Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
File:                     QpBWwzjRbJLN_aHlXQk2givFDNI.mft (raw, json)
Hash identifier:          7s3EfbynhmDkShSj2oLmmyNlKuqO/+jVZwlUAnspBBc=
Subject key identifier:   79:E1:CD:91:2B:36:13:62:14:B3:80:21:36:E8:70:74:F8:DD:85:74
Authority key identifier: 42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
Certificate issuer:       /CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Certificate serial:       01906BCEB3287610F17B33D45FA6B0644FC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
Manifest number:          83
Signing time:             Mon 01 Jul 2024 01:00:26 +0000
Manifest this update:     Mon 01 Jul 2024 01:00:26 +0000
Manifest next update:     Tue 02 Jul 2024 01:00:26 +0000
Files and hashes:         1: QpBWwzjRbJLN_aHlXQk2givFDNI.crl (hash: gUZy/ZW1x11CVb9rq0tfOwXdG2sRDiEy8ZgckawV9fA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:ce:b3:28:76:10:f1:7b:33:d4:5f:a6:b0:64:4f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429056c338d16c92cdfda1e55d0936822bc50cd2
        Validity
            Not Before: Jul  1 01:00:26 2024 GMT
            Not After : Jul  2 01:00:26 2024 GMT
        Subject: CN=79e1cd912b36136214b3802136e87074f8dd8574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:0f:67:46:94:7d:a4:9c:e6:84:2c:f3:89:
                    6c:53:88:44:03:c0:e4:ef:e7:eb:37:ed:05:51:f5:
                    12:f4:a4:5c:c9:e8:2e:a9:9b:aa:c5:f8:a2:5b:9b:
                    ec:7f:7d:10:66:bf:6b:c6:7e:1c:9e:24:a0:bf:e0:
                    30:c2:89:26:fa:db:df:37:14:6c:8f:b3:a5:d7:cf:
                    d5:1f:e0:b2:c1:ac:a6:39:22:2c:4e:9b:63:4a:86:
                    68:7d:f4:8a:6d:82:b6:67:f1:01:9d:c1:9b:4c:91:
                    6b:f5:dd:9e:67:6a:36:eb:71:df:22:fd:7b:be:c8:
                    fe:2e:b2:d9:e6:68:3e:ca:9a:94:da:bb:ef:32:4d:
                    10:c0:18:0d:eb:ae:52:a4:55:55:20:36:cc:c2:43:
                    62:84:6c:c3:64:0f:c5:a2:f9:58:bf:98:13:74:88:
                    f2:46:bd:6e:95:d2:6f:c6:87:5e:b9:84:9f:25:81:
                    be:ba:1a:6b:8e:96:d6:c4:07:39:ac:ce:84:62:d5:
                    03:20:31:67:26:ac:59:9a:d6:1e:0f:0d:d1:61:b5:
                    17:67:d0:10:14:8c:fa:82:42:36:ee:d1:a1:01:b4:
                    32:a0:18:46:b1:b7:b5:6f:4c:a1:50:27:c1:57:09:
                    94:c9:8c:a1:b1:3b:ad:2b:5e:1e:69:25:1a:36:9c:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E1:CD:91:2B:36:13:62:14:B3:80:21:36:E8:70:74:F8:DD:85:74
            X509v3 Authority Key Identifier:
                keyid:42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:cc:77:23:02:5c:2d:24:70:37:e2:ef:da:5d:30:88:6b:
         10:3b:b0:3e:b0:12:8b:a7:60:ad:2b:22:c6:7c:01:a6:91:93:
         54:60:47:1e:3f:61:12:08:01:3a:27:b3:30:bb:5f:f6:74:54:
         6d:43:57:57:b2:8f:83:ab:eb:c2:aa:22:05:99:47:f8:d4:29:
         ee:d0:e4:42:ab:ee:75:2d:2c:46:65:3d:72:27:48:8b:e1:e9:
         6f:16:eb:21:d9:27:88:4a:1e:3f:15:13:92:28:2c:0f:a0:34:
         5d:31:ca:85:16:b1:bb:15:c2:1c:7d:e4:ca:6e:ac:ab:4b:fd:
         49:db:53:5d:a2:bd:2b:02:a8:b0:e1:d0:28:ec:69:27:f4:8d:
         0d:a7:a5:c0:e4:85:42:88:6f:4f:a4:df:2b:28:35:e9:29:96:
         53:4c:96:00:da:23:76:be:1c:18:11:0e:b2:ce:f5:ac:70:41:
         48:9d:6e:f6:0b:44:b5:3f:df:c0:27:45:73:9a:20:8a:df:57:
         08:3c:ba:ca:1b:69:19:ee:82:8c:aa:b9:0f:fe:ad:b1:9e:e4:
         88:a1:77:ef:42:03:b0:5d:44:e4:15:36:e8:6e:02:09:ad:86:
         f5:98:a6:8b:97:ba:97:ab:ff:e7:fe:db:75:61:d6:0c:51:e3:
         62:fa:eb:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBrzrModhDxezPUX6awZE/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTA1NmMzMzhkMTZjOTJjZGZkYTFlNTVkMDkzNjgyMmJj
NTBjZDIwHhcNMjQwNzAxMDEwMDI2WhcNMjQwNzAyMDEwMDI2WjAzMTEwLwYDVQQD
Eyg3OWUxY2Q5MTJiMzYxMzYyMTRiMzgwMjEzNmU4NzA3NGY4ZGQ4NTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8cPZ0aUfaSc5oQs84lsU4hEA8Dk
7+frN+0FUfUS9KRcyeguqZuqxfiiW5vsf30QZr9rxn4cniSgv+Awwokm+tvfNxRs
j7Ol18/VH+CywaymOSIsTptjSoZoffSKbYK2Z/EBncGbTJFr9d2eZ2o263HfIv17
vsj+LrLZ5mg+ypqU2rvvMk0QwBgN665SpFVVIDbMwkNihGzDZA/FovlYv5gTdIjy
Rr1uldJvxodeuYSfJYG+uhprjpbWxAc5rM6EYtUDIDFnJqxZmtYeDw3RYbUXZ9AQ
FIz6gkI27tGhAbQyoBhGsbe1b0yhUCfBVwmUyYyhsTutK14eaSUaNpzMwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnhzZErNhNiFLOAITbocHT43YV0MB8GA1UdIwQY
MBaAFEKQVsM40WySzf2h5V0JNoIrxQzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBCV3d6alJiSkxOX2FIbFhRazJnaXZGRE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81MTNiNzctOWUzYi00YTZjLTllZDUt
N2YyMWQ5YmVmYzJjLzEvUXBCV3d6alJiSkxOX2FIbFhRazJnaXZGRE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81MTNiNzctOWUzYi00YTZjLTllZDUtN2YyMWQ5YmVmYzJj
LzEvUXBCV3d6alJiSkxOX2FIbFhRazJnaXZGRE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhz3MdyMC
XC0kcDfi79pdMIhrEDuwPrASi6dgrSsixnwBppGTVGBHHj9hEggBOiezMLtf9nRU
bUNXV7KPg6vrwqoiBZlH+NQp7tDkQqvudS0sRmU9cidIi+HpbxbrIdkniEoePxUT
kigsD6A0XTHKhRaxuxXCHH3kym6sq0v9SdtTXaK9KwKosOHQKOxpJ/SNDaelwOSF
QohvT6TfKyg16SmWU0yWANojdr4cGBEOss71rHBBSJ1u9gtEtT/fwCdFc5ogit9X
CDy6yhtpGe6CjKq5D/6tsZ7kiKF370IDsF1E5BU26G4CCa2G9Zimi5e6l6v/5/7b
dWHWDFHjYvrr6A==
-----END CERTIFICATE-----
Generated at Mon Jul 1 10:35:30 2024 by rpki-client on console-ams.rpki-client.org