Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File:                     QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier:          wDnlLSatKGFd1LinWDm1yZsOtx73rOOg0erOMwVCu3M=
Subject key identifier:   F0:B5:05:96:D9:F8:71:09:77:CD:25:B8:00:16:78:0E:D0:1D:3B:F0
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer:       /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial:       0190448ADA745724ABCC0FB067A84736F7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number:          0E6C
Signing time:             Sun 23 Jun 2024 10:01:08 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:08 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:08 +0000
Files and hashes:         1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: mIVgtON9rFJ4wch1wapU38rS22p8du8CkCj8igujUKs=)
                          2: ffgd_T-f9GjEIXEHh6tTMjIp2sM.roa (hash: V/jhWP8kVAnD1IlrZOqwM3CsgdPI8gAv7WaqQDopnEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:da:74:57:24:ab:cc:0f:b0:67:a8:47:36:f7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
        Validity
            Not Before: Jun 23 10:01:08 2024 GMT
            Not After : Jun 24 10:01:08 2024 GMT
        Subject: CN=f0b50596d9f8710977cd25b80016780ed01d3bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:0a:ec:cc:af:10:9a:84:3d:60:6e:a1:3e:
                    63:e3:76:bd:76:87:19:ca:24:6d:16:ea:25:1a:3c:
                    e7:8a:1a:23:4b:cb:f6:7b:66:78:7e:ff:e5:f3:a4:
                    3f:9a:3a:4a:c6:51:8c:6f:f0:70:04:5d:5b:cf:a4:
                    e2:05:91:42:03:94:1c:7e:2e:ac:16:0b:74:f8:10:
                    08:d4:88:7e:99:e0:bb:0d:d5:89:0e:8c:86:53:60:
                    18:68:b3:44:16:ef:26:ca:55:89:7c:20:80:0a:28:
                    0b:61:b8:33:ad:8f:79:2b:b0:3f:32:37:98:f2:8f:
                    e0:90:a7:c3:e1:0b:f5:46:91:3e:23:a0:6f:90:06:
                    47:db:41:77:35:66:f1:6a:0d:89:ff:61:c3:e8:b6:
                    71:c4:8a:fa:a2:ee:43:9d:43:9b:77:b8:9d:20:e8:
                    35:cc:6e:b7:71:55:55:31:3a:d8:92:15:98:f2:2c:
                    bc:e9:59:ac:b4:be:94:68:24:2a:b9:98:64:55:7f:
                    87:09:07:a7:3a:97:95:0c:81:81:5a:d5:93:36:fd:
                    be:a8:16:d1:54:3f:d7:d4:1f:66:fc:71:cd:dd:3b:
                    61:6b:3e:af:53:cb:5a:2e:f7:7c:61:e6:87:66:5f:
                    6f:57:a5:dd:43:c7:c5:65:f3:15:15:80:0f:af:94:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B5:05:96:D9:F8:71:09:77:CD:25:B8:00:16:78:0E:D0:1D:3B:F0
            X509v3 Authority Key Identifier:
                keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:de:fa:f5:30:c9:d6:f4:83:8e:aa:73:d6:c0:e7:dc:1e:21:
         13:78:37:05:53:ee:e9:e6:66:f6:42:b2:7b:a1:7e:d4:34:5b:
         46:70:31:78:b5:85:70:b9:a3:40:86:1a:f6:34:16:6b:cd:d9:
         23:f1:49:83:44:47:41:ac:09:50:e1:35:1f:ea:77:89:a7:ec:
         42:bc:b2:dd:d8:fc:ca:7e:08:09:7a:bc:b0:35:e4:f0:40:f2:
         e7:17:5a:30:af:8c:45:b5:77:f2:81:e1:9d:be:c3:79:67:a3:
         30:d2:d3:e5:4e:29:4e:8c:2d:17:87:5f:29:f8:27:63:79:10:
         f3:d2:21:f3:ac:03:e6:9e:f0:80:b7:45:1a:49:87:4e:e2:63:
         8d:09:59:98:7a:64:aa:73:95:df:c3:b3:2e:8c:03:69:0a:9f:
         31:18:2d:80:93:39:61:da:97:3f:0c:f5:9b:09:df:e7:44:96:
         d2:12:9d:1c:dd:1b:d2:1d:a4:3c:c3:ad:da:48:df:90:8c:52:
         61:49:44:ef:59:bc:97:6c:57:ca:e2:41:f5:78:ab:ad:a8:1d:
         b8:c0:1e:2d:9b:83:7a:4e:74:22:16:48:db:f2:d1:8e:a4:8a:
         2f:51:36:6b:75:63:7d:8d:ab:7e:44:64:f9:1a:11:dd:85:0b:
         31:fe:df:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEitp0VySrzA+wZ6hHNvfBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDBmOTE1Yzk1NGQ4M2I0YTFiZjE4NGNmYmMxMzhjNDdl
ZGE1MWUwHhcNMjQwNjIzMTAwMTA4WhcNMjQwNjI0MTAwMTA4WjAzMTEwLwYDVQQD
EyhmMGI1MDU5NmQ5Zjg3MTA5NzdjZDI1YjgwMDE2NzgwZWQwMWQzYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDAK7MyvEJqEPWBuoT5j43a9docZ
yiRtFuolGjznihojS8v2e2Z4fv/l86Q/mjpKxlGMb/BwBF1bz6TiBZFCA5Qcfi6s
Fgt0+BAI1Ih+meC7DdWJDoyGU2AYaLNEFu8mylWJfCCACigLYbgzrY95K7A/MjeY
8o/gkKfD4Qv1RpE+I6BvkAZH20F3NWbxag2J/2HD6LZxxIr6ou5DnUObd7idIOg1
zG63cVVVMTrYkhWY8iy86VmstL6UaCQquZhkVX+HCQenOpeVDIGBWtWTNv2+qBbR
VD/X1B9m/HHN3Tthaz6vU8taLvd8YeaHZl9vV6XdQ8fFZfMVFYAPr5R3OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC1BZbZ+HEJd80luAAWeA7QHTvwMB8GA1UdIwQY
MBaAFEHQ+RXJVNg7ShvxhM+8E4xH7aUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRENUZjbFUyRHRLR19HRXo3d1RqRWZ0cFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82NjYwM2QtM2NiNC00NzMwLWI4OWMt
ZWU1MDBjM2ViODE5LzEvUWRENUZjbFUyRHRLR19HRXo3d1RqRWZ0cFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82NjYwM2QtM2NiNC00NzMwLWI4OWMtZWU1MDBjM2ViODE5
LzEvUWRENUZjbFUyRHRLR19HRXo3d1RqRWZ0cFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXd769TDJ
1vSDjqpz1sDn3B4hE3g3BVPu6eZm9kKye6F+1DRbRnAxeLWFcLmjQIYa9jQWa83Z
I/FJg0RHQawJUOE1H+p3iafsQryy3dj8yn4ICXq8sDXk8EDy5xdaMK+MRbV38oHh
nb7DeWejMNLT5U4pTowtF4dfKfgnY3kQ89Ih86wD5p7wgLdFGkmHTuJjjQlZmHpk
qnOV38OzLowDaQqfMRgtgJM5YdqXPwz1mwnf50SW0hKdHN0b0h2kPMOt2kjfkIxS
YUlE71m8l2xXyuJB9XirragduMAeLZuDek50IhZI2/LRjqSKL1E2a3VjfY2rfkRk
+RoR3YULMf7fkw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:42:21 2024 by rpki-client on console-ams.rpki-client.org