Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File:                     QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier:          ny5Tqk/K4+42wTZd4EDZqhxpUezGrcQtnF0qk7AZGZk=
Subject key identifier:   0A:49:1A:3C:56:9A:DB:BF:B4:0C:4F:80:2B:36:11:55:3C:FA:2A:18
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer:       /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial:       018FB3B52B2643DCFE9171C476ED052ECAF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number:          118E
Signing time:             Sun 26 May 2024 07:02:25 +0000
Manifest this update:     Sun 26 May 2024 07:02:25 +0000
Manifest next update:     Mon 27 May 2024 07:02:25 +0000
Files and hashes:         1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: GHur7yoRlICsqJPwgbMJ1vftMbSm4Xf/vRO/uAs5lXA=)
                          2: bA1dKLnbWGcVINOsR2T4l0XKSQc.roa (hash: YPCRmb5CEm5v8fKi8nCJxCVoTB/3UVgocMDnCvit0Ho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b5:2b:26:43:dc:fe:91:71:c4:76:ed:05:2e:ca:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
        Validity
            Not Before: May 26 07:02:25 2024 GMT
            Not After : May 27 07:02:25 2024 GMT
        Subject: CN=0a491a3c569adbbfb40c4f802b3611553cfa2a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:c4:5c:e3:b8:52:ec:14:34:9a:3d:50:3f:
                    22:9d:99:a7:f9:62:47:c8:64:bb:6f:2d:13:c4:05:
                    04:d1:bd:ff:d9:26:2c:33:58:ec:25:f1:01:8c:0a:
                    64:b3:da:74:39:a9:e0:e8:29:3a:05:97:97:3b:52:
                    e6:d6:04:1f:c3:65:c2:a1:34:8a:08:2f:b2:02:24:
                    87:3b:67:4d:e8:7a:c9:77:c5:ea:e4:0d:96:5c:f0:
                    7a:a4:6b:8f:57:9e:27:eb:9d:df:88:de:31:8e:e0:
                    44:5c:d2:e3:c7:1b:05:6a:d9:ae:4d:d9:47:67:49:
                    0c:c9:f9:49:ff:05:a7:d5:ab:f0:2f:47:12:57:72:
                    69:d5:65:e3:0d:cf:fd:9d:59:a2:8d:79:fe:4f:d1:
                    5d:87:9c:f0:cb:9f:39:1c:bb:f0:2a:83:c5:32:b4:
                    19:50:25:d5:84:d5:09:20:b2:86:00:fb:b8:5f:bc:
                    c5:1e:34:c9:91:c8:c7:97:06:c4:48:51:23:70:f2:
                    a9:97:69:ed:5c:f6:23:c8:6f:4a:fa:43:7a:08:98:
                    79:34:4d:31:d6:a4:2c:87:93:f9:b9:87:12:ae:c9:
                    28:8a:d9:af:df:2c:33:8a:e4:50:ce:29:da:dc:06:
                    e2:d2:ca:ee:90:f3:84:3d:5f:5b:47:d7:25:88:45:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:1A:3C:56:9A:DB:BF:B4:0C:4F:80:2B:36:11:55:3C:FA:2A:18
            X509v3 Authority Key Identifier:
                keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:0c:5e:1f:f7:4e:9a:ef:72:6d:81:8a:d4:fe:ed:64:36:a5:
         fd:1c:e0:8b:77:e5:2b:2c:6c:72:eb:77:1d:ff:75:9a:0e:e1:
         f1:fb:6e:f7:1a:cd:b0:41:5d:d8:0b:bc:e1:77:47:b0:ee:c8:
         02:3a:f6:45:e5:58:03:b2:0a:e0:8e:c2:fd:77:7c:b5:3b:a7:
         c3:ed:3b:bc:9e:86:00:3e:54:27:d8:df:d0:c0:25:eb:12:8a:
         f3:0c:41:ed:c2:8f:91:8e:8d:ac:ec:85:21:d1:ab:df:e3:e4:
         29:fc:1f:31:e5:0a:ac:a2:ec:ef:da:7a:6c:98:ad:22:0e:32:
         d0:de:28:d9:23:25:78:ba:f5:59:b9:b8:18:e2:4d:c9:55:97:
         a0:aa:30:6e:d6:00:1a:d8:87:c9:cd:1c:af:68:24:ba:ac:a1:
         b9:dd:22:c4:1f:06:5f:9e:2f:20:1d:8b:65:1e:73:1d:78:d5:
         b8:a4:f5:fd:af:bf:18:d1:db:9c:3d:0f:03:ce:b5:fb:3a:46:
         5f:63:81:d3:cf:b9:2a:b3:5d:90:0e:c9:91:56:3c:a1:73:40:
         bf:22:0c:d8:84:6f:bc:10:ae:c7:24:d9:bd:0c:94:ce:7e:b3:
         59:21:7b:24:1d:aa:24:5f:2b:23:49:38:8d:67:7c:d3:17:af:
         de:df:e0:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ztSsmQ9z+kXHEdu0FLsr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDRmYTU0NDAwYmM2Y2ZjMzBjYjgzMTFhODE5ZDViZGE0
MjFhNzIwHhcNMjQwNTI2MDcwMjI1WhcNMjQwNTI3MDcwMjI1WjAzMTEwLwYDVQQD
EygwYTQ5MWEzYzU2OWFkYmJmYjQwYzRmODAyYjM2MTE1NTNjZmEyYTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvLEXOO4UuwUNJo9UD8inZmn+WJH
yGS7by0TxAUE0b3/2SYsM1jsJfEBjApks9p0Oang6Ck6BZeXO1Lm1gQfw2XCoTSK
CC+yAiSHO2dN6HrJd8Xq5A2WXPB6pGuPV54n653fiN4xjuBEXNLjxxsFatmuTdlH
Z0kMyflJ/wWn1avwL0cSV3Jp1WXjDc/9nVmijXn+T9Fdh5zwy585HLvwKoPFMrQZ
UCXVhNUJILKGAPu4X7zFHjTJkcjHlwbESFEjcPKpl2ntXPYjyG9K+kN6CJh5NE0x
1qQsh5P5uYcSrskoitmv3ywziuRQzina3Abi0srukPOEPV9bR9cliEVLgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApJGjxWmtu/tAxPgCs2EVU8+ioYMB8GA1UdIwQY
MBaAFEBE+lRAC8bPwwy4MRqBnVvaQhpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt
YmI0MzNiYTQ3NmYyLzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy
LzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwxeH/dO
mu9ybYGK1P7tZDal/Rzgi3flKyxscut3Hf91mg7h8ftu9xrNsEFd2Au84XdHsO7I
Ajr2ReVYA7IK4I7C/Xd8tTunw+07vJ6GAD5UJ9jf0MAl6xKK8wxB7cKPkY6NrOyF
IdGr3+PkKfwfMeUKrKLs79p6bJitIg4y0N4o2SMleLr1Wbm4GOJNyVWXoKowbtYA
GtiHyc0cr2gkuqyhud0ixB8GX54vIB2LZR5zHXjVuKT1/a+/GNHbnD0PA861+zpG
X2OB08+5KrNdkA7JkVY8oXNAvyIM2IRvvBCuxyTZvQyUzn6zWSF7JB2qJF8rI0k4
jWd80xev3t/glQ==
-----END CERTIFICATE-----
Generated at Sun May 26 08:47:47 2024 by rpki-client on console-ams.rpki-client.org