Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File:                     QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier:          Rng1ITQSwWFBId0xSu8jWTTDS9MCTUt32hTpwcCDZhE=
Subject key identifier:   31:C1:D8:45:41:42:46:C9:88:10:9E:D2:8D:1C:31:D8:8E:B2:41:66
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer:       /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial:       01901E21AEF46929DA971FD1C51190750DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number:          02FD
Signing time:             Sat 15 Jun 2024 23:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:42 +0000
Files and hashes:         1: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: cbFwAcEZ1hTCyEJ5LPx67IZkTZEIMPFSWqBblE1U8Ps=)
                          2: VlTYydzBeSh0HGitwbaqTu9341g.roa (hash: hU9mIPU5QXzdh907gvAXotLBoj4DtVW9uI00X4Ud/sA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:ae:f4:69:29:da:97:1f:d1:c5:11:90:75:0d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
        Validity
            Not Before: Jun 15 23:00:42 2024 GMT
            Not After : Jun 16 23:00:42 2024 GMT
        Subject: CN=31c1d845414246c988109ed28d1c31d88eb24166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:da:45:36:c5:32:66:86:5e:3b:be:20:d4:
                    ba:b0:f2:f6:71:91:97:55:68:f3:50:34:c4:46:07:
                    69:a4:d6:e2:8a:ab:67:9d:87:c2:42:e6:06:8d:d7:
                    eb:94:6c:2d:a4:a9:72:4d:28:51:71:92:61:39:f2:
                    95:7b:d2:e3:d8:74:4b:0f:6b:b2:d2:eb:e1:08:a6:
                    32:3e:cf:c3:f3:84:57:b6:bc:e1:43:3c:92:23:5b:
                    1f:ab:96:fd:d9:eb:9c:31:eb:a4:e0:f5:ca:e0:f7:
                    16:48:38:1f:4b:34:12:1a:e6:ee:f2:ff:f6:c9:98:
                    e5:b8:d6:92:b4:ad:b9:b2:b1:41:01:68:ef:e1:a6:
                    d9:67:46:a0:0c:2c:eb:44:d1:a2:fc:66:8e:b6:11:
                    ad:56:4f:26:f6:ba:0f:f2:de:75:d4:a0:be:48:48:
                    46:e1:ee:8c:3e:bf:28:d5:73:3e:65:0b:2a:a0:0c:
                    06:7e:83:40:4e:8e:7d:d8:ed:f7:1c:1d:47:9f:e1:
                    cd:f0:78:53:71:d9:13:de:1d:df:0c:f1:c4:e7:1c:
                    af:77:11:b8:cd:8c:e9:bf:77:59:89:26:0a:ea:83:
                    7e:99:73:c5:a4:3a:af:84:26:52:be:3d:19:4e:b2:
                    bd:83:96:ec:40:bc:63:48:c9:a8:a8:8f:4b:e6:31:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:D8:45:41:42:46:C9:88:10:9E:D2:8D:1C:31:D8:8E:B2:41:66
            X509v3 Authority Key Identifier:
                keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:32:21:b8:20:e0:0a:ba:fa:12:18:80:ca:44:cb:0e:4d:
         25:ed:ec:7c:ec:cd:c8:62:5f:f4:e4:6b:63:43:c8:41:83:fd:
         fb:8b:0f:6c:32:a7:d0:fc:8c:8c:4f:59:55:06:40:7d:2b:ee:
         90:77:bd:77:23:12:55:24:4d:11:c3:7b:c5:f5:8b:b4:4b:d5:
         8e:65:a6:cb:18:18:51:51:c1:9c:bf:f9:99:1b:2e:4d:07:ec:
         fb:c4:15:1a:bf:87:49:56:eb:35:9e:0d:2a:f0:46:90:86:c0:
         5d:a0:2c:b3:de:ae:91:a4:b7:34:50:59:5d:90:96:9b:bb:39:
         40:92:c0:a2:a2:63:bf:8a:06:ed:db:c5:ec:34:ef:22:16:81:
         9e:f3:12:8e:23:79:99:bc:cd:4f:a1:29:d6:9d:e9:d1:2d:da:
         32:28:a3:b2:81:5c:6e:17:ec:70:70:ab:ed:27:ff:8e:49:1d:
         c7:0e:8e:d7:8c:9f:6a:dc:68:e5:bd:30:c1:d5:37:1b:af:1e:
         f8:62:d4:fe:a2:20:21:13:05:ab:ea:eb:14:98:aa:e2:58:27:
         22:1e:10:e4:2c:3f:fc:b6:5a:f5:4f:a7:73:72:e0:58:b6:cd:
         2f:2b:0d:89:41:8b:37:7a:d9:77:a4:f3:32:cd:14:42:64:e8:
         5a:f6:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:20:08 2024 by rpki-client on console-ams.rpki-client.org