Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
File:                     Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft (raw, json)
Hash identifier:          CylFKZVuIkjBZMoUd9icmrZH2O5xxaJHPru4XX96b/I=
Subject key identifier:   93:8D:B1:54:A4:68:87:ED:9C:51:2D:86:F2:6E:0F:FD:3F:89:F0:68
Authority key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
Certificate issuer:       /CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
Certificate serial:       01902A5D3E5CDECD94CEB0BA70516CDFD876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
Manifest number:          0518
Signing time:             Tue 18 Jun 2024 08:01:12 +0000
Manifest this update:     Tue 18 Jun 2024 08:01:12 +0000
Manifest next update:     Wed 19 Jun 2024 08:01:12 +0000
Files and hashes:         1: Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl (hash: Dwxa8/EuH0sY1Zlp7aD2RtNGqsA0/Cp/BU5Nt6G0zh8=)
                          2: oLtJH72v_Ht2BgubNKLJmmDkwLs.roa (hash: H3S+c0SObu2XeHRffpew2Yh70/3k6koH+ADvmusBu0s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:5d:3e:5c:de:cd:94:ce:b0:ba:70:51:6c:df:d8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
        Validity
            Not Before: Jun 18 08:01:12 2024 GMT
            Not After : Jun 19 08:01:12 2024 GMT
        Subject: CN=938db154a46887ed9c512d86f26e0ffd3f89f068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:76:61:7a:5d:0f:78:32:d4:dc:b5:96:b4:
                    42:91:c3:ed:9d:49:2f:22:8c:a1:b8:ba:a4:1e:92:
                    4c:07:e9:37:f7:ad:18:36:8a:ae:5c:20:57:db:8d:
                    57:0c:70:67:10:5f:0a:d0:f5:19:fc:1a:3f:60:ca:
                    79:f5:f4:33:da:88:5e:f1:a1:52:e1:49:7e:af:85:
                    09:1b:45:a0:ea:62:4f:82:76:d6:c3:be:3c:0b:c9:
                    bc:47:31:46:9d:88:55:10:37:94:93:96:c8:ef:a5:
                    14:a0:0d:16:0e:76:08:8b:3d:85:a8:e9:d9:39:ed:
                    ce:c0:91:62:80:8b:2a:7f:7a:f3:db:b1:e8:91:05:
                    4c:a3:93:d0:63:c5:36:f9:81:03:5f:8d:33:01:02:
                    fe:04:1a:c2:30:ee:f1:bc:47:dd:e0:89:06:88:b2:
                    68:f8:06:67:88:32:b1:4c:6e:5c:6f:81:af:f9:da:
                    0e:df:59:5c:9f:2c:37:02:fb:ef:82:79:05:88:5e:
                    78:69:00:26:99:db:a7:9a:16:55:8a:d0:5e:8a:97:
                    bd:e7:93:5c:6b:0a:38:79:e1:13:b0:4b:17:bc:81:
                    f8:2b:77:72:a8:f9:4b:90:d8:59:c0:e4:b8:7c:c6:
                    75:24:34:d9:34:02:01:a4:70:14:2e:66:6e:a2:14:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8D:B1:54:A4:68:87:ED:9C:51:2D:86:F2:6E:0F:FD:3F:89:F0:68
            X509v3 Authority Key Identifier:
                keyid:42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ba:38:bc:97:24:48:03:f2:9d:b8:68:54:c9:3d:77:5b:ee:
         33:1a:d2:d4:98:6b:2e:fa:25:d7:c8:36:5b:ca:17:f6:d0:e1:
         c9:39:35:3e:b2:06:88:d7:64:40:81:03:90:49:80:c0:50:a0:
         76:97:88:08:7b:75:3a:1e:02:b2:a7:69:07:37:8a:d7:6d:75:
         3e:70:2b:af:85:c8:91:f6:b2:36:aa:ba:07:ac:41:84:63:a6:
         4a:b1:e8:58:63:33:12:f8:a0:aa:b7:8e:96:64:53:7a:6a:10:
         6c:15:a7:a2:7b:56:8c:4e:11:e8:2b:d1:61:73:11:e8:42:94:
         e6:17:06:8e:f2:ce:dd:3c:ea:04:16:17:ba:7e:96:b4:7c:37:
         a1:0a:75:9f:11:d5:24:63:49:31:61:f2:1b:52:e0:c8:ae:d3:
         17:a2:fe:30:4a:fe:97:b2:27:f3:4e:a7:6f:20:61:bb:1e:d7:
         a4:a8:5d:68:b8:3f:85:c4:bc:19:60:c7:f3:bb:3d:0a:9d:e1:
         25:b9:c9:cf:7a:a3:b6:df:ea:e8:eb:6f:23:03:92:49:15:91:
         ab:fb:ec:0b:19:ee:dc:45:0f:60:af:49:52:50:b3:35:2e:43:
         44:8e:ab:15:56:db:76:bf:71:cd:69:4e:50:32:aa:b9:4a:5f:
         a9:c7:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:01:31 2024 by rpki-client on console-fra.rpki-client.org