Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File:                     RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier:          r5XxyZsChYvndQXccH9HzpS9naLmrckUiN1UmMuX0SA=
Subject key identifier:   F1:B5:AD:CB:FA:C2:8E:FF:CF:76:DE:C6:3E:54:EC:45:E9:32:CF:27
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer:       /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial:       018F874B0AEE0C0795D9ADFD1665C0472DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number:          018E
Signing time:             Fri 17 May 2024 16:03:12 +0000
Manifest this update:     Fri 17 May 2024 16:03:12 +0000
Manifest next update:     Sat 18 May 2024 16:03:12 +0000
Files and hashes:         1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: FjWhxWtISHCkWyARg5aFGFIMW3KbWTMXk0nYXCU8vjU=)
                          2: g8eGoKQ1UyGr8ZbCz1Yn-djlPuI.roa (hash: kt2ecdqAjZE1CTlkyhpXVd7ntcJOY+OWCNblGmMEIkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:0a:ee:0c:07:95:d9:ad:fd:16:65:c0:47:2d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
        Validity
            Not Before: May 17 16:03:12 2024 GMT
            Not After : May 18 16:03:12 2024 GMT
        Subject: CN=f1b5adcbfac28effcf76dec63e54ec45e932cf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0c:cb:59:16:e6:18:11:cd:62:59:6c:1a:48:
                    0a:20:98:d4:f2:cb:8b:04:97:87:76:90:0c:70:cc:
                    d1:9f:b4:cf:d2:8f:5f:a8:ce:b6:99:54:8a:81:63:
                    a9:a1:60:88:fc:98:7d:f7:fb:4c:a2:42:06:f7:b9:
                    75:df:49:f5:69:b2:77:2e:2c:3b:51:5a:ef:ba:10:
                    c0:af:fa:4f:b2:c5:1b:38:74:ff:76:c1:5e:dc:6a:
                    5a:ef:58:c0:30:dd:9a:df:86:b3:e6:2a:61:d2:40:
                    d5:d7:d2:6a:f6:ca:ce:73:ae:a9:ba:d3:9b:f1:85:
                    d8:d1:a2:b5:cf:31:4a:f0:db:0c:b8:92:32:ed:4d:
                    6d:2e:93:a9:ee:de:4e:ed:fc:fe:b7:ac:e4:e4:13:
                    b0:fa:0f:09:12:15:21:aa:9c:9f:7a:36:73:2f:4a:
                    10:e1:bb:83:ff:86:ad:67:b5:1a:9f:4b:60:0e:12:
                    86:bc:84:b8:f6:d0:24:df:5b:27:10:ab:d5:d6:96:
                    88:56:de:15:08:ff:eb:bc:a5:9c:87:ae:3f:7e:9a:
                    e5:e9:c8:98:99:b5:61:40:d4:b8:fe:c7:39:f3:08:
                    66:2f:63:d0:48:35:7b:f5:ff:7a:9a:de:fc:fa:43:
                    27:a7:c9:05:0c:51:e2:93:a6:3f:86:e0:1d:a1:7c:
                    7b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:AD:CB:FA:C2:8E:FF:CF:76:DE:C6:3E:54:EC:45:E9:32:CF:27
            X509v3 Authority Key Identifier:
                keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:04:4e:59:67:c5:61:c5:59:3d:cf:b7:12:3c:6d:94:28:9f:
         21:48:c7:0d:24:dc:be:b9:60:6c:ab:6f:ae:ca:eb:9d:22:51:
         8d:8b:2c:04:a1:be:69:42:40:f7:76:61:c2:ab:0c:bd:33:0c:
         24:85:55:ab:94:16:a2:08:b3:24:cc:09:8f:4c:8a:86:88:8c:
         cd:37:f9:cb:94:a1:ab:85:e2:de:db:4d:df:c2:25:56:4b:30:
         98:64:88:ac:a9:3e:a2:d0:99:19:d2:e8:3c:d5:10:d9:3b:2e:
         30:87:78:d7:04:1a:e7:7f:cd:0c:7e:59:db:ed:18:08:e6:3d:
         7b:e5:61:c7:77:4a:13:29:02:59:16:51:95:77:2c:97:ac:e6:
         ff:d0:bf:85:93:ba:c8:c7:b8:ca:cc:73:2b:5f:28:f6:cb:f4:
         60:99:d1:dd:b9:fd:95:0c:aa:50:9d:fb:82:d5:29:3d:5e:99:
         93:cf:e0:dd:5f:0b:ae:22:a5:43:78:eb:53:5a:e6:28:00:00:
         6e:06:10:d7:5a:25:f5:ee:cc:8b:5e:7b:18:aa:37:14:c9:a3:
         d3:07:27:85:43:dd:ed:62:d9:1c:cc:df:e6:b4:a1:a2:bc:22:
         53:c0:5f:da:13:a5:64:75:07:4f:d3:4b:2d:4c:1d:c2:23:04:
         ef:66:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:47 2024 by rpki-client on console-fra.rpki-client.org