Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
File:                     Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json)
Hash identifier:          fNMpBpZ787ZjwU8Oj44O2PAEAucmznSIpgQEWQr/ZGs=
Subject key identifier:   BB:18:2D:B2:C8:5C:95:60:78:50:8A:D8:EE:F2:F7:5D:50:42:02:88
Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
Certificate issuer:       /CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Certificate serial:       018F87492F6885894502369DD469C8D54C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
Manifest number:          0A5F
Signing time:             Fri 17 May 2024 16:01:11 +0000
Manifest this update:     Fri 17 May 2024 16:01:11 +0000
Manifest next update:     Sat 18 May 2024 16:01:11 +0000
Files and hashes:         1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: F2a6ytLxY5eQeb+fSowudLVHhoyMIhXRn9V+Xw+bxR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:2f:68:85:89:45:02:36:9d:d4:69:c8:d5:4c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2
        Validity
            Not Before: May 17 16:01:11 2024 GMT
            Not After : May 18 16:01:11 2024 GMT
        Subject: CN=bb182db2c85c956078508ad8eef2f75d50420288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:f8:0d:f3:1c:d7:ce:36:04:cf:85:c7:20:
                    ce:9a:5c:c1:f7:c7:eb:b9:79:cf:aa:d6:72:bf:8a:
                    8c:b8:5c:3c:c9:74:74:09:fe:dc:65:a4:8e:89:f5:
                    2a:a0:52:0d:13:02:0c:aa:29:76:8e:86:6d:78:dc:
                    04:d8:c3:92:db:b8:c8:71:96:ba:88:4d:34:85:74:
                    8a:37:14:e4:4a:7c:30:c4:2f:15:41:e8:8e:59:eb:
                    43:ce:3c:c7:9a:ab:5d:d1:92:10:fa:98:b8:a8:4f:
                    bc:04:63:e5:16:d9:10:86:1c:51:ac:ca:59:63:94:
                    b2:74:ad:86:c5:cb:6e:69:ad:0d:6c:04:26:f0:28:
                    fc:a6:9b:a2:82:5b:9d:bb:6f:c7:22:3d:51:02:07:
                    9f:a1:7d:52:38:45:eb:4a:51:44:ce:1c:a4:9f:f2:
                    24:f2:da:04:7f:4d:e0:f7:82:26:84:5a:2b:08:a4:
                    bc:96:50:a4:62:70:d4:a6:15:e4:bf:ff:1f:2c:48:
                    bb:be:cb:16:50:56:a9:3b:94:d2:57:07:38:52:1b:
                    6c:fa:f4:e0:c5:d4:90:02:fb:ad:d4:2a:f9:0b:60:
                    ad:9d:fb:f2:2b:3b:05:f2:77:22:7f:33:cf:7a:0b:
                    a8:a2:47:35:41:a8:50:c1:4f:e7:51:87:53:a5:50:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:18:2D:B2:C8:5C:95:60:78:50:8A:D8:EE:F2:F7:5D:50:42:02:88
            X509v3 Authority Key Identifier:
                keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:67:d4:10:57:93:d2:b7:0e:a5:72:c6:ef:a8:5f:2c:5c:
         a2:b2:7b:67:9f:12:62:f8:77:b0:72:83:af:d7:fc:b0:da:93:
         27:e5:97:99:39:17:5f:08:7a:3c:eb:04:6b:63:ad:7f:03:6e:
         d2:06:f8:1b:be:95:bb:51:f0:f9:6d:83:72:df:11:c8:8c:35:
         28:e6:df:0b:d1:0e:f3:ce:d9:76:a8:60:81:a9:f1:4f:43:42:
         bd:47:fc:d1:23:ce:f3:23:38:dc:21:92:cd:ea:41:e3:03:bd:
         10:35:f7:6d:24:35:69:6d:9f:4e:bc:2b:71:bd:08:b7:ba:d2:
         03:75:ee:93:b0:1b:d1:7a:9a:e1:ef:d4:56:4b:25:b7:1d:36:
         3a:b7:62:10:a0:20:43:55:ee:3b:26:81:83:9a:47:b0:9c:4f:
         0d:93:b5:7f:0f:99:a9:4b:98:4a:a3:29:8b:e4:a9:95:87:07:
         63:dc:a1:ea:54:9e:04:5e:bc:05:c8:3b:de:a0:1a:cd:9b:35:
         d9:a3:95:cd:aa:70:42:cc:42:9a:dd:dd:aa:fa:85:28:41:63:
         ba:6a:29:72:30:37:a6:a9:f9:ce:90:9b:ca:c4:d2:bb:04:55:
         c2:ce:e0:d7:28:85:58:1d:69:d6:99:b2:04:3e:52:dc:4c:ae:
         5e:31:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:35:33 2024 by rpki-client on console-fra.rpki-client.org