Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File:                     QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier:          x17cvbU+3zbi3uE7/9IflE2ad9U+W3hbpVx3ASkAsWc=
Subject key identifier:   98:16:01:90:2E:58:B8:29:79:1E:69:3E:02:3B:F7:D5:30:3D:FE:BF
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer:       /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial:       018F88FFAAC541A5FFB33AA4880562623960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number:          0145
Signing time:             Sat 18 May 2024 00:00:07 +0000
Manifest this update:     Sat 18 May 2024 00:00:07 +0000
Manifest next update:     Sun 19 May 2024 00:00:07 +0000
Files and hashes:         1: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: bP7NLZH2xvb6BzCDVk9lLW/VdUz226ElI/vveTcNDoE=)
                          2: SSv3lFleO0qDyxb3ifhp8e1wXR8.roa (hash: t9Yosc09ZFKXcT0pa+c0OT1f2fRjuhLHaA/m+0TmNx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:ff:aa:c5:41:a5:ff:b3:3a:a4:88:05:62:62:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
        Validity
            Not Before: May 18 00:00:07 2024 GMT
            Not After : May 19 00:00:07 2024 GMT
        Subject: CN=981601902e58b829791e693e023bf7d5303dfebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:8b:84:1b:eb:d5:06:b2:b8:f3:43:f3:36:
                    67:20:f4:a0:29:a1:56:45:69:73:e2:d0:a7:22:9e:
                    70:0f:f9:c5:1c:b6:e1:6d:99:20:00:e6:47:51:03:
                    0e:e2:46:a1:e6:e1:3b:f7:49:83:8e:50:58:12:49:
                    8d:fb:fe:3c:95:53:4c:f9:c5:db:9c:9d:cd:c8:d9:
                    f6:13:d3:ec:2c:5b:4e:e4:2a:3f:cb:45:bb:fa:5a:
                    4a:34:8b:6e:c9:40:aa:45:c2:f4:ba:42:3a:85:04:
                    39:9a:c6:c9:ed:53:90:6e:ee:f1:42:ba:39:15:b1:
                    43:c6:6b:72:bd:bb:9e:75:e8:ed:45:3a:45:e5:ff:
                    cf:f3:fd:a9:d1:ac:e2:dc:ec:2b:2e:2d:de:33:2d:
                    29:1c:ed:d5:17:5d:4c:d3:77:cf:66:51:e7:2a:23:
                    a5:0f:bf:a5:57:dd:f6:b8:24:94:f3:19:01:17:7c:
                    76:98:3c:ba:c6:47:ea:fa:aa:47:88:30:a9:0f:15:
                    32:5f:38:d1:2f:18:e5:77:f4:6b:0f:26:a3:8b:89:
                    d4:c0:84:49:95:6e:c5:0a:b0:b1:38:27:1e:b3:fe:
                    9c:dc:78:86:02:1e:41:a0:cb:99:32:1d:3c:69:8a:
                    2b:2c:5d:ab:df:83:4e:8a:50:ef:e8:04:c1:ce:79:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:01:90:2E:58:B8:29:79:1E:69:3E:02:3B:F7:D5:30:3D:FE:BF
            X509v3 Authority Key Identifier:
                keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:25:a7:31:84:5b:9e:f0:2a:c8:90:d9:01:d6:1c:cd:0b:c3:
         01:f2:60:fd:3e:32:d8:26:53:cb:3f:6f:fe:ed:f5:66:e2:f2:
         96:72:cb:9f:12:94:0f:44:5a:b4:90:45:8f:b8:a1:7a:32:fe:
         12:f2:a9:b1:9a:99:fc:d3:90:ad:90:c2:17:b8:81:af:e9:c2:
         d1:01:30:54:f8:45:5a:f9:7b:fe:f8:c6:cb:c3:22:83:7c:54:
         80:68:f5:d4:66:36:c5:f7:16:ab:28:96:86:51:f9:26:0a:5c:
         01:14:02:12:f2:01:ff:e1:8a:50:e9:b3:2d:c0:42:28:9e:7a:
         59:82:c3:17:bb:37:47:dd:91:e8:17:01:75:35:0e:17:2d:d0:
         70:17:57:2f:90:e3:21:c6:13:17:f8:9e:4a:db:01:a6:b3:0e:
         6e:e7:eb:76:3c:de:86:d1:10:22:7e:32:2e:6f:1b:eb:ee:f6:
         d7:50:b2:a8:18:08:79:d3:e2:51:64:9c:be:a6:3e:74:46:e3:
         07:f1:37:62:d6:3d:5f:6c:f7:ad:2a:1b:a0:06:cd:56:26:51:
         b9:b5:b8:23:c8:97:e8:9f:28:0d:31:c4:0e:4e:c7:a1:e2:56:
         72:12:70:81:b0:d9:ba:93:8a:b6:06:5a:31:fe:99:83:4a:9b:
         f7:1a:28:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+I/6rFQaX/szqkiAViYjlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzdiNmRhYTIwYjVlMDYxODYyYjZmYjk5ZTIzNmFjMmMy
ZTM0ZjgwHhcNMjQwNTE4MDAwMDA3WhcNMjQwNTE5MDAwMDA3WjAzMTEwLwYDVQQD
Eyg5ODE2MDE5MDJlNThiODI5NzkxZTY5M2UwMjNiZjdkNTMwM2RmZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWOLhBvr1QayuPND8zZnIPSgKaFW
RWlz4tCnIp5wD/nFHLbhbZkgAOZHUQMO4kah5uE790mDjlBYEkmN+/48lVNM+cXb
nJ3NyNn2E9PsLFtO5Co/y0W7+lpKNItuyUCqRcL0ukI6hQQ5msbJ7VOQbu7xQro5
FbFDxmtyvbuedejtRTpF5f/P8/2p0azi3OwrLi3eMy0pHO3VF11M03fPZlHnKiOl
D7+lV932uCSU8xkBF3x2mDy6xkfq+qpHiDCpDxUyXzjRLxjld/RrDyaji4nUwIRJ
lW7FCrCxOCces/6c3HiGAh5BoMuZMh08aYorLF2r34NOilDv6ATBznnXuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgWAZAuWLgpeR5pPgI799UwPf6/MB8GA1UdIwQY
MBaAFEE3ttqiC14GGGK2+5niNqwsLjT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMt
MGIwMmE0NzMyNDc5LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMtMGIwMmE0NzMyNDc5
LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyWnMYRb
nvAqyJDZAdYczQvDAfJg/T4y2CZTyz9v/u31ZuLylnLLnxKUD0RatJBFj7ihejL+
EvKpsZqZ/NOQrZDCF7iBr+nC0QEwVPhFWvl7/vjGy8Mig3xUgGj11GY2xfcWqyiW
hlH5JgpcARQCEvIB/+GKUOmzLcBCKJ56WYLDF7s3R92R6BcBdTUOFy3QcBdXL5Dj
IcYTF/ieStsBprMObufrdjzehtEQIn4yLm8b6+7211CyqBgIedPiUWScvqY+dEbj
B/E3YtY9X2z3rSoboAbNViZRubW4I8iX6J8oDTHEDk7HoeJWchJwgbDZupOKtgZa
Mf6Zg0qb9xookA==
-----END CERTIFICATE-----
Generated at Sat May 18 02:26:51 2024 by rpki-client on console-ams.rpki-client.org