Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File:                     QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier:          AMs8d8cOOBrMlq5Y/HCrMh6mjDse03jVqW+3apPite8=
Subject key identifier:   2C:B5:8C:ED:C6:A6:E5:44:69:F7:15:07:60:8C:B2:9F:2E:FF:80:EC
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer:       /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial:       018F994F1C9AF191F809FB2856ACF8674FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number:          0DD0
Signing time:             Tue 21 May 2024 04:00:49 +0000
Manifest this update:     Tue 21 May 2024 04:00:49 +0000
Manifest next update:     Wed 22 May 2024 04:00:49 +0000
Files and hashes:         1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: +pVbW2WcnsPBo+BG0MNlO6zv83tw6KF4bvmXEOHptFs=)
                          2: SuOwtMbuU-Z96TNV8ykX60wQcAA.roa (hash: XZipaCIidQfi/ERoF9Ii0CSbt4ytQJhD8tTSLBWZVGs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:4f:1c:9a:f1:91:f8:09:fb:28:56:ac:f8:67:4f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
        Validity
            Not Before: May 21 04:00:49 2024 GMT
            Not After : May 22 04:00:49 2024 GMT
        Subject: CN=2cb58cedc6a6e54469f71507608cb29f2eff80ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:41:49:28:3a:75:91:d2:97:f1:17:f4:71:b5:
                    4f:8c:d1:fe:14:6b:76:19:f0:e5:b8:f4:36:f0:0c:
                    18:49:eb:d5:70:e8:9e:48:02:c2:2c:a0:73:d3:cf:
                    85:c8:40:7a:f6:3f:55:9d:cb:80:a7:f0:57:c9:a7:
                    16:1e:47:1d:17:c5:ee:03:a6:52:51:a6:2a:e8:da:
                    1e:70:a9:5f:2e:44:5e:47:a2:bd:ef:a8:6f:ce:9b:
                    c1:80:f6:04:7d:8a:aa:47:f7:99:44:07:d3:c3:02:
                    79:a5:4b:95:00:4c:76:c5:b7:7e:83:51:c8:75:91:
                    7d:51:ec:71:ab:d5:81:2d:fa:d9:c5:6c:49:c2:fb:
                    97:14:d5:21:f9:73:40:b1:67:26:3b:72:02:c5:a2:
                    38:db:29:3e:d1:b0:23:59:2e:08:a7:81:b4:29:72:
                    61:eb:13:f3:fc:47:ee:bc:dc:0f:8e:04:48:e3:f7:
                    22:fb:54:b3:d9:58:87:e4:a7:4f:4c:80:1f:28:4f:
                    ca:8b:88:c8:ba:9b:06:0a:5e:b3:f3:30:b8:ff:d4:
                    f1:5f:d6:8b:6a:aa:b8:5f:52:82:5c:4d:14:bf:80:
                    cc:3d:e6:1d:1b:4d:ed:79:b0:93:e2:ce:db:59:5e:
                    3e:40:1d:95:82:2f:fb:65:f0:24:d1:27:1e:dc:ad:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B5:8C:ED:C6:A6:E5:44:69:F7:15:07:60:8C:B2:9F:2E:FF:80:EC
            X509v3 Authority Key Identifier:
                keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6e:46:66:6e:cc:9f:f6:fc:a6:8b:a3:07:a2:17:6f:c4:cb:
         08:68:f4:80:72:5e:96:30:78:53:bc:1e:63:2d:1e:0c:8d:b5:
         dc:52:c2:c7:c5:da:1c:71:dd:a7:89:b5:e2:f6:d8:7d:34:b1:
         6d:ac:99:42:65:c8:a2:ae:be:8c:c9:29:de:f6:2c:63:3d:cf:
         08:12:ba:06:7b:f5:5e:60:83:eb:3b:35:cd:ad:a1:98:1e:36:
         a4:5f:a3:f8:81:9d:38:70:86:03:8a:f5:e8:73:04:8f:50:10:
         9c:44:f6:a0:4d:f2:1f:24:4b:50:56:c8:df:f8:30:58:7e:59:
         e4:3f:90:41:e3:ac:fa:44:b2:11:6b:b6:9d:ef:13:51:6f:e1:
         5e:f6:c4:b9:2a:7a:3e:37:80:29:8d:13:17:e2:de:cf:ff:ef:
         c8:09:fa:6c:33:1a:55:7a:c8:1b:70:b0:9d:ed:6b:5e:37:0c:
         5f:2f:2e:2a:79:74:7c:ba:b8:2d:80:10:ef:3b:c5:e5:db:aa:
         2e:79:24:a1:83:3d:a3:d9:8c:cf:11:d0:0b:68:9c:18:7b:b9:
         a2:5f:4b:c9:12:dd:9b:1b:26:91:86:a7:d8:df:63:be:c6:c4:
         5d:d3:83:23:fa:6a:55:d1:53:86:83:ba:05:3f:28:e1:41:83:
         31:7d:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 04:40:23 2024 by rpki-client on console-ams.rpki-client.org