Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
File:                     QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json)
Hash identifier:          K5trCT0kWYHjRIPPXnNG6vGBPqJ1nCYXLnovRyfY+CU=
Subject key identifier:   F8:CE:A7:C8:4F:C8:C9:A7:6F:10:48:CE:A1:88:5F:C6:A0:71:7B:5E
Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Certificate issuer:       /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Certificate serial:       0191F9D9C0F0C93C3561FB4329B45EBDB589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
Manifest number:          015C
Signing time:             Mon 16 Sep 2024 08:01:23 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:23 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:23 +0000
Files and hashes:         1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: UKnQAdzsWolKWAQzNK/vs5iEjgNSg9sUCm7VyOgSiWY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:c0:f0:c9:3c:35:61:fb:43:29:b4:5e:bd:b5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
        Validity
            Not Before: Sep 16 08:01:23 2024 GMT
            Not After : Sep 17 08:01:23 2024 GMT
        Subject: CN=f8cea7c84fc8c9a76f1048cea1885fc6a0717b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:c2:0e:93:17:88:6f:9a:7a:7a:7c:c0:e3:
                    11:3b:92:bf:bb:99:fd:7f:de:07:01:95:1f:f6:dc:
                    11:83:a7:24:f2:34:2e:62:f8:33:48:30:45:23:79:
                    68:cb:10:c4:59:30:85:d0:37:cc:d5:9e:73:dd:dd:
                    9a:a9:fc:8e:e0:5f:72:1f:64:22:e4:e0:36:c1:b1:
                    12:57:18:8c:d1:c3:f4:1c:af:3f:40:f8:f0:c9:77:
                    8b:e9:b7:44:d4:d8:18:71:6f:0c:5f:2c:1b:f8:c8:
                    c9:7f:43:11:10:f3:1d:5b:9f:91:2b:bb:c5:38:05:
                    43:bb:40:d2:99:1e:bf:31:9b:f4:8c:26:c8:f0:10:
                    c2:6c:08:99:ed:72:04:f7:09:d8:a4:6e:c6:0d:2e:
                    7e:97:a1:8e:30:45:bb:91:21:e5:0b:25:29:b6:99:
                    e8:0b:d1:a9:16:85:c5:3c:02:6f:00:c8:31:5c:4b:
                    62:01:98:68:6c:27:d7:4c:db:69:f7:ae:91:eb:10:
                    aa:21:3f:8e:57:17:81:e2:bd:a4:26:8b:df:95:aa:
                    38:19:de:b2:db:e6:2a:29:16:10:0f:24:5a:bb:f4:
                    d9:39:77:ba:4e:88:41:ac:bc:77:6c:6f:a5:41:f0:
                    42:6f:48:82:18:4f:06:8e:d1:fa:e6:69:ac:27:be:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CE:A7:C8:4F:C8:C9:A7:6F:10:48:CE:A1:88:5F:C6:A0:71:7B:5E
            X509v3 Authority Key Identifier:
                keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:33:f9:f2:87:1d:fe:42:75:41:04:36:5d:41:e2:f8:cd:db:
         d3:b8:97:ba:a8:b3:a7:09:e8:98:71:de:c6:1d:af:8b:0f:9f:
         ba:2b:87:47:c0:63:1f:49:81:b7:1a:3e:a5:bc:e0:07:fa:20:
         f2:38:44:96:68:d9:48:13:48:91:92:3b:eb:68:3c:b4:2e:f9:
         70:1d:cf:41:9b:9c:14:10:4f:16:c5:9e:98:a5:9c:04:2e:62:
         fd:84:e5:91:fd:03:ff:e3:b7:a7:8e:9a:d9:77:b9:63:8e:78:
         c5:ba:03:82:20:04:0c:be:c5:ec:ee:c8:96:c1:9e:89:91:d9:
         dd:6d:4d:c4:a1:45:56:62:8c:f0:c8:8b:92:0d:fb:fa:ca:68:
         0d:c7:37:82:11:ad:45:2f:33:a0:ca:92:fd:77:49:71:e8:21:
         56:9c:50:6a:38:b9:19:62:ba:f5:85:0c:a3:42:d3:e3:73:ad:
         59:2b:4e:08:d0:8a:6f:0e:d6:16:b3:17:23:af:dd:f0:34:67:
         06:cf:1d:cd:fa:43:ff:4a:de:ab:6d:a0:4b:9a:2f:71:6f:5a:
         b8:10:e7:93:fa:9b:32:b3:74:2c:10:a2:72:a5:79:6c:97:81:
         ca:2f:26:a3:e2:55:d7:5b:3c:b2:06:54:a8:fd:f6:9c:22:ab:
         7c:67:83:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:14:54 2024 by rpki-client on console-ams.rpki-client.org