Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
File:                     qfBi_X8yUpX76ehotu_TGma7HbU.mft (raw, json)
Hash identifier:          FG12f4bE6K00gkb+wKRrRK0d1zD9xEipZs9yGcO22rA=
Subject key identifier:   42:33:71:B6:66:CB:96:04:A8:60:86:BC:15:7B:96:FD:91:E3:FC:E5
Authority key identifier: A9:F0:62:FD:7F:32:52:95:FB:E9:E8:68:B6:EF:D3:1A:66:BB:1D:B5
Certificate issuer:       /CN=a9f062fd7f325295fbe9e868b6efd31a66bb1db5
Certificate serial:       01901DEC53CD592F12018388B786504FA676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfBi_X8yUpX76ehotu_TGma7HbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
Manifest number:          0BBA
Signing time:             Sat 15 Jun 2024 22:02:25 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:25 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:25 +0000
Files and hashes:         1: qfBi_X8yUpX76ehotu_TGma7HbU.crl (hash: Xf2XN4QeVZVj+u3hCjaX69zPav4JhkYEUHrQ/FyM3Dc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qfBi_X8yUpX76ehotu_TGma7HbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:53:cd:59:2f:12:01:83:88:b7:86:50:4f:a6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f062fd7f325295fbe9e868b6efd31a66bb1db5
        Validity
            Not Before: Jun 15 22:02:25 2024 GMT
            Not After : Jun 16 22:02:25 2024 GMT
        Subject: CN=423371b666cb9604a86086bc157b96fd91e3fce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:01:db:95:5c:c5:28:20:2e:a6:70:6b:69:
                    b7:6e:3b:d9:1f:fc:e6:60:dd:e4:91:e6:f8:4a:ce:
                    84:75:30:59:5c:ea:b0:f5:85:d5:32:e6:3e:5b:a0:
                    65:bb:75:d1:de:2c:cb:e1:9a:64:08:c4:bf:bc:35:
                    f8:64:fc:89:b9:c1:01:8e:00:99:82:53:e7:1b:c9:
                    89:39:f3:18:f6:76:07:3b:5e:5b:b9:96:85:f7:9d:
                    b4:93:fd:8d:58:6e:a6:6b:e7:10:80:f8:a4:b9:f4:
                    3b:e5:5c:13:8d:80:16:45:a3:94:94:45:24:0c:55:
                    41:ea:08:97:cd:28:d6:70:d6:2a:e1:0a:24:87:fc:
                    78:aa:31:32:10:00:c3:d3:cc:ea:42:e4:11:09:1f:
                    f8:6a:2b:94:d7:86:68:c3:86:18:d0:50:87:02:41:
                    cb:05:93:ba:ed:41:82:8e:c1:58:78:01:d5:3e:6e:
                    a9:5d:f8:4d:e8:f5:ed:fe:95:f2:4d:f7:6d:e7:6d:
                    1f:a1:70:22:b1:1a:59:f5:cc:8b:e7:ab:33:94:4f:
                    3a:17:4a:99:48:eb:6d:9e:78:01:da:c3:31:54:84:
                    73:2b:f3:98:21:7d:d1:7e:1e:e0:ac:ac:a4:d7:92:
                    1d:10:8f:bb:6c:fb:ba:cb:0e:8d:d5:55:33:73:84:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:71:B6:66:CB:96:04:A8:60:86:BC:15:7B:96:FD:91:E3:FC:E5
            X509v3 Authority Key Identifier:
                keyid:A9:F0:62:FD:7F:32:52:95:FB:E9:E8:68:B6:EF:D3:1A:66:BB:1D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfBi_X8yUpX76ehotu_TGma7HbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:11:98:91:5f:66:94:8b:22:a2:6d:1b:87:e7:d3:dd:ea:
         1c:9e:3a:e8:32:6a:95:13:70:45:19:7a:78:cb:a9:a0:72:af:
         ec:49:de:ab:ad:9c:ef:16:a9:cb:82:af:b2:69:05:9a:6f:b2:
         b2:8f:46:25:4f:75:2a:2e:a1:78:ae:e1:34:5c:f4:ab:5c:fd:
         0e:f8:be:6c:b4:79:e8:cf:41:ec:fe:0d:3e:71:92:0e:c3:82:
         49:47:96:22:e4:2e:97:21:7c:22:db:eb:19:f7:12:3b:82:ec:
         a9:55:cc:19:0e:88:29:3d:fc:f1:9b:fb:19:da:05:e9:5b:fe:
         c6:e8:55:89:15:2e:f1:2d:aa:1a:1d:d4:0b:18:d5:e2:17:e7:
         75:98:35:26:61:da:c8:2c:31:bb:6e:c9:6e:96:be:67:a1:15:
         80:12:d1:c8:4f:17:f9:41:c6:77:e5:a8:75:d7:4c:0c:86:03:
         98:a1:92:7e:00:3e:04:f1:6b:c7:dc:62:4e:7a:b4:6f:07:13:
         6d:21:89:c3:d7:26:a2:87:2e:1f:92:55:fd:86:53:c6:a5:94:
         67:9c:87:f7:49:48:f7:d8:5a:d7:43:97:cd:79:e8:38:c4:de:
         da:22:78:86:7a:f3:60:61:46:be:ca:9d:8b:c8:63:56:ef:1e:
         c6:f3:48:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:54:46 2024 by rpki-client on console-fra.rpki-client.org