Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File:                     QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier:          ssm7bRm3GPG5eJ9Mm2x4Lb8uFo0dEg5jTkKXx9iX/+E=
Subject key identifier:   1D:CE:57:80:3D:83:9B:6D:31:00:AF:D9:C4:14:79:34:B2:76:37:BC
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer:       /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial:       01901DEBBE74DC7398016DFED238CAAD96D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:01:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:47 +0000
Files and hashes:         1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: gVmEuVnBooYTg7ec6AdAPQkq+ceI/Ms/2M/8EPN3f9M=)
                          2: bA1dKLnbWGcVINOsR2T4l0XKSQc.roa (hash: YPCRmb5CEm5v8fKi8nCJxCVoTB/3UVgocMDnCvit0Ho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:be:74:dc:73:98:01:6d:fe:d2:38:ca:ad:96:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
        Validity
            Not Before: Jun 15 22:01:47 2024 GMT
            Not After : Jun 16 22:01:47 2024 GMT
        Subject: CN=1dce57803d839b6d3100afd9c4147934b27637bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4f:ab:c0:53:89:0e:a8:6c:0f:7e:d6:3e:b3:
                    c3:be:0a:fe:d4:70:a9:77:42:40:6a:03:89:1c:26:
                    fd:e4:a2:43:55:92:81:a9:91:d1:0e:0c:8d:47:57:
                    76:24:5d:c6:61:22:05:78:26:b0:a6:0b:25:34:91:
                    67:e7:fa:4c:65:01:9f:82:47:32:68:48:b1:71:a5:
                    06:fd:71:d9:07:c2:e1:78:a9:b1:f5:de:72:7f:29:
                    64:f8:4c:4f:c6:7d:e0:7a:dd:86:b0:58:80:da:9b:
                    9c:ab:41:2e:96:49:1f:01:40:09:49:3b:dd:eb:24:
                    09:a5:40:11:a7:c2:29:93:62:a9:95:db:18:2c:c1:
                    58:8c:fa:29:ed:40:66:07:be:73:b6:18:45:90:fe:
                    35:65:aa:c8:42:39:1a:8a:b6:70:11:a1:66:c8:41:
                    5b:93:25:34:fb:48:d2:1c:8d:73:e7:2c:4e:82:39:
                    31:6a:b5:23:e1:d5:66:06:f4:1c:9e:59:5a:47:4e:
                    b2:2b:c0:47:f6:8f:11:8c:e6:25:69:23:16:c9:4d:
                    36:ba:c6:ab:22:cd:fd:bf:01:47:e4:6e:7e:6e:ad:
                    20:c4:8c:24:f3:91:e6:55:18:a3:1d:0b:a3:1d:a0:
                    17:aa:80:fb:89:af:f6:4a:43:b8:8a:bc:7d:2e:69:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CE:57:80:3D:83:9B:6D:31:00:AF:D9:C4:14:79:34:B2:76:37:BC
            X509v3 Authority Key Identifier:
                keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:32:30:a4:83:19:28:70:83:2d:eb:6c:16:9d:45:61:dc:
         e2:a8:7b:14:2c:78:c9:45:c8:ca:7e:80:67:5f:1c:02:93:ae:
         09:56:26:52:78:23:77:7f:a1:04:d3:3b:96:dc:e7:3c:b9:29:
         e6:e3:8d:8b:f8:b5:26:e3:06:65:90:d0:1c:36:7d:aa:bd:31:
         1a:b0:e6:11:7a:2d:03:d8:83:86:52:d0:67:88:5a:2c:11:a1:
         05:f9:e6:a2:55:1f:db:1d:b5:a3:d2:ba:de:99:3f:12:74:57:
         95:a8:60:63:2f:ea:33:fa:79:c2:8e:12:78:01:e0:79:a2:2e:
         70:6b:ee:3f:ff:e5:58:9b:9a:49:45:16:aa:15:f1:bc:f2:2a:
         db:58:a1:29:81:ee:eb:1c:df:9f:ad:1c:d6:12:55:27:5b:60:
         9f:b8:e4:c1:71:fb:4f:56:37:8a:8f:2c:09:9e:6a:e7:a5:36:
         36:00:f8:ed:cc:09:cd:f8:39:5f:dc:c9:1e:4f:8a:6c:63:1f:
         ec:a9:04:04:0c:95:4e:56:30:66:0c:78:7a:bb:75:0b:5c:2d:
         4b:fd:b0:c0:2c:d4:06:0e:04:18:10:f4:ea:9f:c2:f0:d5:6b:
         d2:86:65:49:44:39:ce:8c:1a:cc:13:ff:c9:f5:70:77:e3:40:
         1d:59:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:02:50 2024 by rpki-client on console-ams.rpki-client.org