Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File:                     Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier:          u+tcpYXQ7jmnXqSfAGra4qUWjt5SxlRTrkat3btmQkg=
Subject key identifier:   3D:76:28:8B:7E:68:11:F2:0C:BF:7F:A4:24:58:F9:B6:7F:56:03:7A
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer:       /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial:       019040AE14573C941406FFA16E3867CED77E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 16:01:08 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:08 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:08 +0000
Files and hashes:         1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: uR9iRrJmPIhuFlOFGrjRnSH8EFejXXcnwKLNdcM3Tv0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:14:57:3c:94:14:06:ff:a1:6e:38:67:ce:d7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
        Validity
            Not Before: Jun 22 16:01:08 2024 GMT
            Not After : Jun 23 16:01:08 2024 GMT
        Subject: CN=3d76288b7e6811f20cbf7fa42458f9b67f56037a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b5:a4:c1:1c:ab:e3:5b:45:df:53:d2:d3:b9:
                    83:81:75:8e:9a:58:f5:b8:2b:79:fd:68:69:d8:38:
                    31:b6:5f:ea:e4:1f:30:d0:f2:e9:1d:29:7d:a1:dd:
                    12:11:3e:94:8c:a5:03:7e:e3:9e:86:b4:e7:84:0d:
                    36:14:37:40:a1:b1:a9:25:4f:9e:97:00:c9:6f:ac:
                    c1:29:11:95:af:45:e9:3f:c3:b5:6f:7d:73:47:1e:
                    5b:ba:c9:83:4f:bf:73:66:5b:e8:2c:78:53:bb:61:
                    44:3f:de:5f:d7:95:62:c2:8e:ae:d7:dc:73:75:d0:
                    35:e6:7e:04:05:11:0c:52:4e:91:12:e7:30:17:df:
                    54:91:99:99:e8:e6:66:1f:64:cd:1c:c0:74:fd:70:
                    c9:72:d3:cf:0a:43:40:a9:fe:02:6c:db:e0:f0:e4:
                    b9:36:c7:df:16:96:06:f9:96:75:61:77:b0:5f:1f:
                    d2:cc:15:ce:6c:c0:e2:06:cd:9d:e3:4d:de:a5:cf:
                    97:16:48:88:0d:e0:6d:49:f3:88:64:b9:40:de:3b:
                    f9:8b:6d:08:a2:26:e7:28:39:9f:58:8c:a9:a6:16:
                    15:54:ed:a0:98:68:a8:16:fb:24:8e:63:59:76:88:
                    25:97:77:0e:ac:1a:42:a9:08:52:87:d0:6e:0b:a1:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:76:28:8B:7E:68:11:F2:0C:BF:7F:A4:24:58:F9:B6:7F:56:03:7A
            X509v3 Authority Key Identifier:
                keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b4:7e:6d:6d:d5:78:28:b1:cc:d0:01:ec:d5:e1:01:68:e3:
         82:f8:76:0c:44:14:8d:29:1b:ec:c2:ad:72:91:3e:13:2a:65:
         5b:88:d9:fe:91:7a:91:ca:5e:d3:e4:2c:53:f9:a8:40:1f:05:
         17:9f:43:3f:0c:7d:c1:cb:d5:7a:fa:e3:9a:5d:46:1e:2a:27:
         59:33:eb:c3:9e:c8:04:6e:99:03:06:3c:4a:53:77:15:53:9e:
         68:bd:27:87:73:73:80:37:de:0e:42:63:ae:14:40:92:15:ec:
         b2:66:fc:5f:10:c7:66:00:92:63:ad:80:4d:fe:2a:32:d1:e3:
         95:fc:e5:ac:26:04:54:68:03:f0:05:db:ee:2f:5e:02:cd:d5:
         d9:18:08:66:fe:85:5a:06:14:c6:cd:9c:e9:3f:2a:6f:57:73:
         52:45:8d:d3:96:2c:9e:51:ab:5d:e4:41:e7:c7:a0:11:29:d4:
         27:d2:1d:fe:3c:1d:3d:02:73:f2:f5:3f:54:51:49:5a:98:29:
         8f:5e:21:1b:cc:f7:ff:97:51:b7:49:89:91:6c:01:10:80:3f:
         ec:15:57:0c:6f:01:42:b9:8f:a7:72:1a:75:fa:03:fe:cb:ea:
         ec:cf:cb:69:41:45:fa:7c:57:73:6f:3f:c3:04:f8:89:f5:4b:
         dc:c9:82:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBArhRXPJQUBv+hbjhnztd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThmNjI0ZDU3ZjQ2MTNjMGJmNjUxMTYxYzc1NmMzMTY2
NTlhYjkwHhcNMjQwNjIyMTYwMTA4WhcNMjQwNjIzMTYwMTA4WjAzMTEwLwYDVQQD
EygzZDc2Mjg4YjdlNjgxMWYyMGNiZjdmYTQyNDU4ZjliNjdmNTYwMzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LWkwRyr41tF31PS07mDgXWOmlj1
uCt5/Whp2Dgxtl/q5B8w0PLpHSl9od0SET6UjKUDfuOehrTnhA02FDdAobGpJU+e
lwDJb6zBKRGVr0XpP8O1b31zRx5busmDT79zZlvoLHhTu2FEP95f15Viwo6u19xz
ddA15n4EBREMUk6REucwF99UkZmZ6OZmH2TNHMB0/XDJctPPCkNAqf4CbNvg8OS5
NsffFpYG+ZZ1YXewXx/SzBXObMDiBs2d403epc+XFkiIDeBtSfOIZLlA3jv5i20I
oibnKDmfWIypphYVVO2gmGioFvskjmNZdogll3cOrBpCqQhSh9BuC6EOeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD12KIt+aBHyDL9/pCRY+bZ/VgN6MB8GA1UdIwQY
MBaAFEOY9iTVf0YTwL9lEWHHVsMWZZq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2It
NmE3OWZlZTkxOWViLzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2ItNmE3OWZlZTkxOWVi
LzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrR+bW3V
eCixzNAB7NXhAWjjgvh2DEQUjSkb7MKtcpE+EyplW4jZ/pF6kcpe0+QsU/moQB8F
F59DPwx9wcvVevrjml1GHionWTPrw57IBG6ZAwY8SlN3FVOeaL0nh3NzgDfeDkJj
rhRAkhXssmb8XxDHZgCSY62ATf4qMtHjlfzlrCYEVGgD8AXb7i9eAs3V2RgIZv6F
WgYUxs2c6T8qb1dzUkWN05YsnlGrXeRB58egESnUJ9Id/jwdPQJz8vU/VFFJWpgp
j14hG8z3/5dRt0mJkWwBEIA/7BVXDG8BQrmPp3IadfoD/svq7M/LaUFF+nxXc28/
wwT4ifVL3MmCYw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:44:42 2024 by rpki-client on console-ams.rpki-client.org