Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File:                     QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier:          RRGcvZDoO3BqAsOIgt8GeKJ4+HZ0CXloL2/OwdwoCwE=
Subject key identifier:   73:36:C2:E1:25:A5:DA:87:88:FA:23:FB:3B:9F:C6:8A:1D:59:4E:AF
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer:       /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial:       01901BFD9986C23EF1104A572EBE00E06E35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number:          05D3
Signing time:             Sat 15 Jun 2024 13:02:03 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:03 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:03 +0000
Files and hashes:         1: G_B6wtJea-fdocZA8cbgqZ-bM0c.roa (hash: 12Jxz6zKM4Gbk8XwzAGVS+7B2fbm1K/F/EIOjCAvTqo=)
                          2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: msg7m1axqX7E9ZGHF/X/rKYOgIHC88KXtI1vs+HUykM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:99:86:c2:3e:f1:10:4a:57:2e:be:00:e0:6e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
        Validity
            Not Before: Jun 15 13:02:03 2024 GMT
            Not After : Jun 16 13:02:03 2024 GMT
        Subject: CN=7336c2e125a5da8788fa23fb3b9fc68a1d594eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:db:f1:7c:d9:bc:e1:08:fa:a2:cf:47:0e:
                    cc:3e:69:35:86:90:db:39:6c:29:1c:43:7f:ff:ba:
                    2b:a9:dc:ee:eb:6c:ed:05:88:38:24:61:7f:72:94:
                    ba:89:7a:d3:54:50:b0:c2:60:94:d8:ad:b9:1f:f2:
                    81:4a:81:85:05:59:7f:3e:f8:bc:f2:50:15:0b:02:
                    70:ca:b3:b5:e1:ee:68:8d:97:0d:3c:65:92:e6:a2:
                    50:74:82:c1:e1:72:de:d9:f2:8d:7f:d0:0a:26:cb:
                    10:88:a1:73:29:20:60:21:97:1d:c2:f5:64:e4:e8:
                    49:cb:07:21:a9:28:f3:82:ad:48:f9:43:5f:aa:b7:
                    8d:5b:ce:61:02:f0:4b:cc:f2:d5:8d:34:8d:bb:34:
                    26:7c:eb:76:50:8d:ed:1d:04:6d:90:1e:e7:1d:d8:
                    73:5c:4b:d0:2e:48:28:0a:98:b3:43:1c:42:1b:2e:
                    56:85:a9:d3:50:02:fe:7d:80:09:79:7f:44:c6:6d:
                    d9:fb:e2:68:36:50:72:e8:03:1d:31:1b:92:9f:81:
                    96:b6:ff:a6:fd:cc:00:09:aa:24:7a:d6:b2:62:17:
                    d0:96:3f:aa:25:c9:7b:64:e5:6b:1d:b1:24:37:63:
                    d8:1f:5e:78:97:0f:a3:8c:10:71:09:d9:b6:d8:04:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:C2:E1:25:A5:DA:87:88:FA:23:FB:3B:9F:C6:8A:1D:59:4E:AF
            X509v3 Authority Key Identifier:
                keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c0:ad:2e:c9:52:f6:a1:b2:86:c6:9d:56:5f:4a:9c:61:54:
         c7:1a:e0:a9:6b:db:a0:f0:13:7d:2d:77:5d:2c:6f:a1:9a:30:
         a0:f4:78:c1:fd:75:b0:70:d8:98:35:79:3e:5b:4b:4d:a8:d2:
         87:7e:6a:fe:a8:74:2d:10:ca:99:9d:70:9e:ae:ee:a4:99:a3:
         ca:c5:03:04:3d:1e:6c:e4:0c:77:7a:66:3c:7b:ce:aa:8a:90:
         c6:eb:ea:70:45:3a:16:11:88:85:e6:9b:9f:89:d0:bd:2e:5f:
         49:ba:ba:e3:20:b2:db:08:3e:51:57:fc:52:3d:7f:e5:3e:29:
         a9:14:5a:76:b3:6e:a3:c8:d6:b4:a2:c0:cd:12:5a:0e:32:6d:
         14:99:94:56:ca:05:7f:15:ec:99:a7:54:c9:6a:60:41:7d:56:
         4d:58:d9:cc:60:1e:f6:5b:f7:2f:e1:67:f1:ea:4a:c8:ce:6b:
         f5:42:fa:38:d9:d3:76:9d:b1:3f:96:2b:b2:ac:27:27:0e:e3:
         be:99:b4:e4:37:e7:b2:ac:40:7f:e0:fa:fd:94:6d:1a:78:88:
         b2:6e:32:80:e3:46:8c:79:9c:5b:a0:78:99:40:62:47:0d:90:
         73:ec:9b:b5:3b:51:ce:bc:44:f3:de:cd:b6:9b:58:a2:99:3d:
         56:e3:e6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:33:52 2024 by rpki-client on console-fra.rpki-client.org