Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
File:                     qag61DyItM5E6CDhFd6cU34qVKY.mft (raw, json)
Hash identifier:          lJusBo/WFp8NNP5I5GrjyH/N7z2/H+gIhILvRBqBiNw=
Subject key identifier:   37:74:DB:F3:40:3F:58:11:B0:EB:76:78:73:D9:46:CA:E7:1F:21:98
Authority key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
Certificate issuer:       /CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Certificate serial:       018F882486841D793421848BEC68CC892C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
Manifest number:          0418
Signing time:             Fri 17 May 2024 20:00:46 +0000
Manifest this update:     Fri 17 May 2024 20:00:46 +0000
Manifest next update:     Sat 18 May 2024 20:00:46 +0000
Files and hashes:         1: qag61DyItM5E6CDhFd6cU34qVKY.crl (hash: HfWEnMFp+OiTYh+spk7BS2ns89jiQ4/gBMAfwZx/rWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:86:84:1d:79:34:21:84:8b:ec:68:cc:89:2c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
        Validity
            Not Before: May 17 20:00:46 2024 GMT
            Not After : May 18 20:00:46 2024 GMT
        Subject: CN=3774dbf3403f5811b0eb767873d946cae71f2198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:f9:bd:27:7a:60:cd:bc:37:2e:df:e6:aa:
                    18:16:e9:c0:30:cb:17:d5:35:b1:90:ed:b0:10:ee:
                    42:36:34:9b:bd:05:68:7d:84:70:4d:a6:71:9f:1d:
                    26:47:d3:ab:14:14:26:53:93:b6:89:00:43:22:40:
                    e3:e6:8e:1c:06:3a:4b:1e:98:68:32:f4:29:12:09:
                    61:81:e8:f3:9e:2c:75:b5:ed:6e:10:b4:c7:23:d2:
                    ad:6c:bc:b2:38:d0:b5:c2:92:3e:59:cd:1a:bd:f0:
                    07:c0:76:f4:05:6c:d0:27:f7:67:1b:7c:fe:50:67:
                    b0:5a:74:98:fe:b7:95:53:13:7a:eb:73:60:f3:a2:
                    64:82:87:1d:ad:3c:91:c5:eb:1a:e9:00:81:04:dd:
                    6d:25:ad:93:08:19:47:83:42:e0:e0:a8:48:89:d4:
                    1c:93:ca:de:d8:c6:7a:4c:33:e5:b7:04:fb:94:87:
                    95:dd:8b:09:52:cf:76:9e:ee:2f:e6:e1:e1:8c:6a:
                    a9:97:c4:56:b9:01:49:01:98:ae:ad:aa:9e:68:6d:
                    f9:aa:e0:29:67:6d:7c:c6:77:68:f8:05:53:78:96:
                    0a:82:5a:50:46:94:4e:fb:d7:11:2a:58:10:da:5e:
                    62:8e:6a:04:f4:17:e3:a6:bb:22:d6:b1:28:1b:d9:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:74:DB:F3:40:3F:58:11:B0:EB:76:78:73:D9:46:CA:E7:1F:21:98
            X509v3 Authority Key Identifier:
                keyid:A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:34:9c:a6:c6:b8:4c:e7:c6:94:40:61:de:66:21:2a:71:19:
         80:70:7c:bc:9d:38:7f:af:b7:c9:5b:70:3c:11:ca:2b:ed:b8:
         e1:83:9a:a2:67:46:ce:7a:7f:24:71:d5:be:49:6c:80:7e:18:
         43:5c:1a:7e:05:1f:ad:f8:91:39:cb:1c:b9:0e:36:64:ed:dd:
         8f:4e:34:e1:c8:83:76:10:d8:55:1e:95:34:cc:1b:54:d5:c3:
         d5:6f:94:54:f2:84:40:fd:02:7e:13:91:7b:9b:53:b5:a2:c7:
         6f:cf:d0:a1:ee:f1:b6:75:b9:bf:44:6b:54:9d:56:38:a4:95:
         7b:5f:a3:cf:4c:5b:b3:1e:31:68:e8:4f:b4:b5:af:51:18:24:
         cb:68:8d:12:dd:99:99:bb:80:e1:65:15:fa:99:52:ea:ef:af:
         1f:31:39:e8:1d:b0:25:6d:77:d3:e7:7c:7a:53:38:d4:45:0e:
         77:48:73:b9:eb:0b:e1:d9:f4:30:b4:55:49:43:0c:35:31:69:
         84:49:da:7c:f7:c1:e0:58:dd:87:1c:cf:32:8f:56:33:ac:4d:
         0c:10:46:3c:8f:95:55:88:f7:46:ea:67:fe:c6:fc:a5:b1:63:
         46:d4:44:e6:74:3f:e3:22:a3:c2:68:7b:d0:c9:87:ff:5e:a2:
         3d:25:a8:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJIaEHXk0IYSL7GjMiSwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTgzYWQ0M2M4OGI0Y2U0NGU4MjBlMTE1ZGU5YzUzN2Uy
YTU0YTYwHhcNMjQwNTE3MjAwMDQ2WhcNMjQwNTE4MjAwMDQ2WjAzMTEwLwYDVQQD
EygzNzc0ZGJmMzQwM2Y1ODExYjBlYjc2Nzg3M2Q5NDZjYWU3MWYyMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Er5vSd6YM28Ny7f5qoYFunAMMsX
1TWxkO2wEO5CNjSbvQVofYRwTaZxnx0mR9OrFBQmU5O2iQBDIkDj5o4cBjpLHpho
MvQpEglhgejznix1te1uELTHI9KtbLyyONC1wpI+Wc0avfAHwHb0BWzQJ/dnG3z+
UGewWnSY/reVUxN663Ng86JkgocdrTyRxesa6QCBBN1tJa2TCBlHg0Lg4KhIidQc
k8re2MZ6TDPltwT7lIeV3YsJUs92nu4v5uHhjGqpl8RWuQFJAZiuraqeaG35quAp
Z218xndo+AVTeJYKglpQRpRO+9cRKlgQ2l5ijmoE9Bfjprsi1rEoG9kxIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDd02/NAP1gRsOt2eHPZRsrnHyGYMB8GA1UdIwQY
MBaAFKmoOtQ8iLTOROgg4RXenFN+KlSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lYWY0M2EtMWYxMS00OGM4LTljODAt
MThiZTVmNDY0ZWQ2LzEvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9lYWY0M2EtMWYxMS00OGM4LTljODAtMThiZTVmNDY0ZWQ2
LzEvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzScpsa4
TOfGlEBh3mYhKnEZgHB8vJ04f6+3yVtwPBHKK+244YOaomdGznp/JHHVvklsgH4Y
Q1wafgUfrfiROcscuQ42ZO3dj0404ciDdhDYVR6VNMwbVNXD1W+UVPKEQP0CfhOR
e5tTtaLHb8/Qoe7xtnW5v0RrVJ1WOKSVe1+jz0xbsx4xaOhPtLWvURgky2iNEt2Z
mbuA4WUV+plS6u+vHzE56B2wJW130+d8elM41EUOd0hzuesL4dn0MLRVSUMMNTFp
hEnafPfB4FjdhxzPMo9WM6xNDBBGPI+VVYj3Rupn/sb8pbFjRtRE5nQ/4yKjwmh7
0MmH/16iPSWotg==
-----END CERTIFICATE-----
Generated at Fri May 17 21:13:21 2024 by rpki-client on console-ams.rpki-client.org