Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
File:                     qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json)
Hash identifier:          wFaaC3h8ep12CK5ICHEZciut76iRFTXCD1tvutSVmNw=
Subject key identifier:   02:14:81:7A:30:A8:73:D0:E4:8A:E6:D8:5D:2D:B3:F4:F2:BC:CB:2C
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Certificate issuer:       /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial:       019367ECA68A090E37DDE00E96A3207C8A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
Manifest number:          038B
Signing time:             Tue 26 Nov 2024 10:03:02 +0000
Manifest this update:     Tue 26 Nov 2024 10:03:02 +0000
Manifest next update:     Wed 27 Nov 2024 10:03:02 +0000
Files and hashes:         1: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: NwoBtrksOmtLnFrxW/K7kXNuW+Yj/4fywogR0q2KJu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:a6:8a:09:0e:37:dd:e0:0e:96:a3:20:7c:8a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
        Validity
            Not Before: Nov 26 10:03:02 2024 GMT
            Not After : Nov 27 10:03:02 2024 GMT
        Subject: CN=0214817a30a873d0e48ae6d85d2db3f4f2bccb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:59:3e:c5:ac:8f:d7:7a:e6:b5:05:2e:32:
                    2c:ff:43:c0:2c:11:ff:26:b3:55:58:c2:ee:b3:a3:
                    ae:34:8d:c2:bb:60:1f:c4:db:c1:c6:e6:45:10:86:
                    f4:b2:79:3d:06:7b:ec:b8:bd:60:a6:0b:7d:a3:b4:
                    a6:59:18:a5:f9:09:84:e4:8a:e3:07:12:e8:32:d4:
                    e1:95:9f:7c:1f:1e:24:b9:b1:fd:1a:b8:8f:64:a6:
                    2d:fc:11:d3:a3:6b:41:2a:f9:ce:f0:fc:3b:b2:4d:
                    66:38:7e:c8:aa:f5:68:2d:c6:c5:0f:e8:05:ba:b0:
                    02:ef:9d:c0:e3:7b:01:30:5e:18:72:07:4b:a4:08:
                    fc:2e:10:ef:f7:82:58:1e:e1:e2:ce:91:6d:9c:a8:
                    86:61:dd:e1:c8:7f:29:fc:6e:f7:9b:91:e5:f5:a7:
                    be:4d:89:bf:60:96:ab:76:4d:45:a2:68:20:49:07:
                    fa:a0:dd:59:0e:22:9f:49:a4:c5:e6:ef:26:ef:9f:
                    bb:6d:9e:5c:2e:d1:92:f1:e9:3e:33:4c:c4:e3:a3:
                    25:6b:c1:bb:bd:34:80:7c:c3:0f:d9:fe:78:82:c2:
                    54:31:82:b7:9b:ef:a7:cd:f0:71:29:82:8b:46:17:
                    7e:3c:c2:b5:b6:7d:ee:36:7d:89:c1:19:91:4b:e6:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:14:81:7A:30:A8:73:D0:E4:8A:E6:D8:5D:2D:B3:F4:F2:BC:CB:2C
            X509v3 Authority Key Identifier:
                keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:19:36:6d:ef:28:07:fa:52:9a:16:2d:d9:fe:b4:70:4a:af:
         be:66:43:4c:d3:d0:00:6c:07:a1:df:58:03:b3:02:7f:6c:78:
         64:ea:fb:14:70:30:8c:7c:3f:94:b0:05:13:cc:8c:49:39:68:
         f2:bc:7f:91:4c:31:02:a8:55:a0:cc:a0:17:c1:5a:4c:5a:31:
         38:e5:53:24:b9:f3:1c:7c:d1:74:0a:6d:6e:a6:9c:19:89:7d:
         65:23:65:76:9c:98:ce:f5:cf:93:11:90:26:1e:0a:d4:f3:78:
         c4:b4:20:52:95:c5:22:4d:88:a3:af:06:d4:f8:79:d2:cf:8a:
         c2:89:71:92:f2:35:f8:a8:ec:a5:8d:2b:5a:2f:5f:e8:67:07:
         49:9b:8e:9a:d0:f7:7a:f6:ef:79:c5:9b:e5:18:ce:39:39:56:
         a0:b4:7a:8d:07:45:86:53:9b:ec:52:4f:5b:b8:e0:32:71:1b:
         9d:d4:2e:0b:70:5b:19:c0:f5:5c:bb:0c:91:9e:29:c6:ec:53:
         64:a1:07:2a:3f:62:e9:a8:1b:8a:18:73:65:f5:5b:78:4c:eb:
         b4:f0:92:fe:8c:a0:11:96:2d:bf:92:72:e1:2b:03:82:bf:01:
         20:7b:13:19:57:12:39:13:da:1d:9f:a6:da:6f:c3:5f:56:9c:
         75:ea:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:21:56 2024 by rpki-client on console-fra.rpki-client.org