Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File:                     QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier:          rMIzDGj7E7GULOldopyFLqDaexV64U3Qknz8WBPeXF0=
Subject key identifier:   6F:83:AE:69:30:6E:D5:69:83:C6:34:3E:EA:C0:1E:1F:FA:0A:EA:F1
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer:       /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial:       018F86A4333E0DF8B0B2904A30A074174EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number:          0794
Signing time:             Fri 17 May 2024 13:00:58 +0000
Manifest this update:     Fri 17 May 2024 13:00:58 +0000
Manifest next update:     Sat 18 May 2024 13:00:58 +0000
Files and hashes:         1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: +AyeAwP8VUYhT8U00H7mQPgtIHji/rFL+7PbrIibIFE=)
                          2: jcv3D3fAZlTKpKQlKaM0bvvPUdY.roa (hash: a5SbIcL+GxwbgSAfCIBZ5nf9a1g0xXEGajmNPw33olk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:33:3e:0d:f8:b0:b2:90:4a:30:a0:74:17:4e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
        Validity
            Not Before: May 17 13:00:58 2024 GMT
            Not After : May 18 13:00:58 2024 GMT
        Subject: CN=6f83ae69306ed56983c6343eeac01e1ffa0aeaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:d8:17:fa:0c:ea:1e:ce:f5:85:fa:e9:ca:
                    59:9d:0a:3d:e9:e0:d1:43:94:d0:32:20:f7:a9:44:
                    78:0a:c9:5c:05:11:e3:7a:74:81:25:26:4f:9a:06:
                    72:74:c7:02:16:25:36:57:36:ec:ae:b2:48:f1:54:
                    10:d2:c4:17:00:42:94:6b:05:34:a5:f9:17:cf:b1:
                    08:41:65:8d:cf:db:03:54:e6:b4:ba:04:c2:ec:a6:
                    38:d3:b5:f1:71:75:fe:70:78:58:f8:b5:b7:bb:da:
                    39:62:3f:3c:f7:4e:21:42:65:c4:41:1a:3d:ee:d2:
                    74:5d:e6:a5:16:12:d1:ad:45:73:ca:e6:f3:75:9b:
                    c1:60:07:72:e0:66:de:eb:be:30:7d:78:5a:b9:d1:
                    6c:1c:3f:18:5a:d7:a4:b6:b1:8f:9a:5d:6b:b1:e2:
                    9b:6f:74:06:48:ec:43:63:65:75:1f:82:b0:42:f8:
                    92:3a:70:db:10:03:ec:0e:6b:a3:85:3f:db:f5:75:
                    87:b5:62:66:47:f5:1d:af:be:ca:eb:c7:fd:20:70:
                    56:4f:f5:e0:e0:e6:80:08:98:02:2b:ca:bb:78:18:
                    cd:a1:0e:bf:18:3f:e8:aa:df:9a:5b:72:fb:a6:71:
                    5f:b8:fc:85:2e:9a:99:c3:61:e3:df:97:c6:fd:ee:
                    7b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:83:AE:69:30:6E:D5:69:83:C6:34:3E:EA:C0:1E:1F:FA:0A:EA:F1
            X509v3 Authority Key Identifier:
                keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9a:53:ef:e8:4f:f6:d5:6d:61:83:0b:4d:8d:9c:c5:80:b7:
         a7:49:35:29:dc:ff:cd:32:23:7d:98:7e:3c:d6:f4:10:0b:63:
         c4:f9:f3:27:1b:35:12:56:86:5c:d9:3d:81:99:7f:e8:a4:08:
         2b:38:7d:da:f2:fd:d7:36:82:28:db:90:55:c8:81:3b:1f:15:
         bd:5b:43:f4:d7:ea:bf:36:ff:e4:35:27:92:b2:21:8f:3f:f0:
         e2:96:5c:b7:8d:b4:09:8c:d1:97:17:a8:8e:7b:28:54:85:81:
         32:02:96:68:82:bb:b0:e4:d3:a4:c6:d3:0f:4a:59:dc:3f:e6:
         f2:7e:3e:60:a4:c1:fb:c3:80:82:73:2d:6e:b4:04:2a:b2:dd:
         1c:86:96:83:73:f5:7f:06:f5:8d:66:87:56:e3:11:5e:c6:3d:
         13:1b:10:bb:09:cb:f8:ae:df:a3:5f:3d:50:b2:ba:39:54:e0:
         2c:78:19:8b:16:52:2b:0a:01:9b:c0:83:04:5c:d6:14:ab:4b:
         d5:4c:b1:da:46:87:14:c0:71:29:20:4b:59:b7:b0:3a:e5:e0:
         22:0a:ea:d8:21:b9:56:7c:12:b7:47:fd:54:24:06:38:30:ab:
         67:9c:8a:7f:0d:92:ee:17:e4:c3:c2:d9:4d:fe:c4:5f:00:ea:
         62:a6:97:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GpDM+DfiwspBKMKB0F060MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2Y2OWNjYTJjODZlMTk0NzU0Nzg4ZWRjZDg4ZTM1MmVk
NGUxMWMwHhcNMjQwNTE3MTMwMDU4WhcNMjQwNTE4MTMwMDU4WjAzMTEwLwYDVQQD
Eyg2ZjgzYWU2OTMwNmVkNTY5ODNjNjM0M2VlYWMwMWUxZmZhMGFlYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZXYF/oM6h7O9YX66cpZnQo96eDR
Q5TQMiD3qUR4CslcBRHjenSBJSZPmgZydMcCFiU2VzbsrrJI8VQQ0sQXAEKUawU0
pfkXz7EIQWWNz9sDVOa0ugTC7KY407XxcXX+cHhY+LW3u9o5Yj88904hQmXEQRo9
7tJ0XealFhLRrUVzyubzdZvBYAdy4Gbe674wfXhaudFsHD8YWtektrGPml1rseKb
b3QGSOxDY2V1H4KwQviSOnDbEAPsDmujhT/b9XWHtWJmR/Udr77K68f9IHBWT/Xg
4OaACJgCK8q7eBjNoQ6/GD/oqt+aW3L7pnFfuPyFLpqZw2Hj35fG/e57rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+DrmkwbtVpg8Y0PurAHh/6CurxMB8GA1UdIwQY
MBaAFEDPacyiyG4ZR1R4jtzYjjUu1OEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQt
Y2YxYTVkOGU1ZjZkLzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQtY2YxYTVkOGU1ZjZk
LzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZpT7+hP
9tVtYYMLTY2cxYC3p0k1Kdz/zTIjfZh+PNb0EAtjxPnzJxs1ElaGXNk9gZl/6KQI
Kzh92vL91zaCKNuQVciBOx8VvVtD9Nfqvzb/5DUnkrIhjz/w4pZct420CYzRlxeo
jnsoVIWBMgKWaIK7sOTTpMbTD0pZ3D/m8n4+YKTB+8OAgnMtbrQEKrLdHIaWg3P1
fwb1jWaHVuMRXsY9ExsQuwnL+K7fo189ULK6OVTgLHgZixZSKwoBm8CDBFzWFKtL
1Uyx2kaHFMBxKSBLWbewOuXgIgrq2CG5VnwSt0f9VCQGODCrZ5yKfw2S7hfkw8LZ
Tf7EXwDqYqaXkQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:18:33 2024 by rpki-client on console-fra.rpki-client.org