Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File:                     QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier:          WeppJBsoZkJrfoinCdpDWCohz+UnKLDAlbHTfyhfSY4=
Subject key identifier:   4B:14:FC:75:0B:E1:48:70:C8:8F:35:B0:22:47:A4:84:F2:1E:BE:F3
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer:       /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial:       018F8F034FB7C822F56A01A1068F0BD27F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number:          0F04
Signing time:             Sun 19 May 2024 04:01:49 +0000
Manifest this update:     Sun 19 May 2024 04:01:49 +0000
Manifest next update:     Mon 20 May 2024 04:01:49 +0000
Files and hashes:         1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: 6LuTlKexZjTSAeceporC6sm3mQBm21p1O39CWbzJU/4=)
                          2: W3Uer_GZpL9fZZp-b4VtT12e5Ug.roa (hash: pFQsSffsqjaJmwtDo2yh2gDf3vdDMbCRSJOXnq9/XdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:03:4f:b7:c8:22:f5:6a:01:a1:06:8f:0b:d2:7f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
        Validity
            Not Before: May 19 04:01:49 2024 GMT
            Not After : May 20 04:01:49 2024 GMT
        Subject: CN=4b14fc750be14870c88f35b02247a484f21ebef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:64:4c:f9:3e:af:9c:ca:79:c2:87:99:91:
                    fd:8b:df:a9:4d:b3:5c:ed:c6:1a:d6:3c:a0:aa:e1:
                    40:e9:2a:4d:f0:0e:d1:d7:ef:62:7a:5f:16:23:c1:
                    57:df:4a:2e:42:77:11:91:27:b4:74:3d:ba:9b:26:
                    86:0a:20:12:32:9e:a9:fe:66:7c:f8:bb:10:d2:6d:
                    a1:09:7d:1d:49:71:52:99:30:14:9c:90:9e:81:69:
                    2f:a7:30:a8:aa:4c:0f:58:59:99:50:d5:ee:16:73:
                    84:c2:c2:d9:fd:07:8c:de:ac:c2:b0:27:6b:1a:62:
                    64:b0:39:0e:8c:99:61:dd:69:af:08:b5:2b:06:e4:
                    a4:96:a3:f1:5f:87:aa:d1:4e:70:7a:f3:96:55:2c:
                    47:a3:d0:1a:c3:c8:9c:94:fc:a3:d0:7f:45:f8:6d:
                    13:03:86:2a:20:0f:ec:c9:c0:53:82:5c:20:ab:a9:
                    46:28:9b:d4:76:82:07:e2:d2:d8:54:ea:fd:a2:65:
                    3a:63:1b:39:c2:fc:e3:06:9c:43:80:73:35:2c:61:
                    14:4d:55:9f:8d:5a:c3:cd:08:4f:84:c7:ac:fa:bf:
                    44:12:e2:ec:6a:2a:5f:5d:33:53:e1:f9:1c:87:0e:
                    aa:91:ee:03:51:05:c3:cc:61:8d:b8:7a:fc:7b:64:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:14:FC:75:0B:E1:48:70:C8:8F:35:B0:22:47:A4:84:F2:1E:BE:F3
            X509v3 Authority Key Identifier:
                keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:6d:b3:9c:e5:c4:71:2c:53:e1:d5:34:7c:b5:8e:94:c8:
         12:01:c0:50:24:02:29:da:13:23:b6:4a:b0:3e:f3:28:4a:12:
         85:a0:e9:eb:5f:5e:3f:91:23:ce:fc:21:8d:dd:02:fd:1c:45:
         57:63:3c:a3:ce:69:f7:c0:d4:74:97:82:00:63:61:8b:a2:c2:
         05:f6:c7:19:4c:46:15:65:25:12:79:44:2e:21:34:de:cf:7c:
         35:67:3b:9c:ef:26:eb:1b:38:5c:dd:28:50:d4:0d:ff:ee:6c:
         27:cf:60:23:79:0d:42:66:54:ac:98:4b:c5:7c:36:c2:93:53:
         99:fc:d1:54:99:d0:63:4c:97:28:5e:4b:bf:53:ee:a1:c5:3b:
         c8:41:48:34:72:c8:23:b1:4c:61:ac:20:d3:f7:e2:de:a2:e7:
         01:f2:78:33:e3:12:d0:6a:1d:09:f4:f6:8e:5f:bb:e2:54:4f:
         c5:16:86:c3:53:3a:2c:de:22:63:b8:84:1d:01:b9:63:61:5c:
         c2:0b:65:6f:0c:d5:62:4a:e5:a7:14:2c:25:65:5e:d2:fe:98:
         6d:de:b9:c1:3d:ca:82:77:6e:a3:ab:4e:09:47:45:f9:91:4d:
         c2:55:0d:c1:c5:0c:c7:89:ca:90:f6:f3:db:85:28:99:f5:16:
         23:45:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:21:04 2024 by rpki-client on console-ams.rpki-client.org