Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File:                     Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier:          F0KinyYWb+nVj3HTscSmJHEx6GhIxRhGBtzLLLGy/5Q=
Subject key identifier:   EC:98:E4:16:47:50:59:70:43:59:86:87:75:B9:18:77:1D:58:69:5C
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer:       /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial:       01901FD9FB1F1B3ED13A1B51D63413FB321A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 07:01:37 +0000
Manifest this update:     Sun 16 Jun 2024 07:01:37 +0000
Manifest next update:     Mon 17 Jun 2024 07:01:37 +0000
Files and hashes:         1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: HXwdemfhHGDNrmdCFD2PudoayIrA5Pl0gZZBfnS6EnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:d9:fb:1f:1b:3e:d1:3a:1b:51:d6:34:13:fb:32:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
        Validity
            Not Before: Jun 16 07:01:37 2024 GMT
            Not After : Jun 17 07:01:37 2024 GMT
        Subject: CN=ec98e416475059704359868775b918771d58695c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:40:7a:5c:de:47:6c:5d:f0:9b:08:3e:6c:
                    3a:46:85:89:02:a9:2d:1c:25:4d:3b:83:6d:d2:42:
                    69:36:f8:2d:5f:64:2f:fb:e6:b5:a3:00:9f:4a:62:
                    ff:43:61:eb:d1:fa:d9:2a:8d:ae:9c:d1:84:e6:17:
                    46:a6:ef:2e:c3:bb:af:b3:33:81:d2:0f:f6:4b:d6:
                    c6:d4:d9:24:20:cd:99:49:2a:e4:b6:9b:01:47:d1:
                    45:a5:a7:e8:ae:54:34:6d:a3:4d:42:70:3c:bf:bd:
                    d0:06:b5:58:61:8f:05:00:9f:e4:a2:68:30:e1:af:
                    66:af:ea:ab:06:c5:54:78:fc:82:6a:e2:ac:0a:07:
                    fa:52:c0:45:bc:22:20:90:65:61:20:1b:03:f1:b9:
                    61:3a:65:47:67:19:e4:1c:6c:56:ec:9b:d5:5e:d1:
                    bd:d0:01:4a:e1:7d:12:b0:cf:36:19:64:54:20:dc:
                    a9:6c:38:f8:1e:f3:03:d1:65:a2:5c:c4:91:98:d3:
                    59:45:d1:88:7c:84:10:bb:ac:23:9b:7e:02:5d:f9:
                    b9:c4:80:2e:cf:9f:ef:ce:17:45:1a:14:e5:eb:85:
                    32:cc:2f:63:5e:cc:5b:7d:6b:20:df:0f:f6:1a:1f:
                    c3:28:4e:ba:f9:ad:5e:15:90:22:e6:f1:62:ea:46:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:98:E4:16:47:50:59:70:43:59:86:87:75:B9:18:77:1D:58:69:5C
            X509v3 Authority Key Identifier:
                keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d5:1b:b5:61:f1:b1:c5:59:1a:5d:f3:24:91:0b:2d:26:7d:
         77:de:08:8f:f9:2d:31:f4:36:6c:77:20:a6:1c:bb:98:83:53:
         c0:58:f8:2d:ae:9d:ad:cb:19:3e:af:fe:12:98:61:83:c1:ba:
         6b:af:60:c9:54:48:8a:f7:55:63:e3:31:13:f6:f5:77:97:d4:
         71:c6:7a:55:96:8a:bf:ca:4c:06:68:5e:1e:fe:f2:84:80:1f:
         ef:45:82:2f:97:96:25:22:5c:5b:ad:1d:fe:bb:94:b3:6d:29:
         59:b6:49:b8:e2:6d:d5:2f:14:71:29:3b:8b:f1:5c:2c:4e:01:
         18:56:10:a2:ae:eb:ef:5f:fe:61:c0:63:42:8f:c3:46:07:15:
         e3:de:ae:76:45:c0:1e:05:70:a4:91:ea:db:e2:f6:34:2f:97:
         c5:43:90:62:72:83:3a:96:0c:e5:18:6b:eb:88:2c:8f:2e:56:
         00:7f:2a:28:26:79:78:71:3f:fc:f1:62:b6:ca:1a:89:03:bc:
         2e:18:d8:66:7c:f2:ae:d8:1e:5c:e5:aa:7b:5d:63:3c:d5:03:
         ca:9e:16:a0:16:5d:2d:d6:c1:4b:69:d2:5f:eb:7c:4f:1f:34:
         0c:fb:93:45:fb:55:a9:ee:31:d2:d2:4a:d4:e5:6e:0f:49:e1:
         12:9d:78:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAf2fsfGz7ROhtR1jQT+zIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNThhZjkzZTQxMzljZjM5ZTliNGE3MGUxNGE1YTliMmE4
ZWI2MWUwHhcNMjQwNjE2MDcwMTM3WhcNMjQwNjE3MDcwMTM3WjAzMTEwLwYDVQQD
EyhlYzk4ZTQxNjQ3NTA1OTcwNDM1OTg2ODc3NWI5MTg3NzFkNTg2OTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbpAelzeR2xd8JsIPmw6RoWJAqkt
HCVNO4Nt0kJpNvgtX2Qv++a1owCfSmL/Q2Hr0frZKo2unNGE5hdGpu8uw7uvszOB
0g/2S9bG1NkkIM2ZSSrktpsBR9FFpaforlQ0baNNQnA8v73QBrVYYY8FAJ/komgw
4a9mr+qrBsVUePyCauKsCgf6UsBFvCIgkGVhIBsD8blhOmVHZxnkHGxW7JvVXtG9
0AFK4X0SsM82GWRUINypbDj4HvMD0WWiXMSRmNNZRdGIfIQQu6wjm34CXfm5xIAu
z5/vzhdFGhTl64UyzC9jXsxbfWsg3w/2Gh/DKE66+a1eFZAi5vFi6ka14QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyY5BZHUFlwQ1mGh3W5GHcdWGlcMB8GA1UdIwQY
MBaAFEJYr5PkE5zznptKcOFKWpsqjrYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81OTJhZGEtOWZiNS00MTExLWI3YWYt
YWUxZjNlNDkwYzY5LzEvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81OTJhZGEtOWZiNS00MTExLWI3YWYtYWUxZjNlNDkwYzY5
LzEvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9UbtWHx
scVZGl3zJJELLSZ9d94Ij/ktMfQ2bHcgphy7mINTwFj4La6drcsZPq/+Ephhg8G6
a69gyVRIivdVY+MxE/b1d5fUccZ6VZaKv8pMBmheHv7yhIAf70WCL5eWJSJcW60d
/ruUs20pWbZJuOJt1S8UcSk7i/FcLE4BGFYQoq7r71/+YcBjQo/DRgcV496udkXA
HgVwpJHq2+L2NC+XxUOQYnKDOpYM5Rhr64gsjy5WAH8qKCZ5eHE//PFitsoaiQO8
LhjYZnzyrtgeXOWqe11jPNUDyp4WoBZdLdbBS2nSX+t8Tx80DPuTRftVqe4x0tJK
1OVuD0nhEp14Wg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 08:01:54 2024 by rpki-client on console-ams.rpki-client.org