:97:1C:FD:28:44:E2:F5:52:14:0A:D9:21:68:FC:0B:52
            X509v3 Authority Key Identifier:
                keyid:72:A9:AB:13:A4:60:92:5E:B3:B2:36:D3:F4:F3:67:00:AB:80:98:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7fc20e-d80c-4b3e-b412-e3a4878cd631/1/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7fc20e-d80c-4b3e-b412-e3a4878cd631/1/cqmrE6Rgkl6zsjbT9PNnAKuAmAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:74:68:46:20:d5:1f:40:dd:72:9f:38:1e:67:ac:ee:3e:
         8e:81:5d:bd:cb:59:8b:21:e1:26:ef:24:56:74:e9:14:e3:37:
         bb:01:e3:22:a4:8b:ac:cf:b5:b4:7c:fa:37:b0:48:f5:d7:bb:
         91:f3:17:38:df:54:35:3a:b9:f7:61:ca:e2:b3:30:c9:b4:05:
         ac:2e:15:13:fd:d7:71:2e:f7:de:c6:7b:7a:0e:71:d2:56:83:
         fe:7f:a2:f7:e1:f6:c3:9c:80:7f:1d:40:4f:c5:6b:5f:43:f5:
         ba:3f:12:f5:df:66:25:fe:8f:6a:4e:a8:2f:73:33:47:33:b6:
         28:f5:7f:26:52:f3:a3:4e:48:9e:79:cf:e8:cb:96:f6:0d:66:
         98:6e:02:91:b2:05:9d:14:e5:39:2c:e0:06:68:00:5b:9a:ea:
         fe:87:65:03:5d:bb:6d:ad:e3:72:6e:82:dd:5c:f2:4f:59:26:
         fb:f6:66:5f:f7:f1:7c:8a:77:d9:bc:e2:22:14:51:83:7f:e0:
         91:02:bf:a0:12:6d:2f:19:b1:a8:b2:3a:18:d0:ea:f0:2f:23:
         03:6e:2b:de:b3:4c:cc:40:3e:7a:43:3d:98:b1:bc:14:0f:8d:
         5d:7a:f0:fd:a3:4b:d9:82:f7:78:29:b1:ea:77:74:db:15:0d:
         94:dc:22:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7IZheiDpmxCbmuN4r7bAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYTlhYjEzYTQ2MDkyNWViM2IyMzZkM2Y0ZjM2NzAwYWI4
MDk4MGIwHhcNMjQwNjE1MjIwMjM4WhcNMjQwNjE2MjIwMjM4WjAzMTEwLwYDVQQD
Eyg0N2U4MzA1Zjk3MWNmZDI4NDRlMmY1NTIxNDBhZDkyMTY4ZmMwYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV4LYvNnIkZV5eznZpF0sKJdWGHk
fX4InDYrSbCZoBJ23YKd4hLxu77E4pwXo54cCZRxdSgA9K5IQ8ZN7vIsV5JBhiKD
sW6FL2xp6SeHEdgylqCYThh+bAEYNAycmrmrn0TI0TZjA3Pd/ROqV65bqDA6L8Tg
/Mx2CVHNbvx5Pb7Nk4VfRnCXYeUHWmh6UGhhUlAVH4bGqd1DPoN3sBihDfy2Z1AF
8Xe4tRUsXmeRRTA08XjAnZxaCDt/NRxIWPriYirnR/fEXtA6IwQXoZywtyFPQdHW
0UParaikj3ItEAChoEIPgh9149aF1fZW56o2vcliaPz4ju4+Sfy/hzQjwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfoMF+XHP0oROL1UhQK2SFo/AtSMB8GA1UdIwQY
MBaAFHKpqxOkYJJes7I20/TzZwCrgJgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FtckU2UmdrbDZ6c2piVDlQTm5BS3VBbUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83ZmMyMGUtZDgwYy00YjNlLWI0MTIt
ZTNhNDg3OGNkNjMxLzEvY3FtckU2UmdrbDZ6c2piVDlQTm5BS3VBbUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83ZmMyMGUtZDgwYy00YjNlLWI0MTItZTNhNDg3OGNkNjMx
LzEvY3FtckU2UmdrbDZ6c2piVDlQTm5BS3VBbUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqd0aEYg
1R9A3XKfOB5nrO4+joFdvctZiyHhJu8kVnTpFOM3uwHjIqSLrM+1tHz6N7BI9de7
kfMXON9UNTq592HK4rMwybQFrC4VE/3XcS733sZ7eg5x0laD/n+i9+H2w5yAfx1A
T8VrX0P1uj8S9d9mJf6Pak6oL3MzRzO2KPV/JlLzo05InnnP6MuW9g1mmG4CkbIF
nRTlOSzgBmgAW5rq/odlA127ba3jcm6C3VzyT1km+/ZmX/fxfIp32bziIhRRg3/g
kQK/oBJtLxmxqLI6GNDq8C8jA24r3rNMzEA+ekM9mLG8FA+NXXrw/aNL2YL3eCmx
6nd02xUNlNwihQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:49:43 2024 by rpki-client on console-fra.rpki-client.org