Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File:                     QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier:          EMEqJ23SZpdma0seIKz8bGdV3K+9y97zrqtZOzvh2A0=
Subject key identifier:   63:71:9B:02:13:16:63:B4:8C:77:F9:7A:C8:C3:8F:76:09:B6:BF:DF
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer:       /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial:       01901DED521211863F177A4C78909494CC3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number:          05B2
Signing time:             Sat 15 Jun 2024 22:03:30 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:30 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:30 +0000
Files and hashes:         1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: ie5LyIcLZYc/QtJEQUgZoHXVqpRkWuko4bp2OSoVJQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:52:12:11:86:3f:17:7a:4c:78:90:94:94:cc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
        Validity
            Not Before: Jun 15 22:03:30 2024 GMT
            Not After : Jun 16 22:03:30 2024 GMT
        Subject: CN=63719b02131663b48c77f97ac8c38f7609b6bfdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:2c:4d:4e:91:42:15:db:18:46:1f:1f:a3:
                    5e:30:ed:02:3d:27:22:33:e1:ca:1d:39:2b:87:92:
                    f2:cd:fb:0d:4a:57:48:c0:f8:6f:24:03:93:78:a5:
                    e2:b0:2a:66:25:dc:a9:9b:e5:3e:19:78:7b:67:f0:
                    99:db:0f:64:79:18:9a:a1:24:0e:92:49:3a:1b:3e:
                    63:08:74:c6:da:e2:d4:93:71:b0:c5:09:2f:2b:34:
                    d2:7f:b8:27:2b:4d:a1:ef:c3:23:6c:89:b5:ba:14:
                    e6:69:07:ea:2f:e3:77:91:e4:97:77:50:80:7b:5e:
                    4f:7e:ba:15:9f:64:2a:c4:7a:b8:df:7d:ee:4c:6b:
                    bb:d3:58:f8:cb:52:ca:e1:ef:f0:4d:2d:40:3d:f8:
                    88:ea:51:5a:de:10:44:e6:07:38:26:88:ef:f5:42:
                    0d:ca:8d:42:0d:4c:7b:8e:44:c6:77:bb:3d:70:cb:
                    b4:4f:dd:b0:14:eb:06:19:27:9a:9f:a0:ed:08:95:
                    45:57:bf:97:53:3a:94:b0:24:4a:cb:4d:76:09:1f:
                    c0:6b:31:1e:51:8c:50:33:aa:1b:0d:51:b1:f6:cd:
                    fa:6d:cd:38:42:ef:ef:3b:69:e6:ed:85:9e:2e:fb:
                    83:80:e7:fd:c1:05:29:29:6f:92:e4:6a:ca:65:e9:
                    8e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:71:9B:02:13:16:63:B4:8C:77:F9:7A:C8:C3:8F:76:09:B6:BF:DF
            X509v3 Authority Key Identifier:
                keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b9:77:c2:cb:c8:a3:07:7a:d8:97:84:ae:84:0d:37:5c:41:
         89:fa:bf:04:93:2a:db:af:e4:1b:19:5b:0c:29:60:c9:4f:45:
         e7:2f:39:0f:87:a6:de:96:dd:f4:c0:4d:e8:7d:3c:21:10:89:
         42:f7:13:08:18:95:78:87:3a:be:f9:de:03:fe:1c:47:51:4b:
         86:28:0b:98:dc:7d:b7:88:9e:74:da:22:29:eb:b5:7a:ec:f0:
         33:09:8c:c9:b2:a8:c9:02:10:77:e1:dd:cd:e9:97:5a:8c:32:
         1d:c3:15:78:7f:f2:05:5e:5c:a3:a8:da:87:06:72:4b:d4:3d:
         ad:0e:df:7f:20:bc:d5:61:a5:29:e3:07:fb:f6:72:d8:a7:23:
         28:04:f3:58:8d:db:25:18:65:63:21:ad:ad:1f:73:0b:48:02:
         e2:51:08:d4:5b:0c:29:9f:ca:a9:ac:51:fc:2e:bd:91:ba:e8:
         53:b2:b9:86:69:97:df:fb:e0:76:b6:ff:01:60:8e:19:26:60:
         16:74:a1:c5:fa:2d:89:45:59:79:ff:fa:de:aa:e5:5d:8e:4d:
         5c:84:98:e1:9b:6a:5a:b7:94:24:26:72:9d:c9:78:1e:67:9e:
         03:3b:66:d9:23:c0:1c:19:e7:f3:47:09:d7:b0:9f:07:0b:ae:
         cd:2e:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----