Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File:                     Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier:          oFGRzLE84XwFwcm9Wu6/D6nc6hg6ykrroBpWXM1wLwg=
Subject key identifier:   8A:5B:38:01:FA:0B:3E:FA:E5:0E:1F:B5:65:5F:C7:7B:9E:AB:F8:50
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer:       /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial:       018F889234ECB668A104EFF2EECEC77D4508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number:          0741
Signing time:             Fri 17 May 2024 22:00:34 +0000
Manifest this update:     Fri 17 May 2024 22:00:34 +0000
Manifest next update:     Sat 18 May 2024 22:00:34 +0000
Files and hashes:         1: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: Q+TIc44enCAiNvPz1P3Ztr3ehhztWWdkgP8Uw6dBsj0=)
                          2: picio05LQieYJOr_p2nKdI8qHSs.roa (hash: /ZYussasHipQVZ4aHqCMvJw86eSp+0OXBdXqKgEu1nU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:34:ec:b6:68:a1:04:ef:f2:ee:ce:c7:7d:45:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
        Validity
            Not Before: May 17 22:00:34 2024 GMT
            Not After : May 18 22:00:34 2024 GMT
        Subject: CN=8a5b3801fa0b3efae50e1fb5655fc77b9eabf850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:c1:a2:6b:e7:88:06:11:b5:78:68:af:75:
                    4c:36:2a:04:fb:b1:ef:2c:50:f5:66:75:e9:1b:8b:
                    46:b4:22:9d:1c:89:a9:ae:cf:40:0f:32:e3:c1:9c:
                    a8:48:2c:00:6e:bf:d3:93:ea:69:08:75:cd:3c:3b:
                    82:13:ba:b4:2f:58:a7:ba:ef:4a:e1:57:6d:9e:30:
                    99:f9:86:a9:ac:b7:eb:5d:87:41:46:5c:19:cc:b7:
                    14:25:97:1e:23:3d:6d:b5:70:b8:0c:9e:59:86:fd:
                    e6:e1:03:96:48:c1:48:a7:be:d6:fe:99:e6:31:5f:
                    0b:b0:cb:db:de:08:5f:75:59:db:c6:c8:21:a1:20:
                    00:7a:25:2c:a5:74:f5:1f:01:f5:5e:c1:ed:bc:56:
                    71:28:10:cc:d2:89:19:f9:13:b4:0e:4c:ed:a6:9b:
                    e5:5e:c4:c9:0e:f1:0f:c3:96:27:7c:b6:e7:d9:7d:
                    b8:bb:17:93:f1:51:7e:1f:e1:c7:70:ac:5a:6a:6d:
                    0d:cc:66:84:38:c9:55:c9:58:37:7a:6d:b1:9a:e7:
                    d1:37:b3:74:47:e0:ad:dd:af:bd:08:ff:4f:f3:5e:
                    91:ec:fc:4a:37:9c:0f:cd:3c:8e:85:6a:1b:4b:d2:
                    f2:d4:ad:30:bd:05:b6:ec:42:82:91:3f:df:75:72:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5B:38:01:FA:0B:3E:FA:E5:0E:1F:B5:65:5F:C7:7B:9E:AB:F8:50
            X509v3 Authority Key Identifier:
                keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:92:3c:93:d7:d0:e7:33:13:f1:75:96:fd:ba:8c:ad:61:68:
         5c:69:3f:f2:35:b3:2e:2b:3a:a0:ca:67:34:a1:94:62:54:1e:
         fc:95:ed:f3:9a:42:c7:15:ae:b9:3d:28:bc:eb:71:35:e8:f6:
         cc:01:f1:40:a0:4b:ea:5b:33:46:1c:c1:26:ec:17:0a:1c:a5:
         46:d8:8b:aa:b4:63:ec:ea:05:8f:cf:4c:fe:36:c0:51:43:6f:
         59:10:2a:9f:90:fc:51:ec:08:17:0d:96:64:ab:8b:b0:bb:b8:
         c5:19:74:88:20:47:d0:64:2f:6d:61:fa:2d:3c:08:16:8b:57:
         a5:bf:93:f9:2c:93:da:0d:9e:fb:00:4f:da:9f:27:66:11:9e:
         66:70:47:5e:0c:00:40:cf:a4:32:aa:49:dd:87:6f:9d:5c:c3:
         76:0a:6b:3c:f9:d8:a3:be:4e:a1:c1:9a:46:22:a5:5e:12:d1:
         3a:c6:a4:da:46:ca:ec:00:7b:0b:d8:1b:09:8d:04:f2:fb:71:
         35:44:7b:4e:f1:d9:44:5e:4d:ed:1a:24:59:27:20:24:eb:16:
         26:9f:45:36:3b:ed:b0:29:63:6b:5f:1b:98:6b:0e:c1:5a:64:
         45:b3:f5:a9:17:e6:2b:26:10:44:be:5c:11:85:f7:ec:a6:c7:
         1d:93:7e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkjTstmihBO/y7s7HfUUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZGUyN2ZhODg3OTA1ZTBjOWMxZjUzZjY3ZjIzZjI5NmQw
NDVmMGUwHhcNMjQwNTE3MjIwMDM0WhcNMjQwNTE4MjIwMDM0WjAzMTEwLwYDVQQD
Eyg4YTViMzgwMWZhMGIzZWZhZTUwZTFmYjU2NTVmYzc3YjllYWJmODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmzBomvniAYRtXhor3VMNioE+7Hv
LFD1ZnXpG4tGtCKdHImprs9ADzLjwZyoSCwAbr/Tk+ppCHXNPDuCE7q0L1inuu9K
4VdtnjCZ+YaprLfrXYdBRlwZzLcUJZceIz1ttXC4DJ5Zhv3m4QOWSMFIp77W/pnm
MV8LsMvb3ghfdVnbxsghoSAAeiUspXT1HwH1XsHtvFZxKBDM0okZ+RO0Dkztppvl
XsTJDvEPw5YnfLbn2X24uxeT8VF+H+HHcKxaam0NzGaEOMlVyVg3em2xmufRN7N0
R+Ct3a+9CP9P816R7PxKN5wPzTyOhWobS9Ly1K0wvQW27EKCkT/fdXLfZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpbOAH6Cz765Q4ftWVfx3ueq/hQMB8GA1UdIwQY
MBaAFELeJ/qIeQXgycH1P2fyPyltBF8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQt
ZDI5YjdkNDc4NjMxLzEvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQtZDI5YjdkNDc4NjMx
LzEvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJI8k9fQ
5zMT8XWW/bqMrWFoXGk/8jWzLis6oMpnNKGUYlQe/JXt85pCxxWuuT0ovOtxNej2
zAHxQKBL6lszRhzBJuwXChylRtiLqrRj7OoFj89M/jbAUUNvWRAqn5D8UewIFw2W
ZKuLsLu4xRl0iCBH0GQvbWH6LTwIFotXpb+T+SyT2g2e+wBP2p8nZhGeZnBHXgwA
QM+kMqpJ3YdvnVzDdgprPPnYo75OocGaRiKlXhLROsak2kbK7AB7C9gbCY0E8vtx
NUR7TvHZRF5N7RokWScgJOsWJp9FNjvtsClja18bmGsOwVpkRbP1qRfmKyYQRL5c
EYX37KbHHZN+Zw==
-----END CERTIFICATE-----
Generated at Fri May 17 23:38:40 2024 by rpki-client on console-fra.rpki-client.org