Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
File:                     QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft (raw, json)
Hash identifier:          Qv9dn18g6vgURmu8ZKzPmLdbRvq7ueKFYbw/3eN2aGY=
Subject key identifier:   CD:E7:B0:04:70:CC:30:80:2D:A9:13:75:27:CC:19:6E:FB:9B:18:C6
Authority key identifier: 41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
Certificate issuer:       /CN=4155087a81848bf7b37ff8be59751d79440d8116
Certificate serial:       01906F08EC0C99F405AA8C20DF1259E9F153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
Manifest number:          014B
Signing time:             Mon 01 Jul 2024 16:02:53 +0000
Manifest this update:     Mon 01 Jul 2024 16:02:53 +0000
Manifest next update:     Tue 02 Jul 2024 16:02:53 +0000
Files and hashes:         1: QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl (hash: 9OSWzhfLTDNr4h+7HDe26+U1RKHrsGCzx0nZJpqRtmw=)
                          2: X9w_c7Pz-xgfKBC1Ef5p17MOXUU.roa (hash: 8/KuqScyUR6/k4uJAeQq6kbXtWqZ54/y4HjjTsBUTyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6f:08:ec:0c:99:f4:05:aa:8c:20:df:12:59:e9:f1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4155087a81848bf7b37ff8be59751d79440d8116
        Validity
            Not Before: Jul  1 16:02:53 2024 GMT
            Not After : Jul  2 16:02:53 2024 GMT
        Subject: CN=cde7b00470cc30802da9137527cc196efb9b18c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:a4:0d:e1:30:6f:33:9e:75:e5:e2:9b:5b:
                    96:e8:22:d6:91:fd:88:17:e9:ac:d1:35:5e:31:c4:
                    5b:3a:96:2c:e5:b6:43:19:40:45:27:6e:aa:c3:ba:
                    b0:46:df:f7:e7:12:22:60:b3:20:44:04:d5:f9:b2:
                    e3:1b:b5:d3:89:19:d8:38:77:44:0b:a7:75:e1:93:
                    e1:a3:b3:13:c0:5d:9f:b6:af:57:dd:8f:10:d0:92:
                    b6:7b:20:7e:7c:aa:1b:4b:96:9b:c4:18:93:65:59:
                    dd:36:75:0d:f4:bf:4d:d7:c7:0c:a3:84:4d:85:bc:
                    e3:e5:1b:2e:af:54:9f:71:5c:e5:06:c6:9f:ac:e6:
                    42:30:df:d0:89:8a:67:12:ab:78:59:ce:3d:0c:a7:
                    a6:9b:43:57:a0:96:2e:aa:79:ca:3e:fd:65:ce:c3:
                    aa:32:db:d8:07:d5:4a:91:a7:4a:b3:f8:d9:6e:67:
                    de:1d:10:d0:ae:27:48:7d:cd:98:c3:11:d5:6b:ec:
                    e8:45:a1:74:f3:ab:a2:6e:46:75:36:a1:ba:ab:6c:
                    74:aa:8d:67:8f:b8:98:a6:cb:ce:a5:69:75:4c:16:
                    81:9d:29:36:52:bd:67:60:24:3c:e8:88:ef:02:e5:
                    0c:61:f0:14:12:4c:ef:99:23:8b:53:bf:5b:59:e1:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E7:B0:04:70:CC:30:80:2D:A9:13:75:27:CC:19:6E:FB:9B:18:C6
            X509v3 Authority Key Identifier:
                keyid:41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:45:43:e7:c9:72:b6:87:ce:00:88:50:d7:e2:49:ab:e9:97:
         54:35:82:8d:6b:76:de:ce:37:57:39:99:5a:eb:6c:3c:19:25:
         48:66:46:02:82:53:51:06:d3:d5:6e:2a:8a:c8:cb:08:32:55:
         bb:d0:4c:5c:d2:73:dd:10:18:1f:4c:d8:d4:09:9f:3a:b7:85:
         9b:98:76:06:df:d3:05:96:32:92:8c:fd:57:fa:55:0f:2b:cb:
         d0:e2:20:84:ea:c1:a7:f9:88:ec:6f:77:01:fd:97:58:98:5f:
         11:46:87:a6:fd:75:a4:ee:70:b1:17:77:58:ea:26:1b:a7:e5:
         cf:f5:30:68:1e:6a:88:96:68:77:57:6b:9c:af:ca:24:a3:40:
         ad:c0:3e:64:bf:18:ed:36:52:43:29:de:e8:b6:b4:0a:25:9a:
         28:6e:80:4c:5f:50:93:1c:a4:2f:30:15:a2:dd:61:22:21:d9:
         3b:56:31:13:a5:71:73:0f:c1:b6:66:29:bc:99:b5:77:cc:ed:
         52:e7:9f:3b:d5:5c:f7:8d:53:bc:1c:a0:74:68:6d:94:c5:63:
         29:7b:3d:c3:3a:bd:37:c4:1c:57:51:3b:02:6f:1b:47:c6:6a:
         0e:f6:a5:5b:4e:42:ee:ae:4b:6f:2c:8e:86:49:df:a1:d2:7a:
         10:db:33:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 18:37:51 2024 by rpki-client on console-fra.rpki-client.org