Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
File:                     QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json)
Hash identifier:          3NLcbOngY6sXlAJUWInlNTjLwsnz89ulnQmTuAH85xk=
Subject key identifier:   07:3E:65:42:45:B2:B5:16:75:59:FB:80:1D:12:73:32:29:4E:10:F8
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Certificate issuer:       /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial:       018F87490E968CE7A452B932B2AE786D16BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
Manifest number:          0821
Signing time:             Fri 17 May 2024 16:01:02 +0000
Manifest this update:     Fri 17 May 2024 16:01:02 +0000
Manifest next update:     Sat 18 May 2024 16:01:02 +0000
Files and hashes:         1: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: yHwksZOhuE4kv/PWwSowiPcgH2nEXg5O4FJwtszVmYo=)
                          2: nYfg1vgVg-5qlhSrx4bug70j7SY.roa (hash: JY3f1T2dYQgt/DTxQbtcNSjpb4PUF1wU0IHADbacKn4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:0e:96:8c:e7:a4:52:b9:32:b2:ae:78:6d:16:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
        Validity
            Not Before: May 17 16:01:02 2024 GMT
            Not After : May 18 16:01:02 2024 GMT
        Subject: CN=073e654245b2b5167559fb801d127332294e10f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:cb:d8:38:87:07:e7:1e:ef:50:b3:d3:3f:
                    e8:44:f6:74:b8:b1:dd:51:b1:b6:6f:b1:d8:99:44:
                    02:96:cd:ef:69:e5:6d:35:66:e2:87:97:b4:e0:dc:
                    d1:f4:5f:4f:14:ae:1d:18:4d:ce:a9:68:9f:47:0a:
                    04:7f:1c:53:fd:e6:db:ac:33:b4:ed:dd:91:4e:5a:
                    c3:6a:c0:e3:de:88:da:f2:01:0e:76:cf:cf:a3:f2:
                    73:b4:aa:20:57:f8:cc:db:62:93:f8:2d:05:a2:63:
                    2c:d1:41:8b:ba:28:14:e0:6e:20:be:63:1d:5e:01:
                    9e:ab:77:96:1d:1b:77:cd:2a:f8:0f:aa:f9:23:a8:
                    60:6e:8e:97:f9:58:bb:5b:c9:90:8d:b2:72:35:09:
                    5b:6b:84:3b:46:f5:0c:32:1e:d0:91:6d:07:d9:92:
                    c0:b9:b0:6d:f2:bf:f8:cf:4e:6f:c8:28:ef:e2:63:
                    73:72:f3:21:30:3f:d9:22:9c:7b:de:3c:60:c9:c3:
                    23:0f:fc:70:dd:dc:18:a3:d2:65:d1:64:f8:2a:4a:
                    30:ff:23:93:00:00:ce:74:06:64:9b:18:44:c8:0e:
                    43:49:d3:f7:fc:18:c3:bf:b9:98:c2:e6:1b:67:35:
                    01:6e:4c:a8:07:59:8b:60:16:23:a6:b5:4e:d4:ea:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3E:65:42:45:B2:B5:16:75:59:FB:80:1D:12:73:32:29:4E:10:F8
            X509v3 Authority Key Identifier:
                keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:27:db:9e:b3:a1:17:a2:11:34:c9:a4:40:22:52:9e:30:10:
         0b:63:4d:ff:d3:61:07:7c:62:57:ed:e1:ab:c0:24:cb:28:1c:
         42:2f:42:b8:04:50:19:75:8f:12:20:90:b8:48:fa:0e:80:88:
         19:05:87:b9:5d:79:e5:ff:d2:d5:94:4d:89:ee:4c:0a:3b:82:
         d2:76:5b:91:69:5a:01:8c:ce:b5:ba:04:4b:59:fb:fe:f6:fd:
         dc:15:38:40:3f:88:36:de:36:e4:01:9c:b7:0f:7d:c1:ca:fd:
         ad:f1:79:6b:61:2b:46:9b:ca:fa:05:6a:f4:e1:a3:0f:2f:8c:
         08:35:d4:a8:c2:7c:2d:fd:ae:3a:15:0a:83:ea:18:db:2a:a6:
         86:45:be:94:46:4b:9f:96:37:ad:53:e5:fa:c0:9f:d9:4d:75:
         97:5a:e3:68:21:44:11:fa:d8:78:1b:6a:b9:75:61:49:c8:b2:
         58:67:c5:ec:52:2a:ff:cc:4b:b4:90:66:4f:36:6d:df:90:cd:
         e6:fc:d8:9a:c9:1f:c7:5d:d2:2a:5f:53:89:e5:dd:a9:5c:94:
         f8:13:0b:6b:9c:b7:30:06:b2:14:d1:df:94:2b:96:d3:d2:ed:
         91:b8:fd:2a:a8:3f:de:d3:07:93:eb:2c:f0:f2:3f:cb:9c:3e:
         f0:72:94:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:05:44 2024 by rpki-client on console-ams.rpki-client.org