Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File:                     QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier:          OJquNyk4VkV6SJ0A5ZgcjU1NqpVSXNWamaiS9TwlCYQ=
Subject key identifier:   3C:74:CB:B1:DA:20:5F:02:D1:D1:3B:A5:4B:A3:E6:B9:09:F1:F1:92
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer:       /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial:       018F877F362004192C7E5601FF67EBF287E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number:          02AF
Signing time:             Fri 17 May 2024 17:00:12 +0000
Manifest this update:     Fri 17 May 2024 17:00:12 +0000
Manifest next update:     Sat 18 May 2024 17:00:12 +0000
Files and hashes:         1: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: rd/CTv6G5RjdpDV7j9e44aBBC2fCB05h5IKwKRTdM84=)
                          2: VlTYydzBeSh0HGitwbaqTu9341g.roa (hash: hU9mIPU5QXzdh907gvAXotLBoj4DtVW9uI00X4Ud/sA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:36:20:04:19:2c:7e:56:01:ff:67:eb:f2:87:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
        Validity
            Not Before: May 17 17:00:12 2024 GMT
            Not After : May 18 17:00:12 2024 GMT
        Subject: CN=3c74cbb1da205f02d1d13ba54ba3e6b909f1f192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:55:d7:1d:af:6f:87:dc:0b:77:04:c3:84:
                    d7:dd:00:d8:05:7c:7b:d8:32:b5:e9:f8:fa:e9:e8:
                    76:8e:9a:11:e7:7e:b0:93:24:4d:59:45:dd:b2:29:
                    c1:71:02:cb:98:37:49:b1:b0:f7:1d:3a:f5:2e:74:
                    22:76:11:6d:67:f4:b9:0e:be:09:85:27:75:b7:1c:
                    ea:0d:f4:47:33:95:97:51:b6:1b:d6:0c:4d:7c:7d:
                    53:cd:76:c1:05:8c:5a:b7:18:5c:8e:6d:fe:c5:32:
                    82:40:bd:b1:6d:a0:46:da:c5:91:a1:de:f0:5f:5e:
                    87:bd:c0:65:79:13:92:68:a8:54:ab:7f:9c:7f:a8:
                    68:7f:59:ea:ff:db:9f:31:e9:03:0f:21:55:08:92:
                    b3:0d:94:15:3b:0a:a4:7c:61:26:76:f0:33:80:71:
                    fa:25:df:fa:38:cb:4d:81:58:46:1a:80:ec:a9:76:
                    9f:86:8a:65:58:2c:01:84:f7:7c:e6:95:91:33:da:
                    bf:45:07:53:61:81:5c:49:cf:9e:3b:6a:35:eb:97:
                    0d:ef:54:7d:88:74:e3:28:aa:61:ad:d6:dc:82:4a:
                    ce:db:42:45:10:1c:17:ec:f6:40:43:ca:3f:0a:eb:
                    0c:e3:76:63:49:11:59:49:ea:9c:ad:02:0d:2e:ab:
                    59:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:74:CB:B1:DA:20:5F:02:D1:D1:3B:A5:4B:A3:E6:B9:09:F1:F1:92
            X509v3 Authority Key Identifier:
                keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c3:6f:18:d6:af:67:b9:8a:4e:b6:37:75:a8:46:6f:aa:50:
         40:0a:5e:12:5b:a0:c5:75:c0:01:54:41:7b:74:e7:5c:37:fc:
         b0:70:7c:3a:e5:d7:7f:55:00:56:92:2b:1f:c0:2e:3a:c5:1a:
         89:cb:11:38:d7:18:5d:30:9b:1d:6b:da:82:40:e3:2f:5c:dd:
         1d:d6:e6:61:cf:d6:b7:35:b9:33:38:37:de:cf:d2:22:35:32:
         e3:4d:16:17:1d:cd:c9:a3:62:3c:96:ab:29:ec:2b:4d:d8:7e:
         b4:29:e6:92:43:38:b4:9c:3e:93:b5:fc:ab:69:c6:ef:99:d2:
         17:10:9d:0e:45:23:6b:9a:1d:eb:01:cf:01:f7:4e:d1:d6:1e:
         13:47:8e:8e:88:c2:cc:93:05:22:3e:c6:0f:af:1a:08:99:c8:
         3e:50:b4:4f:04:bf:60:83:85:b7:c6:fb:70:6a:20:cf:c8:f6:
         b7:59:65:48:1b:85:74:ab:21:70:ff:f1:78:49:49:e6:b0:bb:
         3a:2b:22:ce:a2:e9:06:cb:b6:23:08:ce:e8:79:9c:5a:91:c3:
         ca:2b:3f:a8:51:12:fa:83:03:26:1a:e6:37:2f:cd:21:61:35:
         9a:dd:64:a2:d8:8b:d5:ed:ad:87:75:f5:28:15:0b:81:a9:ae:
         c3:0d:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:16:29 2024 by rpki-client on console-fra.rpki-client.org