Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
File:                     qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft (raw, json)
Hash identifier:          OIs87XmtnLLPYbjijaahgtiUDuzkKLf9ECFIhAeFOuY=
Subject key identifier:   4C:2B:98:50:AC:25:42:7C:D1:F4:29:B3:03:AC:66:B3:1D:36:AC:BC
Authority key identifier: AA:7C:64:35:A8:50:F0:C5:E9:9A:9C:E0:51:F3:4B:DB:53:22:2F:04
Certificate issuer:       /CN=aa7c6435a850f0c5e99a9ce051f34bdb53222f04
Certificate serial:       01901FDB030FB7F2DBBBE1401E84AB99DEAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnxkNahQ8MXpmpzgUfNL21MiLwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
Manifest number:          0263
Signing time:             Sun 16 Jun 2024 07:02:45 +0000
Manifest this update:     Sun 16 Jun 2024 07:02:45 +0000
Manifest next update:     Mon 17 Jun 2024 07:02:45 +0000
Files and hashes:         1: qnxkNahQ8MXpmpzgUfNL21MiLwQ.crl (hash: 6UizwTb0GqWzkH7pulpUggzxH0Bnjf0ii0VijNAdCn4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qnxkNahQ8MXpmpzgUfNL21MiLwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:db:03:0f:b7:f2:db:bb:e1:40:1e:84:ab:99:de:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7c6435a850f0c5e99a9ce051f34bdb53222f04
        Validity
            Not Before: Jun 16 07:02:45 2024 GMT
            Not After : Jun 17 07:02:45 2024 GMT
        Subject: CN=4c2b9850ac25427cd1f429b303ac66b31d36acbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:d2:f7:c4:b0:fa:82:d2:51:80:3d:13:2b:
                    1f:24:89:d9:b6:f4:f2:c8:27:92:d7:ff:d8:de:81:
                    1c:68:9e:6e:4a:cc:9e:8e:54:93:f4:da:2f:2e:6c:
                    10:aa:26:51:6c:5f:4c:a1:f3:b6:b5:7c:09:63:de:
                    4b:9f:e9:72:6d:43:f0:fb:d5:ad:f5:6d:f0:87:23:
                    19:a9:c4:87:0f:fe:06:f1:fa:9d:de:af:fa:dd:ae:
                    c3:61:86:28:d4:9d:a9:5d:6f:be:ca:dd:8c:27:37:
                    3d:16:02:19:f4:50:23:0e:cb:17:07:94:a6:49:b7:
                    40:c0:98:24:f6:e9:c9:e1:6c:cf:2f:16:db:d1:38:
                    c7:1f:21:c9:7b:0c:7d:4f:14:38:87:8a:aa:b6:82:
                    cd:16:d3:dc:c2:c2:13:90:bb:aa:fd:05:1e:f5:9e:
                    07:ab:43:5b:6e:a4:70:01:f6:0a:cc:76:fc:3f:20:
                    cc:f7:fd:9a:ab:e7:8b:c8:be:69:a3:9e:d1:54:d3:
                    66:a1:84:65:ce:bf:f5:de:53:19:bc:db:43:ab:7b:
                    3b:45:f7:5c:ce:bf:e3:2f:96:e4:76:97:bd:44:01:
                    c9:08:b3:93:98:85:e4:54:1d:28:30:82:c1:9d:13:
                    9a:af:7a:99:e3:72:49:04:a8:f8:a4:12:ab:eb:11:
                    e1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2B:98:50:AC:25:42:7C:D1:F4:29:B3:03:AC:66:B3:1D:36:AC:BC
            X509v3 Authority Key Identifier:
                keyid:AA:7C:64:35:A8:50:F0:C5:E9:9A:9C:E0:51:F3:4B:DB:53:22:2F:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnxkNahQ8MXpmpzgUfNL21MiLwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:22:96:00:08:2d:8c:85:2e:80:0b:85:99:50:01:f9:c1:
         e6:ce:be:47:02:2e:7a:c3:ad:59:69:56:01:e2:af:d5:86:5b:
         c1:f9:e3:13:00:07:a8:ba:e5:d7:3b:2b:fe:1a:e1:e5:9c:da:
         ae:71:15:d2:60:bf:fc:9a:22:0e:91:e5:3e:10:7b:58:e3:b0:
         8d:90:46:a2:75:f1:fc:37:47:68:27:21:77:f9:b9:99:dc:7d:
         20:3c:3e:e4:84:1c:27:a1:a3:4f:96:b1:20:5d:af:1c:34:ce:
         2b:d1:4c:b7:d4:03:2e:f3:eb:ba:50:9c:19:ca:da:8c:74:09:
         59:66:04:05:bb:05:83:e9:07:bd:d5:d8:10:dd:af:bc:18:5e:
         bd:94:41:bf:25:13:7a:8f:b1:24:32:94:ab:02:5b:61:84:53:
         81:70:1e:56:f1:cb:70:9d:a2:df:7f:37:84:da:4d:88:66:87:
         96:de:0d:74:bb:4f:eb:84:8a:fc:d0:0a:c4:8e:e0:ac:5a:ed:
         6a:93:59:c5:99:e1:d4:87:1f:4a:c7:77:0a:c4:fc:eb:33:9a:
         c7:36:4f:0c:36:86:ee:ac:e3:26:19:e1:f0:8c:92:41:1c:6d:
         c0:cd:9a:29:9d:fb:f1:0b:24:4a:42:37:3e:2a:4f:f0:5f:0a:
         ba:4e:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:56:05 2024 by rpki-client on console-ams.rpki-client.org