Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
File:                     QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json)
Hash identifier:          qHg8QXw+/PuNG7BEp1qOMSvDNLtKOZhQPXbW/gcwo5o=
Subject key identifier:   08:3E:AE:8D:1E:42:D8:13:D5:B1:A4:AF:21:64:27:6A:1F:7B:6D:95
Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
Certificate issuer:       /CN=4036a64f1a066babb8beb864e695fa997692dd48
Certificate serial:       01901DEC2B3E9E1681FC9E25B1B4024A94A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
Manifest number:          0C20
Signing time:             Sat 15 Jun 2024 22:02:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:15 +0000
Files and hashes:         1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: LJ1mTEdutZCKiKqRssBI1zNJDiVgia6UwZLvp8Vmxg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:2b:3e:9e:16:81:fc:9e:25:b1:b4:02:4a:94:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48
        Validity
            Not Before: Jun 15 22:02:15 2024 GMT
            Not After : Jun 16 22:02:15 2024 GMT
        Subject: CN=083eae8d1e42d813d5b1a4af2164276a1f7b6d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:96:37:0d:9b:70:61:76:8f:65:f0:bd:cb:
                    9f:9f:cd:57:12:ef:7a:5a:00:72:36:33:7a:94:fd:
                    d2:26:ed:bf:87:31:69:35:56:e7:f7:01:cc:ce:e9:
                    67:9a:6c:bf:fc:de:ed:7b:d5:68:17:94:30:e1:c5:
                    75:46:c3:10:a2:2f:6b:3c:6a:bb:8d:5a:4f:9b:45:
                    5d:52:a8:2a:82:72:bf:f1:07:c2:70:30:a2:69:17:
                    22:a6:f4:37:dc:df:aa:c4:61:99:8e:7b:74:47:34:
                    83:11:42:79:55:22:e0:51:eb:b8:ed:8d:b5:57:55:
                    54:74:de:aa:e1:6c:09:46:31:3f:32:a5:bc:55:9d:
                    27:12:53:d8:44:a7:82:b9:31:af:5d:0a:fc:65:95:
                    41:fc:b6:0c:47:f1:93:89:1f:22:44:23:0b:6c:43:
                    b4:83:0a:39:45:4b:6e:3f:0f:51:28:6d:5d:c8:8a:
                    05:41:65:e1:35:c9:89:46:a7:fe:a2:0f:19:56:a4:
                    e9:39:38:31:d2:52:b1:8e:75:f5:56:04:77:21:16:
                    8c:c4:5d:dc:a4:ac:b5:9f:cc:62:d4:f1:99:73:06:
                    ef:2b:38:2e:3f:f5:72:09:45:19:8c:39:a4:15:37:
                    64:7c:8d:9f:e7:db:c8:aa:dd:f7:f8:27:18:24:ac:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3E:AE:8D:1E:42:D8:13:D5:B1:A4:AF:21:64:27:6A:1F:7B:6D:95
            X509v3 Authority Key Identifier:
                keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:45:b4:ef:56:83:fb:7e:69:a3:fb:2d:80:ec:e5:06:4f:c8:
         57:84:87:93:40:17:2a:94:0c:01:19:5d:66:c7:f6:c7:52:4c:
         c0:1e:62:87:2e:2d:e6:08:03:f1:c9:ab:75:3e:62:86:b3:98:
         a6:88:70:65:1f:70:d3:ed:3a:b2:bc:b0:5f:e5:be:e8:a3:ca:
         5c:11:0e:e9:38:2f:c2:f8:f6:72:9a:9b:9c:14:80:e9:3c:1b:
         f6:d9:67:bf:24:1a:ab:fe:8b:d6:2e:98:e9:7c:16:9b:ee:8b:
         b4:99:94:05:a6:47:0f:98:e3:15:fb:46:7d:5f:a5:21:51:79:
         2e:83:ef:4a:97:d5:8f:ee:d1:d0:ca:8d:d3:d0:1a:80:78:44:
         f1:4e:42:f3:56:39:84:44:45:d6:b7:2c:a6:00:d6:38:56:ba:
         d9:f2:6c:a8:1b:dc:51:1a:db:3f:5a:c9:08:43:0b:92:b7:0c:
         8d:31:b4:35:2e:57:6a:cf:26:0f:35:71:c1:b9:3c:be:89:87:
         3f:59:56:13:59:07:bb:a8:92:cd:eb:71:23:3e:a7:b4:c1:12:
         3f:4f:28:90:6d:eb:19:dd:fe:d4:a6:e6:af:eb:2b:9f:4c:0f:
         c6:40:46:73:ab:e8:7b:83:b0:82:1d:1c:2e:8a:04:10:77:82:
         24:3a:d3:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7Cs+nhaB/J4lsbQCSpSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMzZhNjRmMWEwNjZiYWJiOGJlYjg2NGU2OTVmYTk5NzY5
MmRkNDgwHhcNMjQwNjE1MjIwMjE1WhcNMjQwNjE2MjIwMjE1WjAzMTEwLwYDVQQD
EygwODNlYWU4ZDFlNDJkODEzZDViMWE0YWYyMTY0Mjc2YTFmN2I2ZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaSWNw2bcGF2j2Xwvcufn81XEu96
WgByNjN6lP3SJu2/hzFpNVbn9wHMzulnmmy//N7te9VoF5Qw4cV1RsMQoi9rPGq7
jVpPm0VdUqgqgnK/8QfCcDCiaRcipvQ33N+qxGGZjnt0RzSDEUJ5VSLgUeu47Y21
V1VUdN6q4WwJRjE/MqW8VZ0nElPYRKeCuTGvXQr8ZZVB/LYMR/GTiR8iRCMLbEO0
gwo5RUtuPw9RKG1dyIoFQWXhNcmJRqf+og8ZVqTpOTgx0lKxjnX1VgR3IRaMxF3c
pKy1n8xi1PGZcwbvKzguP/VyCUUZjDmkFTdkfI2f59vIqt33+CcYJKwg8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg+ro0eQtgT1bGkryFkJ2ofe22VMB8GA1UdIwQY
MBaAFEA2pk8aBmuruL64ZOaV+pl2kt1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUURhbVR4b0dhNnU0dnJoazVwWDZtWGFTM1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS81NmQ1MGQtMTdjZi00YmRiLTkyZjYt
MjA0NzIxYmQ1ZjkzLzEvUURhbVR4b0dhNnU0dnJoazVwWDZtWGFTM1VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS81NmQ1MGQtMTdjZi00YmRiLTkyZjYtMjA0NzIxYmQ1Zjkz
LzEvUURhbVR4b0dhNnU0dnJoazVwWDZtWGFTM1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0W071aD
+35po/stgOzlBk/IV4SHk0AXKpQMARldZsf2x1JMwB5ihy4t5ggD8cmrdT5ihrOY
pohwZR9w0+06srywX+W+6KPKXBEO6Tgvwvj2cpqbnBSA6Twb9tlnvyQaq/6L1i6Y
6XwWm+6LtJmUBaZHD5jjFftGfV+lIVF5LoPvSpfVj+7R0MqN09AagHhE8U5C81Y5
hERF1rcspgDWOFa62fJsqBvcURrbP1rJCEMLkrcMjTG0NS5Xas8mDzVxwbk8vomH
P1lWE1kHu6iSzetxIz6ntMESP08okG3rGd3+1Kbmr+srn0wPxkBGc6voe4Owgh0c
LooEEHeCJDrTBg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:17 2024 by rpki-client on console-fra.rpki-client.org