Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File:                     4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier:          ZwlFawfrRkt5fk4K1pS4qTJqvTYhJbyf1iCfwEQoxXI=
Subject key identifier:   B5:F1:16:52:62:20:D2:E4:B5:11:86:62:D1:DE:02:4F:A2:53:6B:F7
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer:       /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial:       018F87B69D4792C43DB177AB4403FAB8505E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number:          01D8
Signing time:             Fri 17 May 2024 18:00:42 +0000
Manifest this update:     Fri 17 May 2024 18:00:42 +0000
Manifest next update:     Sat 18 May 2024 18:00:42 +0000
Files and hashes:         1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: x3zL4LVLZgi8Vkb6YPNLLzKbNPxXnFuOn1pUiAIL86E=)
                          2: iqimJ-IIr4mqPeQ_AKfx4dPb7hc.roa (hash: DEky/jObPKKgsBnfDnjznSj6HA5Ur7Qt2u3qDKNMN8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:9d:47:92:c4:3d:b1:77:ab:44:03:fa:b8:50:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
        Validity
            Not Before: May 17 18:00:42 2024 GMT
            Not After : May 18 18:00:42 2024 GMT
        Subject: CN=b5f116526220d2e4b5118662d1de024fa2536bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:38:7b:c5:27:29:38:17:fe:87:7a:64:4f:
                    9c:af:53:ca:d9:3d:2a:ff:e0:44:0d:44:a3:f9:be:
                    50:de:76:86:54:55:2f:48:3e:ee:7e:77:fa:f0:5f:
                    58:cb:70:ca:6b:90:32:9e:bc:ab:89:11:bc:e3:05:
                    36:de:5d:22:d7:98:5f:42:b5:e9:ce:45:4d:d0:6b:
                    3c:39:a7:d8:94:8c:b9:0f:8f:b9:e0:67:4c:33:f0:
                    ec:67:98:cb:35:73:55:3b:04:42:c1:6a:39:f5:63:
                    f4:8b:40:62:42:92:29:07:83:66:c9:46:a4:e7:47:
                    42:7c:e5:60:62:b9:13:25:0d:a2:8c:0d:3a:83:9d:
                    8e:12:21:06:1e:b2:25:f6:88:1b:49:aa:22:fc:f7:
                    65:e2:40:6f:32:64:d9:b8:11:e5:0c:43:62:64:87:
                    ce:12:0c:be:cf:d8:a8:f2:67:63:77:38:d6:e6:d6:
                    5c:88:8d:4f:14:f8:7f:f1:c5:28:a2:c2:d1:d5:28:
                    49:e4:5a:82:89:8a:65:eb:59:a1:1c:3f:95:7f:5e:
                    2a:b5:09:7f:56:9d:2c:76:a0:08:74:86:8b:34:02:
                    c4:6e:90:0d:52:08:7f:4c:07:07:a7:a3:4d:d5:ad:
                    c3:94:0f:19:e2:11:6b:01:b7:53:13:4d:1e:3b:a8:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F1:16:52:62:20:D2:E4:B5:11:86:62:D1:DE:02:4F:A2:53:6B:F7
            X509v3 Authority Key Identifier:
                keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f9:03:5c:20:17:75:22:da:41:ff:fa:62:6f:8a:3d:a4:ea:
         0b:3b:e8:89:4a:de:5e:f8:b7:67:cc:c2:45:ff:5f:9c:f8:17:
         33:0f:93:c3:bc:45:65:a5:0b:5e:c2:c6:09:b1:0c:7c:26:8d:
         52:eb:32:39:0a:ed:1d:4d:5f:88:9f:6f:d3:2c:4a:a7:3a:a6:
         cd:a9:2d:4a:c8:79:1c:16:d1:f3:46:93:6d:87:ad:a4:6f:b7:
         da:cd:15:38:5b:31:6e:52:d9:d3:ea:b9:56:51:e7:d2:71:56:
         e0:70:c7:ce:ec:d3:39:b5:f8:b8:7c:24:f9:cd:60:38:f7:88:
         da:48:d9:cb:2d:fa:aa:14:42:02:e3:17:1c:da:16:9e:f1:55:
         37:94:e1:49:d2:58:10:54:75:5f:d0:ec:fd:8e:a7:7b:17:bb:
         19:82:2e:c2:ae:3f:04:1a:a1:0b:77:d5:3d:ae:13:22:42:e3:
         8e:31:d9:61:b9:f6:83:c7:15:33:19:77:5c:b0:4c:50:38:60:
         0d:5b:8d:be:b0:88:d4:ad:cc:e3:f1:ff:46:6b:c0:b1:4f:83:
         07:9f:0c:f3:11:22:ed:33:04:dc:05:5a:47:9e:64:d8:97:4b:
         83:2c:db:7c:02:a4:43:7e:76:90:f2:6a:44:74:66:45:9b:d7:
         a4:b3:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:43 2024 by rpki-client on console-fra.rpki-client.org