Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
File:                     QZ_Gk449XguSdHsy9tcP2vDlChU.mft (raw, json)
Hash identifier:          8rqhS0dWFvuTlNk3c/WhgIcEjzbw+PWcHBVCYlSDNoI=
Subject key identifier:   3E:9A:D1:9B:15:03:0F:04:17:12:06:43:F1:04:99:41:59:9D:31:95
Authority key identifier: 41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
Certificate issuer:       /CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Certificate serial:       019644441BD394DA9614D0F0DE9BC09DA162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
Manifest number:          14F0
Signing time:             Thu 17 Apr 2025 15:00:36 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:36 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:36 +0000
Files and hashes:         1: QZ_Gk449XguSdHsy9tcP2vDlChU.crl (hash: Z/cOwZbRx1UlGvacfsBpWKHjgw9NOOfwBEOje/T4Pjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:1b:d3:94:da:96:14:d0:f0:de:9b:c0:9d:a1:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
        Validity
            Not Before: Apr 17 15:00:36 2025 GMT
            Not After : Apr 18 15:00:36 2025 GMT
        Subject: CN=3e9ad19b15030f0417120643f1049941599d3195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:74:fc:4a:14:b5:39:22:45:4d:ed:18:47:
                    9c:a5:d4:bd:80:5b:70:8d:98:9f:8b:b9:10:9f:92:
                    59:dd:9d:19:8b:c2:1b:f4:27:47:77:c2:72:bb:bd:
                    e3:33:ec:49:61:07:b9:e3:24:f6:7f:2d:9e:04:68:
                    a7:f5:7d:56:b4:b7:58:a3:4a:fa:e8:ed:fc:da:f1:
                    9a:30:65:62:e5:f1:7f:0f:0a:97:26:74:1f:dc:ab:
                    e2:cb:69:eb:8b:5a:81:3e:9c:c3:9a:9c:3b:14:43:
                    0d:fa:70:5e:6b:5b:60:3b:94:28:a9:1f:95:59:36:
                    49:d3:25:f5:09:76:79:2d:89:90:2b:51:34:41:1e:
                    46:da:ba:0c:9b:13:24:1c:f8:54:08:23:61:d8:02:
                    ff:4a:e0:ea:b4:68:ae:4c:88:35:96:5f:22:dd:82:
                    eb:6f:98:73:37:b0:bd:83:29:0c:19:ec:0d:7e:33:
                    d5:54:aa:6b:a6:60:00:32:b8:0b:f3:78:3c:85:22:
                    8a:4e:16:f9:e4:c5:79:ff:2f:25:48:f4:32:f1:0e:
                    14:0b:2a:a6:d9:9a:ad:83:d3:3a:9c:82:f9:6b:34:
                    6a:8b:d1:97:fb:cb:ad:43:28:bd:4f:ec:00:79:af:
                    3f:98:ab:2c:24:84:a8:e1:22:6f:a9:4d:81:68:8f:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9A:D1:9B:15:03:0F:04:17:12:06:43:F1:04:99:41:59:9D:31:95
            X509v3 Authority Key Identifier:
                keyid:41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7a:98:3d:ef:dd:36:aa:13:56:33:f3:9e:ed:e0:ca:a3:95:
         83:9e:5c:f1:a3:ce:23:73:53:95:e9:b2:3d:f1:98:8b:aa:01:
         b1:b2:37:86:21:e3:fe:aa:41:b7:32:a6:f8:d4:60:d4:fa:a6:
         3f:d5:6e:10:17:57:f3:34:7f:0f:d9:e2:f6:78:10:86:c6:eb:
         9c:72:69:93:fa:bc:1e:34:9d:21:63:2c:ea:ea:57:0b:8a:95:
         65:93:ce:a7:10:74:3d:4c:2f:26:f5:11:23:a1:ec:fa:75:fd:
         06:85:3e:a1:e0:b9:2f:92:2e:10:fb:d4:4a:36:7c:e0:80:bd:
         5a:37:17:47:c9:d4:6b:45:5d:7c:28:be:c3:11:2e:ef:59:04:
         95:b2:a7:07:c8:66:fb:cb:00:c2:d5:19:d3:b9:89:a1:fd:16:
         95:02:9b:99:34:42:62:60:a2:d3:f0:a1:90:76:d7:a0:54:2b:
         1f:39:63:a1:cf:31:62:47:f2:a2:eb:21:92:69:c0:ca:c0:b6:
         40:90:49:cc:60:a6:dd:80:82:80:d6:2c:43:85:92:6d:fc:36:
         eb:d9:20:82:40:2e:77:5d:75:17:10:82:00:79:f3:d2:96:f0:
         74:a4:2e:48:6e:a8:5b:56:f6:7d:00:21:bb:b2:4a:e0:cb:9a:
         51:58:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:38:53 2025 by rpki-client