Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File:                     Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier:          uH76yS/3+VgnwCt8+dzFEq8wPEEpbHzjnyxvETAb8UU=
Subject key identifier:   18:70:03:A0:D5:D0:AC:70:04:D5:86:0D:61:39:4B:21:B8:57:9A:01
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer:       /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial:       01901DED9DF42EC688F82BBC7985D881D17A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:03:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:49 +0000
Files and hashes:         1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: DZDn60SKHyieEBrz+wB1rPV3bU2wnJ6J8sKto7qnFwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:9d:f4:2e:c6:88:f8:2b:bc:79:85:d8:81:d1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
        Validity
            Not Before: Jun 15 22:03:49 2024 GMT
            Not After : Jun 16 22:03:49 2024 GMT
        Subject: CN=187003a0d5d0ac7004d5860d61394b21b8579a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:68:da:c7:4c:35:2d:eb:01:c9:85:ea:1c:
                    c6:88:d6:f5:ab:a0:6d:f7:52:f1:6d:04:a8:0d:54:
                    37:07:bd:79:ef:05:52:1d:a2:75:8b:d9:85:92:56:
                    3c:ff:8c:f6:8c:81:3c:93:ce:4c:a5:f4:09:d5:bd:
                    34:98:3e:8e:32:6c:c0:e0:2f:92:ed:29:59:f9:57:
                    d1:7e:6a:84:b0:e8:a9:b8:ea:40:e1:a5:5e:a6:d1:
                    35:44:69:17:89:ed:bb:48:cb:b0:51:52:ee:c1:b3:
                    63:60:04:f7:e6:26:01:a2:0e:a0:2b:ad:56:fa:16:
                    5d:8a:2c:07:c0:18:63:da:07:ea:b6:3c:f7:72:23:
                    da:07:95:d2:84:18:9d:13:ef:ea:8e:0e:45:fe:b4:
                    62:db:38:d3:26:51:12:c9:d6:10:7d:1c:9f:37:62:
                    43:8d:fa:dd:97:b2:e5:e7:7e:71:d3:2a:34:dd:23:
                    ae:ce:0b:19:07:57:2c:32:59:cb:f8:4b:f1:0e:4d:
                    de:a9:68:91:77:33:10:4f:a7:57:d4:85:52:8d:8c:
                    fb:c8:f2:3b:5b:3d:7b:db:a7:fb:98:eb:06:d3:1d:
                    bf:58:93:1a:ca:ff:58:7e:3f:14:76:ef:60:18:e2:
                    bc:27:12:4a:9b:94:bf:6c:78:90:aa:e3:90:5d:d8:
                    bf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:70:03:A0:D5:D0:AC:70:04:D5:86:0D:61:39:4B:21:B8:57:9A:01
            X509v3 Authority Key Identifier:
                keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:36:3a:1f:55:18:b3:28:ac:45:41:12:5a:eb:15:f3:0f:7f:
         0b:97:91:25:3b:7a:6e:74:84:d7:06:48:6c:2e:12:4b:e5:8c:
         ac:a5:db:fc:d2:1f:64:d6:60:0a:0a:15:2b:aa:b2:1e:f3:82:
         bd:36:c4:77:d0:3b:5c:e7:19:4a:ba:25:89:75:52:6c:c0:cc:
         c0:43:4a:77:f8:95:43:98:c1:88:38:13:02:18:a1:9c:30:d8:
         01:99:32:75:f8:08:14:76:82:cc:85:1a:ac:24:89:47:ea:e1:
         50:63:40:0a:fe:3f:d8:73:97:e3:ca:e7:ee:2d:53:f0:9f:22:
         cb:78:67:f3:c8:2d:3c:77:ab:49:9b:e8:cd:e5:e5:cf:a9:96:
         c1:fb:68:96:9a:4d:b3:1d:26:37:a5:25:d7:7a:3e:4f:10:bb:
         58:35:c6:6b:17:0e:2b:69:b4:a5:aa:0a:7a:7b:c0:bd:75:f1:
         7c:94:08:47:7e:c1:c7:37:e3:df:5c:e2:28:a4:23:14:03:01:
         6a:71:3f:a8:f2:ff:af:5a:10:5c:ff:11:96:dd:f3:68:42:99:
         7e:d9:39:fb:82:8f:c9:01:5e:30:66:25:b5:0e:0f:05:45:71:
         7e:58:45:54:d9:c9:22:4c:62:8c:16:38:61:2b:c8:00:c7:ba:
         a2:f7:e8:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7Z30LsaI+Cu8eYXYgdF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThmNjI0ZDU3ZjQ2MTNjMGJmNjUxMTYxYzc1NmMzMTY2
NTlhYjkwHhcNMjQwNjE1MjIwMzQ5WhcNMjQwNjE2MjIwMzQ5WjAzMTEwLwYDVQQD
EygxODcwMDNhMGQ1ZDBhYzcwMDRkNTg2MGQ2MTM5NGIyMWI4NTc5YTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx1o2sdMNS3rAcmF6hzGiNb1q6Bt
91LxbQSoDVQ3B7157wVSHaJ1i9mFklY8/4z2jIE8k85MpfQJ1b00mD6OMmzA4C+S
7SlZ+VfRfmqEsOipuOpA4aVeptE1RGkXie27SMuwUVLuwbNjYAT35iYBog6gK61W
+hZdiiwHwBhj2gfqtjz3ciPaB5XShBidE+/qjg5F/rRi2zjTJlESydYQfRyfN2JD
jfrdl7Ll535x0yo03SOuzgsZB1csMlnL+EvxDk3eqWiRdzMQT6dX1IVSjYz7yPI7
Wz1726f7mOsG0x2/WJMayv9Yfj8Udu9gGOK8JxJKm5S/bHiQquOQXdi/WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhwA6DV0KxwBNWGDWE5SyG4V5oBMB8GA1UdIwQY
MBaAFEOY9iTVf0YTwL9lEWHHVsMWZZq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2It
NmE3OWZlZTkxOWViLzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2ItNmE3OWZlZTkxOWVi
LzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTY6H1UY
syisRUESWusV8w9/C5eRJTt6bnSE1wZIbC4SS+WMrKXb/NIfZNZgCgoVK6qyHvOC
vTbEd9A7XOcZSroliXVSbMDMwENKd/iVQ5jBiDgTAhihnDDYAZkydfgIFHaCzIUa
rCSJR+rhUGNACv4/2HOX48rn7i1T8J8iy3hn88gtPHerSZvozeXlz6mWwftolppN
sx0mN6Ul13o+TxC7WDXGaxcOK2m0paoKenvAvXXxfJQIR37Bxzfj31ziKKQjFAMB
anE/qPL/r1oQXP8Rlt3zaEKZftk5+4KPyQFeMGYltQ4PBUVxflhFVNnJIkxijBY4
YSvIAMe6ovfoLw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:55:55 2024 by rpki-client on console-fra.rpki-client.org