Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File:                     Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier:          Q9Fi3fccus6m7M7o6HniWEmQUfLtH0srzaLjzq3aGLU=
Subject key identifier:   BB:24:8E:05:62:E6:3D:95:74:A1:1C:61:9E:3A:2D:58:0F:C2:CE:AC
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer:       /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial:       018F8635881AB035138AF8FCA1379EF1394D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 11:00:06 +0000
Manifest this update:     Fri 17 May 2024 11:00:06 +0000
Manifest next update:     Sat 18 May 2024 11:00:06 +0000
Files and hashes:         1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: dhZ/NPh9oMbEf/BaO0zmfLSCliY1W82MNW7WsP4tGqA=)
                          2: Y5O-iH2qCSBMHHZ3oIydR3IfwRY.roa (hash: bCAaRk74inDYImJBN7EyI6QyT8xTKdl269c6x0Gba3w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:88:1a:b0:35:13:8a:f8:fc:a1:37:9e:f1:39:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
        Validity
            Not Before: May 17 11:00:06 2024 GMT
            Not After : May 18 11:00:06 2024 GMT
        Subject: CN=bb248e0562e63d9574a11c619e3a2d580fc2ceac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:1e:37:2d:a9:8b:a8:7f:9e:2e:80:9b:0a:
                    b3:a0:43:ad:d5:ce:9e:90:32:c0:ac:02:6e:82:58:
                    81:af:73:64:af:5e:db:75:74:48:69:23:97:d4:9d:
                    76:49:84:bf:37:0d:50:6e:fa:1b:e9:8d:41:a4:1f:
                    b2:d1:37:da:7c:13:5b:81:11:28:16:83:7a:0f:09:
                    55:be:04:69:b2:a0:68:97:0b:d3:ba:14:cb:1c:1c:
                    39:ba:0f:3c:67:3b:9b:da:b8:bf:7a:0a:60:f8:52:
                    06:6e:15:bf:f6:a1:da:50:90:94:5a:87:0d:6a:f0:
                    57:6d:0d:31:b0:e2:e2:0e:d8:c3:1c:d1:95:41:a8:
                    6a:2b:55:7a:cd:09:26:bf:d6:3e:ad:7a:bd:cc:fb:
                    30:36:bb:02:6d:04:7d:20:e0:d2:b1:c4:5c:37:d1:
                    81:7c:fe:f2:50:27:bf:93:19:7f:b5:c1:b5:d5:1f:
                    42:2c:f2:96:0e:f3:ad:8b:f7:f8:51:f1:71:e3:2d:
                    62:3e:ab:ea:af:2b:cd:e4:70:27:24:01:2a:c7:3b:
                    fd:f1:13:74:3f:ac:12:4d:5f:3e:70:7c:8c:a3:ce:
                    7e:c6:7d:fc:57:55:8d:a9:93:c6:58:56:5e:ea:d2:
                    aa:12:74:32:1e:01:c8:07:e1:13:f1:83:9d:b5:75:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:24:8E:05:62:E6:3D:95:74:A1:1C:61:9E:3A:2D:58:0F:C2:CE:AC
            X509v3 Authority Key Identifier:
                keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:ba:ce:1e:65:23:87:a7:a6:74:58:00:25:72:b0:dc:5f:
         ba:ff:36:04:7f:9e:30:be:99:fe:c4:cb:66:bf:b5:22:fd:6e:
         19:cc:c2:1e:9f:e1:fc:4a:42:47:76:31:47:42:68:24:ee:f9:
         a7:52:74:27:3e:c6:54:68:77:1b:0c:af:5c:53:38:33:23:3e:
         20:b9:14:df:ab:47:db:2d:06:14:3b:1c:23:95:74:aa:ef:34:
         cc:f9:19:85:11:45:11:81:2d:90:0c:5c:34:cc:63:69:bf:6c:
         59:e3:f0:f0:d4:ce:31:a5:6d:4c:ae:3c:bc:22:78:fd:76:4e:
         7f:22:db:29:17:8e:cb:e0:7e:d3:07:37:b5:c4:55:16:ae:44:
         1f:38:ae:23:18:0f:f6:86:ff:c1:be:ac:05:40:be:b1:59:85:
         97:70:b2:e0:69:60:db:b4:84:12:85:0e:3d:21:7c:3c:f4:c9:
         db:98:66:80:78:d4:d1:f3:8d:d4:10:b6:8b:cb:52:ba:b2:83:
         49:5a:c3:5b:25:2f:7c:ab:8e:b1:8b:85:e8:ce:a3:97:e3:ce:
         3d:8f:c8:f3:73:a2:aa:a7:ac:fb:c2:8d:06:2a:37:af:93:9a:
         1a:d9:a7:57:21:da:0c:27:9d:f8:36:e8:63:b6:ae:21:72:4b:
         56:46:7d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNYgasDUTivj8oTee8TlNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZTBhMzY0MTMxODQxMDU2ZDQ4YjJkNzg4ZWEwMGNhNGI5
MWRiNTYwHhcNMjQwNTE3MTEwMDA2WhcNMjQwNTE4MTEwMDA2WjAzMTEwLwYDVQQD
EyhiYjI0OGUwNTYyZTYzZDk1NzRhMTFjNjE5ZTNhMmQ1ODBmYzJjZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBQeNy2pi6h/ni6AmwqzoEOt1c6e
kDLArAJugliBr3Nkr17bdXRIaSOX1J12SYS/Nw1Qbvob6Y1BpB+y0TfafBNbgREo
FoN6DwlVvgRpsqBolwvTuhTLHBw5ug88Zzub2ri/egpg+FIGbhW/9qHaUJCUWocN
avBXbQ0xsOLiDtjDHNGVQahqK1V6zQkmv9Y+rXq9zPswNrsCbQR9IODSscRcN9GB
fP7yUCe/kxl/tcG11R9CLPKWDvOti/f4UfFx4y1iPqvqryvN5HAnJAEqxzv98RN0
P6wSTV8+cHyMo85+xn38V1WNqZPGWFZe6tKqEnQyHgHIB+ET8YOdtXWaPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLskjgVi5j2VdKEcYZ46LVgPws6sMB8GA1UdIwQY
MBaAFEPgo2QTGEEFbUiy14jqAMpLkdtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgt
NGIwODFjYzJiMzlhLzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgtNGIwODFjYzJiMzlh
LzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTO6zh5l
I4enpnRYACVysNxfuv82BH+eML6Z/sTLZr+1Iv1uGczCHp/h/EpCR3YxR0JoJO75
p1J0Jz7GVGh3GwyvXFM4MyM+ILkU36tH2y0GFDscI5V0qu80zPkZhRFFEYEtkAxc
NMxjab9sWePw8NTOMaVtTK48vCJ4/XZOfyLbKReOy+B+0wc3tcRVFq5EHziuIxgP
9ob/wb6sBUC+sVmFl3Cy4Glg27SEEoUOPSF8PPTJ25hmgHjU0fON1BC2i8tSurKD
SVrDWyUvfKuOsYuF6M6jl+POPY/I83Oiqqes+8KNBio3r5OaGtmnVyHaDCed+Dbo
Y7auIXJLVkZ9OQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:17:28 2024 by rpki-client on console-ams.rpki-client.org