Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
File:                     QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft (raw, json)
Hash identifier:          h6TvkDLNtUm50s2Kokwv6fX+zabjwYFEMAaMq8wpbT4=
Subject key identifier:   63:9A:69:D0:97:BB:16:55:2D:06:EB:0E:28:62:C9:E5:6E:84:58:5D
Authority key identifier: 42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
Certificate issuer:       /CN=424c165b6a49349541c65af9b21580163819f284
Certificate serial:       01938C9CD7438D3A1BD1963F66FD986ACB68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
Manifest number:          072B
Signing time:             Tue 03 Dec 2024 13:01:49 +0000
Manifest this update:     Tue 03 Dec 2024 13:01:49 +0000
Manifest next update:     Wed 04 Dec 2024 13:01:49 +0000
Files and hashes:         1: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl (hash: CW+7moYGMMom5VcJxM8gMfNptlxbNWe5dIBpb1M7qR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9c:d7:43:8d:3a:1b:d1:96:3f:66:fd:98:6a:cb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424c165b6a49349541c65af9b21580163819f284
        Validity
            Not Before: Dec  3 13:01:49 2024 GMT
            Not After : Dec  4 13:01:49 2024 GMT
        Subject: CN=639a69d097bb16552d06eb0e2862c9e56e84585d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:2a:b1:6f:43:4a:5e:f7:47:c0:c5:66:e5:
                    f4:c8:af:8c:a0:06:21:67:3e:10:fb:b3:48:dc:27:
                    a5:b7:0d:06:42:06:c9:51:9e:5d:70:b3:81:04:d8:
                    d9:0c:e1:93:e1:ee:e5:97:c1:02:83:6b:fa:c1:52:
                    b6:dd:54:30:54:d7:3f:b6:29:f2:8a:a4:73:bf:e8:
                    7b:c5:79:ef:01:0c:6a:15:26:5a:b8:d4:9b:4e:c1:
                    ae:ef:17:f3:d8:85:c1:99:77:41:aa:ad:3c:78:78:
                    74:70:65:53:fa:c8:35:0b:50:e7:33:37:07:79:c1:
                    d2:0f:09:e0:a6:20:c8:ba:a0:92:3a:67:ad:9e:f7:
                    e8:48:ea:2e:92:96:dc:c8:39:bd:6e:0e:cc:0c:3b:
                    66:d9:20:a4:4a:bb:e5:a9:15:76:df:79:f3:7b:c1:
                    84:5f:68:fa:96:55:7e:0d:99:c0:89:d5:8b:e2:58:
                    ad:44:ab:19:66:d8:15:76:ae:79:33:ca:8b:03:6f:
                    ba:36:30:92:18:21:75:ce:d1:a2:78:7c:5e:ef:0e:
                    97:6e:60:63:af:8d:16:d6:37:3e:b6:ce:81:ea:eb:
                    59:95:c6:cc:c5:82:5b:60:bf:75:95:c2:8a:bc:67:
                    12:4d:dd:df:14:0a:fb:1f:a2:97:3e:55:04:a2:e3:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9A:69:D0:97:BB:16:55:2D:06:EB:0E:28:62:C9:E5:6E:84:58:5D
            X509v3 Authority Key Identifier:
                keyid:42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:2d:2c:db:e5:2a:92:1c:48:8f:7a:11:e2:7e:3a:c4:df:
         6c:df:19:67:90:54:dd:4e:05:f4:da:fc:71:71:8f:14:18:85:
         23:54:92:77:e9:f7:90:6b:48:56:dc:a4:7b:ad:0a:b4:39:c8:
         7b:85:18:90:56:a3:dc:58:19:83:8d:81:58:50:81:36:55:4f:
         1b:61:83:8d:f7:ec:f1:ef:b5:c3:53:5a:41:bd:78:aa:1a:a5:
         f4:76:fd:af:60:32:ef:69:19:1e:fa:93:d0:9c:c7:63:ce:86:
         b1:78:f9:4c:d1:69:d8:1c:df:59:13:0f:a8:30:a2:10:0c:0d:
         fa:be:97:3e:27:77:90:9b:f7:47:6e:d4:23:e7:8d:f5:86:f9:
         7e:a3:cb:a6:f0:b1:51:7b:3c:28:2f:4f:7d:32:e7:2d:90:8e:
         7d:9a:90:bc:0c:72:69:d8:30:f6:f6:40:a3:2e:8e:4f:bb:e3:
         39:45:cc:c0:90:51:7a:af:dd:1c:70:9e:2f:1d:9b:cc:23:c8:
         7a:9a:61:0c:93:a1:c3:a3:0e:27:06:ea:56:11:64:20:64:a8:
         86:ad:80:09:0b:44:a2:05:eb:44:02:3b:b5:ef:37:7d:79:49:
         0d:e1:08:75:e7:70:a1:ca:15:76:4b:b5:ad:3a:63:8b:1b:a0:
         cc:99:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:40:43 2024 by rpki-client on console-ams.rpki-client.org