Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
File:                     QyExQaqTrYz4wmg3eFx4RUzbgYA.mft (raw, json)
Hash identifier:          LGZHi3BYJrxFlx9C9+oAK5AEXX8L0RVpIafOO5XnaUg=
Subject key identifier:   D0:02:E5:E2:72:83:DF:2C:61:70:45:D0:5E:2B:16:88:D0:82:80:9F
Authority key identifier: 43:21:31:41:AA:93:AD:8C:F8:C2:68:37:78:5C:78:45:4C:DB:81:80
Certificate issuer:       /CN=43213141aa93ad8cf8c26837785c78454cdb8180
Certificate serial:       018F893935B2D45F4F7C6F22C7E81477F68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QyExQaqTrYz4wmg3eFx4RUzbgYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
Manifest number:          010D
Signing time:             Sat 18 May 2024 01:02:58 +0000
Manifest this update:     Sat 18 May 2024 01:02:58 +0000
Manifest next update:     Sun 19 May 2024 01:02:58 +0000
Files and hashes:         1: QyExQaqTrYz4wmg3eFx4RUzbgYA.crl (hash: HNqAkWL2exbPLyyQ8OzPUXNtqtKn7cQZlzRqOnwuXNQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QyExQaqTrYz4wmg3eFx4RUzbgYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:35:b2:d4:5f:4f:7c:6f:22:c7:e8:14:77:f6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43213141aa93ad8cf8c26837785c78454cdb8180
        Validity
            Not Before: May 18 01:02:58 2024 GMT
            Not After : May 19 01:02:58 2024 GMT
        Subject: CN=d002e5e27283df2c617045d05e2b1688d082809f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:28:d8:50:6d:8b:13:8c:a3:00:2b:17:e6:dd:
                    d4:47:50:7c:e0:48:f6:ac:70:99:cb:7b:fe:aa:a2:
                    f3:f0:56:a0:e9:1a:b5:ca:4b:43:2b:f6:03:38:52:
                    36:9d:c7:18:0c:49:f6:e5:a7:7f:23:4c:5a:3e:c2:
                    cc:d6:85:7f:ff:05:eb:8d:2b:5b:37:6a:2d:a3:f2:
                    26:1e:db:0a:0a:23:5f:88:c4:98:6d:47:92:47:aa:
                    49:74:b7:ab:93:bc:75:98:f9:c8:b3:dc:67:b8:42:
                    3f:b4:49:50:0e:03:0b:55:99:90:35:33:20:7a:b1:
                    5d:57:d3:41:11:da:4c:c0:29:e3:e6:26:fa:c8:87:
                    ea:aa:8e:1f:31:08:a0:23:37:d0:c3:c5:70:5f:2f:
                    2e:2c:74:34:4e:bc:3d:e3:93:32:b6:90:e0:93:c5:
                    c1:be:a3:cc:d1:eb:fc:ff:80:e3:b6:25:1b:d7:9f:
                    da:86:cf:ab:86:3b:5b:38:fa:8d:26:55:90:cc:6f:
                    b1:94:3f:bb:2b:58:fc:b1:76:d8:8f:d6:ac:72:07:
                    4f:5b:a9:c8:1d:9f:b7:73:dc:33:57:a6:f3:d1:10:
                    7b:8b:8e:68:09:e6:a7:7b:4d:7e:4f:a4:78:48:b8:
                    52:39:37:cd:0b:4f:21:2e:5b:c9:6f:10:54:ec:0f:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:02:E5:E2:72:83:DF:2C:61:70:45:D0:5E:2B:16:88:D0:82:80:9F
            X509v3 Authority Key Identifier:
                keyid:43:21:31:41:AA:93:AD:8C:F8:C2:68:37:78:5C:78:45:4C:DB:81:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyExQaqTrYz4wmg3eFx4RUzbgYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:3e:1e:0c:8d:01:37:91:a6:13:fa:4d:76:0c:3e:4a:cb:7c:
         45:0f:bf:66:ce:87:9b:17:fe:bd:f8:11:71:39:c2:15:cb:83:
         bb:65:fc:74:e7:4b:04:e3:07:8c:90:8d:30:2e:f6:b9:1c:5a:
         8e:ec:e8:41:a2:0e:73:9a:23:18:21:30:31:95:dc:a7:05:88:
         e7:f1:cd:58:83:19:e9:75:82:f6:38:64:8c:52:b6:2a:46:34:
         ee:55:7f:b2:4e:aa:ae:48:6f:d6:2b:97:80:30:bb:a3:53:f5:
         35:c0:e5:68:89:8f:a2:50:c2:ec:84:28:08:0e:ec:3f:8f:4e:
         07:99:82:e6:71:75:51:31:d4:2e:0b:ab:39:c0:3c:70:f3:71:
         fc:02:37:5c:be:89:a5:a2:1d:77:62:2b:fa:cb:b1:da:b1:67:
         c4:b9:e7:b1:01:25:b0:7b:30:16:1a:cd:c0:f2:f1:44:f2:60:
         9c:f8:93:72:91:dd:1c:bb:ff:6d:ee:fb:df:cb:03:f9:d7:11:
         4c:5e:87:aa:68:29:c5:a5:6f:e3:01:b1:0e:80:18:8c:29:67:
         25:24:48:6f:89:65:c2:3c:cd:20:29:ab:b6:15:b8:94:62:ee:
         5f:63:92:0d:59:25:f4:08:01:00:b5:4f:ce:e8:e8:7c:56:58:
         9e:ae:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:01:11 2024 by rpki-client on console-ams.rpki-client.org