Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File:                     QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier:          MNP1ZIpGMpoteKBmxf1ALLBwQ+oTVM0OHXut5E25YSg=
Subject key identifier:   B5:85:5E:CD:F8:84:1A:24:1E:1B:F5:B4:CD:C1:B3:C4:7D:2D:01:67
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer:       /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial:       018F8749A0326B67AC81E04895D0E0F72D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number:          F7
Signing time:             Fri 17 May 2024 16:01:40 +0000
Manifest this update:     Fri 17 May 2024 16:01:40 +0000
Manifest next update:     Sat 18 May 2024 16:01:40 +0000
Files and hashes:         1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: eW5bxmItITUI/Ly/TgtmRFwuKwXjUQclNYeMOAd280o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a0:32:6b:67:ac:81:e0:48:95:d0:e0:f7:2d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
        Validity
            Not Before: May 17 16:01:40 2024 GMT
            Not After : May 18 16:01:40 2024 GMT
        Subject: CN=b5855ecdf8841a241e1bf5b4cdc1b3c47d2d0167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:ed:29:cc:b9:fc:95:c4:fe:ee:79:14:62:
                    97:47:b9:2b:f7:e6:1b:ae:b1:c5:ec:42:41:f0:e5:
                    89:3e:97:96:0b:a8:1e:36:ac:94:48:d8:bd:d5:ed:
                    9f:ca:58:21:63:c1:fa:6d:59:46:a9:7e:64:e5:e2:
                    76:59:d8:60:61:d6:93:bd:90:58:dc:2b:9d:e6:f1:
                    68:13:03:c3:df:b3:45:32:34:9a:73:5b:b3:94:d4:
                    31:b3:9f:dc:ac:65:d1:ca:30:fb:d9:5a:a9:b1:6e:
                    66:86:17:6b:1b:3d:fa:d0:c7:18:72:c6:73:07:98:
                    ce:bc:31:61:ad:88:d4:ad:ab:09:c6:d0:f2:00:c7:
                    59:0b:b9:a2:4c:ec:f1:0f:b7:c5:4c:f9:60:c2:1e:
                    7e:aa:c8:9d:de:e2:a0:fa:f9:49:54:22:9e:4b:fe:
                    51:74:3b:e0:7d:e1:49:d4:40:3f:90:f9:0e:2f:67:
                    a1:3d:2a:53:ad:a1:92:60:01:0c:7f:47:1f:ae:3d:
                    e6:66:7f:4b:f7:a0:09:cd:07:af:59:42:75:9d:1f:
                    6c:d8:c4:99:66:4d:01:87:18:53:08:99:b8:1c:c4:
                    b9:4d:63:ef:a6:34:b8:eb:3b:70:b6:c9:dd:06:e7:
                    b6:39:16:48:5a:47:2b:62:45:89:fb:cc:a8:5d:b9:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:85:5E:CD:F8:84:1A:24:1E:1B:F5:B4:CD:C1:B3:C4:7D:2D:01:67
            X509v3 Authority Key Identifier:
                keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8e:47:cb:e2:f9:05:eb:46:3a:66:3f:62:ff:0e:a3:9a:ee:
         bc:32:f0:bb:2a:4f:77:5f:e5:75:49:13:6a:af:df:2d:9b:12:
         3d:1f:ae:2c:2b:95:11:df:cd:88:40:7a:7d:6f:44:40:79:25:
         4f:4a:38:08:e3:d0:b3:6d:0e:17:c0:67:fb:08:30:20:b4:fe:
         85:28:3a:48:fb:cd:b0:14:ab:7c:71:11:73:e6:28:9f:c5:6e:
         e3:d4:94:b2:5f:df:a8:6d:a6:3d:ce:0a:e0:38:1b:ce:4d:91:
         57:b3:ce:66:2f:86:c7:a3:d8:77:f9:9d:1a:1e:c6:ea:45:47:
         16:88:60:e8:f2:c4:77:3f:a0:9d:2d:cb:0e:6d:81:79:2f:ec:
         c6:bf:14:58:ae:19:8d:5b:44:1e:fb:31:4a:a0:12:0e:ab:ff:
         22:1b:f8:99:8f:16:b3:f5:4a:37:fc:85:10:d8:be:a3:a2:9c:
         c8:6c:49:3f:9d:23:b0:ae:45:a4:98:f1:d7:10:fa:dc:5b:b5:
         6c:4b:46:a8:75:fa:9c:0e:b9:21:b0:99:d8:cc:5d:66:37:5d:
         3c:3a:29:e9:56:f6:b9:3b:c6:cb:13:e9:11:5d:39:fb:48:1a:
         9f:62:b2:58:85:2d:64:51:3f:39:a1:bf:73:30:04:e2:bb:39:
         f8:d5:2a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:49 2024 by rpki-client on console-ams.rpki-client.org