Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File:                     QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier:          jLr0Gt6x5lJm5aes4addvaKgyOAKMjzcfeAMFWkyr0o=
Subject key identifier:   F3:06:31:73:79:FB:8A:5C:2D:F3:47:36:F8:0C:98:68:7B:EF:71:6D
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer:       /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial:       018F8749E29D9A82F4452C37939D291E5E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number:          0344
Signing time:             Fri 17 May 2024 16:01:57 +0000
Manifest this update:     Fri 17 May 2024 16:01:57 +0000
Manifest next update:     Sat 18 May 2024 16:01:57 +0000
Files and hashes:         1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: /UUAr8ilLjchXzsEpSiufGorZ0MS9EyghTvhGA2LYvc=)
                          2: i_Cr2hfC_pKwLWTc-eap3006Hig.roa (hash: RsZSZ9jS5y55M88ewu6l0chaKkvwrAuY5EDl0pt/0j8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e2:9d:9a:82:f4:45:2c:37:93:9d:29:1e:5e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
        Validity
            Not Before: May 17 16:01:57 2024 GMT
            Not After : May 18 16:01:57 2024 GMT
        Subject: CN=f306317379fb8a5c2df34736f80c98687bef716d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:f6:63:08:e5:29:49:0b:bc:6a:8d:c6:0d:
                    10:a7:dc:02:b3:ce:95:71:1f:80:17:b9:67:a3:5f:
                    8b:3b:6c:f5:b6:35:98:31:a8:f2:e1:ff:2d:90:e1:
                    3d:b6:33:44:31:e9:50:fd:88:e2:29:7e:b7:a2:34:
                    da:25:57:35:3f:0e:f9:53:02:d1:22:f8:aa:b0:0e:
                    ce:0d:e3:3e:22:8e:1b:36:3d:c0:90:e6:89:e3:25:
                    e7:55:cf:da:78:d9:e7:9a:5a:58:76:9f:e4:57:fb:
                    fb:c7:f0:cd:c2:57:91:94:27:75:5b:7c:ba:13:13:
                    6b:0b:39:73:17:b6:63:5b:ef:dc:10:1d:d1:8d:35:
                    89:20:fa:cf:17:7d:53:4c:b4:ba:49:c8:71:f9:fe:
                    7b:bb:2d:a8:52:d2:50:0a:57:57:71:59:c6:c6:c5:
                    55:eb:fd:ea:42:3f:fa:01:dd:0d:fa:d4:4a:58:1e:
                    3e:e3:a4:fd:06:48:ef:8e:f3:7e:93:0e:7f:55:66:
                    dd:a8:33:27:92:ce:51:e8:c4:41:65:30:32:d5:b7:
                    0a:e8:7d:4c:b9:a9:4a:19:70:8d:c5:b3:24:a8:99:
                    13:ed:ac:a2:c0:a8:cc:d3:29:a1:4e:46:40:df:fc:
                    01:7f:21:5f:77:33:32:19:f2:b2:6d:be:1d:0b:1a:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:06:31:73:79:FB:8A:5C:2D:F3:47:36:F8:0C:98:68:7B:EF:71:6D
            X509v3 Authority Key Identifier:
                keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:cc:e6:60:e9:d9:0c:77:32:10:1a:da:9e:66:26:2e:36:7b:
         a3:89:85:d1:2e:6e:c4:7a:cf:47:72:b7:76:fc:33:d5:24:1f:
         00:09:dc:4c:8e:36:a3:3f:54:19:07:f8:bd:e7:6a:62:a9:99:
         51:61:15:dd:66:21:7c:bd:85:fd:81:4e:39:83:1f:0a:d9:b0:
         13:5b:24:25:5d:3f:ab:92:31:eb:44:66:75:5b:c3:96:c7:45:
         7d:63:05:28:74:e5:8c:a3:ba:10:cb:43:9e:c2:de:53:38:8f:
         51:5f:62:ea:4f:fc:6b:e4:b0:a8:41:d0:46:17:b9:31:bc:f8:
         e8:e3:08:e5:97:3c:54:ce:ec:9c:55:f4:96:3e:cd:c0:8c:0a:
         ab:37:eb:75:cc:7c:8e:1b:11:ae:0d:c1:f0:c4:a5:e3:61:55:
         62:43:65:0d:26:96:85:7c:1f:63:2d:30:1f:7f:fe:fa:8e:e3:
         5f:14:5b:fd:60:29:57:d8:93:27:ee:fa:b3:a7:13:40:d8:ad:
         94:ab:ff:68:a0:ce:76:89:78:f6:43:68:b6:f4:cd:b2:9f:3b:
         86:58:c7:15:64:96:8b:69:d4:40:31:5e:6d:bd:ee:fd:76:36:
         72:c9:5f:75:2c:8f:93:92:a2:bd:f6:76:5a:f7:3b:43:5a:79:
         3f:12:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:25 2024 by rpki-client on console-ams.rpki-client.org