Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File:                     qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier:          tTwuO8df9PN7gCaQQckIT45CzpkJY1lZfF0Wl19eKzQ=
Subject key identifier:   50:A0:7D:1B:BA:50:01:43:FD:9A:64:7F:71:DE:E2:D8:2A:D0:25:3E
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer:       /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial:       01901D7CD9CB065A0EE99E0A6B8CB97BB38F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number:          0E1A
Signing time:             Sat 15 Jun 2024 20:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:39 +0000
Files and hashes:         1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: Uggw2zhhPULvf6i10yKRfnqKaFw0T2WkP1Yxa1jZ9bI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:d9:cb:06:5a:0e:e9:9e:0a:6b:8c:b9:7b:b3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
        Validity
            Not Before: Jun 15 20:00:39 2024 GMT
            Not After : Jun 16 20:00:39 2024 GMT
        Subject: CN=50a07d1bba500143fd9a647f71dee2d82ad0253e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:29:e5:f6:e5:49:fe:fc:39:37:74:f0:74:
                    1d:d5:99:5c:11:b1:23:10:83:d2:d1:27:5b:a4:91:
                    83:bc:e5:b5:06:76:35:a8:37:ad:30:8d:f8:5f:94:
                    23:36:8f:2b:f1:42:09:52:7e:75:6d:d1:f2:e6:14:
                    c5:e5:32:95:a3:a7:f4:4c:ad:e6:b6:fb:75:d4:5b:
                    2c:60:c6:a9:26:99:4a:72:08:c5:07:38:b1:00:fd:
                    96:35:cd:7b:c9:8e:fc:a7:61:f3:6a:bc:6b:04:17:
                    f8:bc:72:ea:bd:4d:dc:b1:05:5d:89:4e:1e:dd:9e:
                    bb:f3:e0:f8:1e:8b:f7:cf:53:2a:f0:70:8e:9d:88:
                    dc:52:60:15:13:d1:c6:bd:25:4d:7a:ce:6d:6e:0e:
                    30:80:79:5b:54:57:b5:34:2f:41:d2:db:c4:23:75:
                    01:95:f2:fb:6d:81:cc:88:a6:93:0d:51:f3:d2:65:
                    9b:9e:ea:bb:05:12:ec:8e:86:5b:ed:8b:9d:7d:16:
                    95:3e:05:b9:11:f1:6b:c1:c8:f5:7a:a9:c3:e3:6f:
                    b1:07:0a:ae:68:4f:2e:e8:16:1e:f7:75:28:31:4a:
                    56:0d:60:79:7a:92:85:1a:ad:83:22:b3:14:d7:04:
                    14:7c:d5:52:05:4c:56:f5:8a:c3:b4:9c:33:51:5a:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A0:7D:1B:BA:50:01:43:FD:9A:64:7F:71:DE:E2:D8:2A:D0:25:3E
            X509v3 Authority Key Identifier:
                keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:54:d0:17:c1:c9:ff:2d:04:ae:88:b2:60:65:c4:32:20:
         70:be:e7:b3:16:c8:49:08:42:92:8d:8c:08:dd:32:04:8f:78:
         f5:e7:ae:86:69:ee:0d:c9:42:dd:9b:79:c6:b5:e1:27:4c:19:
         09:be:98:d5:0e:ca:6b:07:b9:78:49:ff:04:d6:f2:4c:6a:19:
         61:17:69:83:30:d8:5a:35:dd:1b:c3:19:b7:67:bf:17:2d:43:
         c1:ee:cd:81:79:4f:0e:ad:b7:ed:cc:9a:de:17:0f:75:09:88:
         88:d3:e5:2d:79:72:92:54:6e:24:57:35:53:9a:dd:19:0f:12:
         c9:d8:7d:57:27:54:e4:24:6a:63:b3:f7:2a:30:5f:26:c4:73:
         92:d7:67:a7:9f:d7:02:3f:44:de:1b:d7:7f:37:e0:7f:d0:72:
         07:c4:5b:e4:07:ae:c8:bb:34:88:6e:fb:90:a6:d7:f4:31:68:
         5f:be:96:a0:c9:2d:c6:6a:f8:5e:be:72:a4:d9:1e:fc:a0:d7:
         9e:ea:f7:ba:30:b0:64:de:c8:cf:9a:89:5b:58:f8:5b:9a:47:
         b3:eb:51:5f:37:be:17:4a:fc:ed:36:fa:0b:d0:90:67:90:d1:
         01:f8:f9:48:c0:47:6d:24:4b:6f:f6:8c:6f:76:4b:f4:2f:d2:
         29:d5:46:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:35:21 2024 by rpki-client on console-fra.rpki-client.org