Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File:                     QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier:          01enAcuWKlShBXRPSzftSN7SPyNMjvgmmeSxs/zZ+i8=
Subject key identifier:   A7:C4:CC:3C:0D:07:6A:CC:0C:EE:DA:C1:5D:B5:62:13:52:66:76:29
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer:       /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial:       01901DEBE20B5EC02A49C66D18BB2A9D2652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number:          0145
Signing time:             Sat 15 Jun 2024 22:01:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:56 +0000
Files and hashes:         1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: qhD/mnpj+CITdBddTVvL3IVWslFb7QoO39dWBumNgxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:e2:0b:5e:c0:2a:49:c6:6d:18:bb:2a:9d:26:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
        Validity
            Not Before: Jun 15 22:01:56 2024 GMT
            Not After : Jun 16 22:01:56 2024 GMT
        Subject: CN=a7c4cc3c0d076acc0ceedac15db5621352667629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:cd:ef:13:08:18:b6:6f:6b:fc:a1:69:37:
                    1e:77:56:88:80:4b:25:eb:bd:77:c3:d4:f1:6c:70:
                    a5:16:b2:32:ae:ce:19:d1:18:05:fb:9a:f8:c9:b0:
                    19:b6:ff:30:05:a2:32:16:3b:3d:d2:48:b6:c6:52:
                    a7:a6:3f:1e:9b:0d:91:b8:37:04:b7:6e:70:00:03:
                    d9:6a:98:01:75:9a:3a:2b:83:7b:6b:d5:11:a6:eb:
                    06:e7:6b:0a:38:ba:3c:85:51:f8:46:d5:98:72:13:
                    88:d9:81:35:b4:26:0b:02:3b:d5:7c:85:b9:10:64:
                    46:fd:1f:e7:d9:df:01:43:d4:40:41:fd:e3:95:8f:
                    6f:31:4e:61:81:5b:e0:44:ec:e4:dd:3e:7b:db:fd:
                    24:49:7f:2d:8a:b8:0e:60:f5:89:76:58:82:80:45:
                    12:e6:a2:53:a6:4b:22:1a:72:81:8a:94:d8:8c:80:
                    37:d0:2a:ea:aa:28:91:04:ab:be:4b:69:af:67:98:
                    63:5f:19:85:c1:1b:29:18:f1:ae:c9:a1:f6:52:fc:
                    bf:4f:02:c5:87:c8:43:66:1d:3b:76:58:23:9a:ec:
                    10:4b:80:a4:dd:3c:53:7d:93:41:94:72:f2:1f:a5:
                    1c:59:2c:7a:66:d4:f1:90:ac:68:bd:39:e4:55:44:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C4:CC:3C:0D:07:6A:CC:0C:EE:DA:C1:5D:B5:62:13:52:66:76:29
            X509v3 Authority Key Identifier:
                keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:70:c1:6e:93:0f:7d:19:4d:49:52:1a:f6:6f:89:c2:4d:
         79:bb:0a:85:6c:37:a3:80:1e:50:cf:cb:13:e0:3b:6a:f2:2c:
         f1:29:af:dc:8c:1a:c7:44:c0:26:b9:99:31:08:7b:b1:d3:b0:
         40:93:bd:db:20:00:c2:88:c2:94:7c:d6:ac:23:dd:e4:75:22:
         3b:e1:66:47:8d:c1:03:74:c8:24:b8:b7:00:5d:7c:40:8b:7a:
         61:98:89:80:f0:d4:de:32:8a:ec:d5:36:92:49:96:63:d2:81:
         89:7d:5a:26:ea:81:df:a9:c4:4c:37:5b:53:06:c1:73:6f:4e:
         99:09:ee:b6:38:e5:ca:64:4a:06:b5:d3:3d:6e:fb:f2:70:45:
         b1:4c:c5:1a:14:c8:3d:87:94:85:0e:32:f9:a9:1d:2d:55:fe:
         b0:9c:6d:96:41:09:6c:06:6e:de:b1:89:17:3e:8e:fe:1b:f5:
         ec:22:2e:0e:d7:5d:e4:44:29:b1:af:2f:8e:41:5d:68:72:9b:
         3b:19:8d:99:23:55:5c:56:3d:98:cc:d3:af:2f:69:0f:3a:8f:
         ca:9f:58:cb:03:b7:3a:c4:2a:e2:75:5f:12:94:8c:03:1a:eb:
         2f:ba:0a:47:b8:9d:00:3a:25:0b:7a:27:e7:6c:9c:3e:b8:d8:
         c6:cb:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:19 2024 by rpki-client on console-fra.rpki-client.org