Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
File:                     qoxALCO4BeCVMBFbvkREAg9PIDQ.mft (raw, json)
Hash identifier:          wpTGPprj7O2XD1h12JaLVtk0UWn4b/yMYJr+9PacwbM=
Subject key identifier:   A7:04:B0:35:0C:14:3F:75:09:93:77:C3:30:B1:19:FB:79:47:57:9F
Authority key identifier: AA:8C:40:2C:23:B8:05:E0:95:30:11:5B:BE:44:44:02:0F:4F:20:34
Certificate issuer:       /CN=aa8c402c23b805e09530115bbe4444020f4f2034
Certificate serial:       018F8748F28EEC84CFFAD3E6BA1FFE735728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
Manifest number:          0276
Signing time:             Fri 17 May 2024 16:00:55 +0000
Manifest this update:     Fri 17 May 2024 16:00:55 +0000
Manifest next update:     Sat 18 May 2024 16:00:55 +0000
Files and hashes:         1: qoxALCO4BeCVMBFbvkREAg9PIDQ.crl (hash: MvzR8RQkDwhSGt3qhObJjbH+bau41P0O18PaCwzxiP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f2:8e:ec:84:cf:fa:d3:e6:ba:1f:fe:73:57:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa8c402c23b805e09530115bbe4444020f4f2034
        Validity
            Not Before: May 17 16:00:55 2024 GMT
            Not After : May 18 16:00:55 2024 GMT
        Subject: CN=a704b0350c143f75099377c330b119fb7947579f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:28:65:0d:a0:59:fe:3d:fc:a7:38:b6:15:
                    7f:f6:b0:51:25:2b:06:8a:ae:e9:57:1d:7f:5d:78:
                    d0:77:98:f0:81:cf:4c:0b:54:94:61:24:d8:63:70:
                    a6:b2:c6:bc:4a:30:4a:d9:c5:2a:1a:71:a5:4e:30:
                    45:fe:8d:e6:c0:05:43:7d:31:25:13:3a:06:ae:f5:
                    a3:35:ca:f5:30:c1:33:e5:ba:47:ce:bc:fb:ad:9b:
                    87:04:b1:15:68:db:02:c7:fe:bd:54:b6:9b:b5:f9:
                    8c:99:3f:9b:d8:65:b6:ce:5a:b3:53:7d:5e:81:e7:
                    4c:c0:79:0f:11:4b:73:0a:40:a0:33:44:7a:51:fe:
                    10:aa:86:f9:1d:07:21:18:ac:24:93:9f:fe:40:19:
                    9c:31:04:87:23:a1:ee:10:89:91:cf:d5:1d:71:fc:
                    ff:e4:b2:74:b7:68:33:10:10:80:4e:03:ea:03:d4:
                    80:ac:c8:9c:ca:03:3e:58:36:3e:d8:5c:8e:21:db:
                    8a:19:dc:e3:64:71:be:95:fe:88:05:d1:7b:4c:fb:
                    3b:7a:dd:e8:58:01:fd:48:20:24:f7:5a:45:b1:f9:
                    4f:3a:d0:8d:39:58:58:90:98:34:da:be:8c:cd:08:
                    fd:37:5a:ac:09:e3:29:a6:24:28:b8:03:dc:ac:ac:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:04:B0:35:0C:14:3F:75:09:93:77:C3:30:B1:19:FB:79:47:57:9F
            X509v3 Authority Key Identifier:
                keyid:AA:8C:40:2C:23:B8:05:E0:95:30:11:5B:BE:44:44:02:0F:4F:20:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:58:07:ea:d0:50:64:b1:c3:fa:87:69:42:53:08:b7:c7:7a:
         1b:31:be:d0:a0:95:51:5b:00:37:83:64:cd:f0:14:a8:34:36:
         48:91:de:ae:10:9f:55:08:16:c1:56:c9:0a:8c:f3:39:2a:0f:
         48:23:ee:94:7a:b6:e3:f1:30:c1:be:b2:eb:e0:d2:0a:4f:72:
         21:59:b7:93:c6:ea:9d:2a:c5:44:b3:1f:d3:84:f5:94:2a:86:
         5b:b8:30:74:4b:f8:fa:89:4b:71:4b:4b:92:d9:68:30:dc:4b:
         86:85:95:1f:33:5c:47:27:ea:aa:a4:e4:90:22:e3:f8:da:17:
         21:70:f9:a9:e6:8a:aa:d1:cf:d8:33:22:0b:10:fa:4c:12:0c:
         ca:99:4c:e5:bd:d9:ca:ea:bd:60:b3:9e:a7:77:a7:c2:ca:d8:
         9e:4d:26:61:8a:95:31:78:e3:46:4a:20:62:41:fa:d4:cd:6c:
         13:b9:12:ac:8f:a8:f6:67:f0:83:21:23:91:29:48:82:2e:1f:
         84:0c:18:53:f4:bb:eb:48:4b:87:06:52:f2:c6:a9:57:6f:86:
         17:6c:e2:87:d2:09:c3:bc:ff:57:fe:16:7b:9c:82:dd:12:48:
         7e:b5:b4:08:4b:f5:b1:5c:ae:cb:fd:ed:72:fc:5e:6a:df:47:
         b1:07:79:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:14:57 2024 by rpki-client on console-ams.rpki-client.org