Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File:                     QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier:          f7gWUNZNksnvtk+/dztF/FJYtmC2zxRBnyblZskb2PI=
Subject key identifier:   18:43:14:B4:38:10:92:C7:74:97:01:24:DB:26:1C:C0:E3:AD:5F:88
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer:       /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial:       018F836E438FA37945E496F0DFCF2EAC7D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number:          1175
Signing time:             Thu 16 May 2024 22:03:12 +0000
Manifest this update:     Thu 16 May 2024 22:03:12 +0000
Manifest next update:     Fri 17 May 2024 22:03:12 +0000
Files and hashes:         1: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: 3NgKQ9uIoFRMrI7psOpGB/wTI9V8c/8jXr6GuPr6YDw=)
                          2: gX2O5YdaW5pGGuBB3Pm6dGJswec.roa (hash: xXSvsOAikuiU/cbpEKXTIjYoYofHOSA6Z9NNGe/7zrE=)
                          3: iULy8Djl5_TRgw9hP5o9m5dr8_I.roa (hash: X9gVLxAwGXxjXDVoXh2pcgB/+kq9kXhcfltwOHw8Pjw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6e:43:8f:a3:79:45:e4:96:f0:df:cf:2e:ac:7d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
        Validity
            Not Before: May 16 22:03:12 2024 GMT
            Not After : May 17 22:03:12 2024 GMT
        Subject: CN=184314b4381092c774970124db261cc0e3ad5f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:8e:88:4f:11:cd:2d:46:87:43:ef:96:c5:
                    73:0a:8c:75:b3:2f:6f:fc:23:3b:2a:c1:26:bc:36:
                    4c:cf:6e:4b:2f:a2:af:56:c5:a6:e5:9c:54:74:4d:
                    b6:f8:7e:b2:ef:4b:bf:10:7b:af:47:68:8e:d5:f8:
                    14:61:20:fb:c8:28:9b:74:fc:28:24:54:b8:cc:a8:
                    b9:3f:a7:d7:9c:eb:3a:4f:9e:7f:99:63:97:86:41:
                    b1:50:75:c2:77:56:24:62:1d:75:04:c6:0c:51:bb:
                    75:12:f1:b2:89:28:f2:ac:3e:bc:1a:1d:4f:20:ce:
                    fe:7f:97:38:f5:df:0f:89:53:ae:9c:9b:9a:3d:67:
                    81:8d:2c:76:81:30:bc:e4:e7:2d:8d:f8:b8:2d:0e:
                    e9:53:dc:2a:c6:8c:bd:9b:69:4d:3b:36:3c:71:07:
                    36:8f:17:bd:7d:8e:a7:de:9f:19:0d:04:cc:11:2f:
                    9d:8f:0c:05:c4:aa:f2:3d:aa:8b:d1:34:20:09:33:
                    44:28:49:b7:f7:c7:b0:52:71:3f:68:a7:1c:4a:6e:
                    ad:14:ed:68:a9:b7:d8:b1:c9:0d:4a:74:4b:d2:11:
                    e8:aa:a1:54:10:a7:3b:39:6b:45:a5:dd:29:73:5e:
                    b9:d0:8f:66:ae:a9:1d:9a:d1:2a:41:5d:8d:40:79:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:43:14:B4:38:10:92:C7:74:97:01:24:DB:26:1C:C0:E3:AD:5F:88
            X509v3 Authority Key Identifier:
                keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:49:8f:93:37:5d:19:33:c0:a1:7e:55:cc:6b:9a:11:63:d8:
         0c:40:b5:b2:62:79:99:60:07:cc:e5:96:bb:32:39:a4:1a:99:
         fd:ac:b7:c5:3e:30:32:38:18:32:81:d3:b5:33:5a:8b:72:d1:
         ae:40:ba:70:51:c0:08:e6:a7:5c:5c:53:9a:4c:2c:b1:f1:ea:
         d0:7d:36:3c:31:ba:f7:0b:ad:c8:d4:c8:3b:b8:2e:7a:e4:47:
         2e:a9:5e:81:26:15:f0:95:d3:a4:21:7d:f9:83:df:cb:ba:20:
         91:b2:c2:68:cb:80:a2:27:7d:ad:1d:ad:ed:89:ec:27:9f:c7:
         47:99:0a:f3:7d:98:0b:71:fe:55:b2:6e:c7:fc:5d:ab:c2:69:
         be:4f:4e:cd:f5:ad:d7:b7:04:7f:ef:38:5c:89:e0:4b:01:20:
         83:40:e9:30:df:0b:1d:be:5e:35:9e:c1:59:21:b9:a8:29:ec:
         62:b7:4e:70:db:8f:a3:89:37:42:90:5c:03:b4:11:d4:1b:25:
         95:e7:fb:88:2c:89:a9:03:e3:78:99:1b:bc:c3:65:70:e2:c7:
         3d:91:d6:94:60:8a:ae:a9:5c:fd:8f:99:8e:31:c7:fc:e7:c1:
         15:88:7c:ba:d2:c2:99:8e:c6:d7:35:ee:4f:48:ce:1c:16:4a:
         5a:ba:13:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+DbkOPo3lF5Jbw388urH0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWEyYTk0MDViZGExNjcxYzEwNzc2ZjQ0MjYyNzNjOTA0
ZTRhZDAwHhcNMjQwNTE2MjIwMzEyWhcNMjQwNTE3MjIwMzEyWjAzMTEwLwYDVQQD
EygxODQzMTRiNDM4MTA5MmM3NzQ5NzAxMjRkYjI2MWNjMGUzYWQ1Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumCOiE8RzS1Gh0PvlsVzCox1sy9v
/CM7KsEmvDZMz25LL6KvVsWm5ZxUdE22+H6y70u/EHuvR2iO1fgUYSD7yCibdPwo
JFS4zKi5P6fXnOs6T55/mWOXhkGxUHXCd1YkYh11BMYMUbt1EvGyiSjyrD68Gh1P
IM7+f5c49d8PiVOunJuaPWeBjSx2gTC85Octjfi4LQ7pU9wqxoy9m2lNOzY8cQc2
jxe9fY6n3p8ZDQTMES+djwwFxKryPaqL0TQgCTNEKEm398ewUnE/aKccSm6tFO1o
qbfYsckNSnRL0hHoqqFUEKc7OWtFpd0pc1650I9mrqkdmtEqQV2NQHmhcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhDFLQ4EJLHdJcBJNsmHMDjrV+IMB8GA1UdIwQY
MBaAFEEaKpQFvaFnHBB3b0QmJzyQTkrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQt
OGM1MmU2NjZhOGEyLzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQtOGM1MmU2NjZhOGEy
LzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkmPkzdd
GTPAoX5VzGuaEWPYDEC1smJ5mWAHzOWWuzI5pBqZ/ay3xT4wMjgYMoHTtTNai3LR
rkC6cFHACOanXFxTmkwssfHq0H02PDG69wutyNTIO7gueuRHLqlegSYV8JXTpCF9
+YPfy7ogkbLCaMuAoid9rR2t7YnsJ5/HR5kK832YC3H+VbJux/xdq8Jpvk9OzfWt
17cEf+84XIngSwEgg0DpMN8LHb5eNZ7BWSG5qCnsYrdOcNuPo4k3QpBcA7QR1Bsl
lef7iCyJqQPjeJkbvMNlcOLHPZHWlGCKrqlc/Y+ZjjHH/OfBFYh8utLCmY7G1zXu
T0jOHBZKWroTFA==
-----END CERTIFICATE-----
Generated at Fri May 17 04:29:52 2024 by rpki-client on console-fra.rpki-client.org