Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
File:                     qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json)
Hash identifier:          r05/Wg5QwP3GphZCTreyCiRd0pxgxtWcm0JxRbd83t4=
Subject key identifier:   11:0D:DE:67:6F:9F:EB:C1:81:7F:AB:33:4A:F1:DF:7F:65:FF:7E:C6
Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Certificate issuer:       /CN=a934e106be5386ed10675ee0de336dc77e200d59
Certificate serial:       0190765256693EF4543F9D51D15F15C8AC8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
Manifest number:          45
Signing time:             Wed 03 Jul 2024 02:00:25 +0000
Manifest this update:     Wed 03 Jul 2024 02:00:25 +0000
Manifest next update:     Thu 04 Jul 2024 02:00:25 +0000
Files and hashes:         1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: dHgvtWHh4XeSy4iSio/HPfXQTt9yvGDdDWHCGREw6Iw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 20:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:76:52:56:69:3e:f4:54:3f:9d:51:d1:5f:15:c8:ac:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59
        Validity
            Not Before: Jul  3 02:00:25 2024 GMT
            Not After : Jul  4 02:00:25 2024 GMT
        Subject: CN=110dde676f9febc1817fab334af1df7f65ff7ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:61:36:30:46:ba:ed:7c:16:6d:77:2a:5c:db:
                    1d:2e:2a:04:e8:e8:e6:56:30:03:f8:68:13:0a:d5:
                    74:5d:e6:8f:ba:10:f6:ad:4d:7e:ce:0b:85:34:99:
                    f7:60:ae:4d:e6:df:ea:95:c4:d5:5d:e3:d6:64:63:
                    d2:64:77:2b:58:9a:2e:82:37:6f:b2:82:74:36:bb:
                    48:1b:ca:50:04:c4:ea:d1:b0:7b:3d:1f:16:0c:57:
                    f7:dd:61:1d:47:87:85:e6:8e:4c:c7:db:7f:45:b8:
                    b3:06:ae:79:1e:63:05:6c:7c:4e:53:57:b9:d7:9f:
                    29:05:5d:f5:f4:53:ed:77:da:9c:d1:2f:34:2c:b0:
                    33:00:f6:a3:fc:09:ff:01:e7:75:90:0e:24:3a:19:
                    82:c4:38:c0:c9:e6:f3:65:79:91:e0:55:45:27:34:
                    a5:c6:54:4a:0c:57:cb:d7:9e:4f:d4:ee:b3:11:64:
                    9d:2d:af:3e:25:45:6b:cf:a2:bd:0c:5b:c7:41:09:
                    70:51:39:cb:b4:a8:fb:11:72:be:8f:2e:89:2e:d2:
                    19:26:1a:e8:65:cc:18:2a:ad:13:da:eb:b9:11:88:
                    13:b6:0e:c6:aa:27:5b:f0:52:fd:c2:65:5f:8a:5a:
                    2b:70:8a:e5:5a:a1:8c:b3:ac:36:2e:d9:6d:e4:77:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0D:DE:67:6F:9F:EB:C1:81:7F:AB:33:4A:F1:DF:7F:65:FF:7E:C6
            X509v3 Authority Key Identifier:
                keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:ea:06:04:4a:4e:0f:d5:37:ad:de:59:7b:d2:17:ec:8d:
         97:ea:0a:13:24:fd:9e:9f:28:c5:99:e8:37:a8:e9:e1:26:a3:
         44:2c:6d:fb:dc:58:05:22:31:68:1a:38:50:e9:3e:c0:0e:a3:
         a4:a5:18:fb:72:05:48:45:5a:6a:2c:3c:ab:45:8c:aa:1e:91:
         a1:b5:06:d3:35:23:53:95:c9:6b:da:f5:1f:8e:f6:29:a3:0c:
         45:0a:5b:93:cb:ea:ee:d4:e7:5b:de:d7:1a:d2:12:40:6e:4a:
         55:6b:94:db:94:d2:4f:bd:63:dc:49:07:c7:1c:10:4d:cf:80:
         1d:7a:7f:2b:8f:48:74:49:61:83:8b:b5:eb:a1:e6:14:b4:07:
         8f:da:f5:61:7b:cc:c8:e9:22:7a:4c:56:f5:63:c4:75:61:4c:
         05:3b:90:06:1e:4f:6d:71:d5:39:0e:0b:cb:df:1c:27:17:b3:
         fe:87:f8:22:90:74:fa:c5:7d:86:46:58:a9:91:0f:74:31:75:
         f0:fa:16:9e:cd:2c:3f:46:b1:73:35:b6:37:5a:11:bc:0f:c3:
         25:28:c1:29:a0:75:16:00:39:9b:67:ae:0e:6d:6c:01:3e:9e:
         50:ae:53:de:60:77:34:98:bb:ce:a4:a7:6f:49:c9:43:9c:ca:
         db:1e:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 03:41:42 2024 by rpki-client on console-fra.rpki-client.org