Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File:                     QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier:          y3TpD+UikN3eLrsVGpYZpWMyREjBTzR9O7QdstMfdnI=
Subject key identifier:   C1:DF:5C:C9:C7:98:45:C4:C8:79:57:6A:E5:E1:37:68:81:CA:CF:35
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer:       /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial:       01901E5907C0295F78ED1EBD5CCEAF3C7088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number:          0D6B
Signing time:             Sun 16 Jun 2024 00:01:09 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:09 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:09 +0000
Files and hashes:         1: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: tMYaIOwQ3T8lv+orCBqME3j9XzOlLyrQIe7CBlCG2PY=)
                          2: RXHk3atO2mRr6pCxiwqqgXlyQgU.roa (hash: KKaz7TnoNn3C+WRSPhhEKu2mI0zNIxrn8yLpEZ0waWg=)
                          3: qDhIND7RidKRCSjSjL0rFVBO-qk.roa (hash: vC2+1i58Yb7/wTnjk82ttLyMmP6KcnAObkoHEASApng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:07:c0:29:5f:78:ed:1e:bd:5c:ce:af:3c:70:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
        Validity
            Not Before: Jun 16 00:01:09 2024 GMT
            Not After : Jun 17 00:01:09 2024 GMT
        Subject: CN=c1df5cc9c79845c4c879576ae5e1376881cacf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:0a:6f:f0:05:11:eb:a3:a1:99:bd:77:53:
                    30:b2:29:1b:6d:54:f4:27:88:66:3d:30:6d:a6:54:
                    f3:aa:0b:f0:5f:8d:75:23:87:21:fc:6a:04:23:18:
                    36:f8:11:1e:dd:5a:0b:75:0f:2f:23:52:72:1a:ec:
                    b3:77:cf:fa:10:47:4d:e9:8c:54:c2:e1:58:b7:00:
                    44:4a:fc:af:65:53:c0:71:93:bf:3f:1f:70:4d:f8:
                    b7:ab:df:45:30:32:9f:7e:1e:90:1b:65:5e:21:b6:
                    a9:8f:55:d0:bb:0b:c1:a6:b9:07:ea:46:21:5f:28:
                    63:f6:d5:1f:09:16:cb:a5:8c:92:da:33:4c:ea:a9:
                    05:e5:42:67:64:a2:f1:a3:7f:4d:43:84:93:b9:60:
                    4b:e9:de:03:c0:e1:50:02:5a:68:ec:29:a6:41:19:
                    a0:18:bd:3d:61:bf:f6:d1:21:73:c9:5a:56:87:c4:
                    dd:a9:8b:20:73:71:33:b6:78:58:9b:ec:18:a2:af:
                    3d:d6:83:62:7d:9e:af:47:7d:12:84:cc:f5:04:7f:
                    3c:8b:5a:9b:ab:2c:9c:12:60:34:89:b2:20:e0:64:
                    e1:1b:03:75:1c:95:d8:7a:a0:4d:7e:09:55:18:a3:
                    d9:5a:37:1b:f1:93:8f:76:d4:e8:4a:5f:75:e7:5c:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DF:5C:C9:C7:98:45:C4:C8:79:57:6A:E5:E1:37:68:81:CA:CF:35
            X509v3 Authority Key Identifier:
                keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ba:ed:4e:8d:9c:ca:07:bd:97:2a:ab:db:4c:02:f1:46:3b:
         92:3f:60:bf:e4:f7:69:fb:00:51:ad:64:43:9c:e7:24:3b:c5:
         38:61:f8:6e:31:1d:52:1d:ef:f6:a5:26:59:d4:51:c0:98:b2:
         81:79:02:1b:8e:4e:47:d5:e6:69:5d:fd:cc:25:86:da:ad:f2:
         79:8d:f2:c3:2e:69:16:e0:c0:69:8c:07:05:c3:52:7f:f0:77:
         79:00:01:58:50:c2:32:9b:96:28:c8:da:13:e7:69:aa:d0:01:
         1c:ec:41:e0:6b:1a:78:60:90:12:36:71:53:86:1d:6e:6a:0f:
         a1:5b:4a:d4:93:58:b0:5b:37:87:c3:a5:5f:ac:a4:a6:3d:fb:
         dd:87:b0:43:b6:f4:c1:14:01:b3:97:4c:e3:1e:96:f2:36:ae:
         51:61:31:06:68:d4:83:e5:08:e5:0a:d6:11:3a:08:dd:d5:6e:
         c0:67:14:b8:23:55:dd:c4:57:3b:fe:69:33:fd:ce:6b:05:3f:
         7e:0e:18:1b:c4:3d:d6:c9:6c:23:a2:81:ed:55:9d:dd:44:b6:
         be:dd:15:02:f6:d7:33:2c:30:dc:57:37:fb:d9:94:3e:12:73:
         79:b0:6d:37:f3:96:b6:84:a2:7c:f9:33:a2:47:a2:4d:d0:5b:
         58:0e:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:02 2024 by rpki-client on console-ams.rpki-client.org