Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File:                     q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier:          UiljunGukwuL9GcNC6N/3RSz9IX2tkceFJv6lSUKGgE=
Subject key identifier:   7D:D5:9C:81:3E:3D:3A:F8:C7:31:C7:5D:13:17:37:04:3B:78:7F:1E
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer:       /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial:       018F942858A69730B34B286AE8E2E7F27681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number:          54
Signing time:             Mon 20 May 2024 04:00:22 +0000
Manifest this update:     Mon 20 May 2024 04:00:22 +0000
Manifest next update:     Tue 21 May 2024 04:00:22 +0000
Files and hashes:         1: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: iLsCt6XhbsEcVFoE0VR8MyCRShRPKGIrLkIWVkiKvYk=)
                          2: x-KkgP1Weyr_majUKVSIQM5tgfY.roa (hash: Og9tXQSZKBUlkOBEX4b0hnrGKdhKehxcNDaPrIq5KFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:28:58:a6:97:30:b3:4b:28:6a:e8:e2:e7:f2:76:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
        Validity
            Not Before: May 20 04:00:22 2024 GMT
            Not After : May 21 04:00:22 2024 GMT
        Subject: CN=7dd59c813e3d3af8c731c75d131737043b787f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:56:1e:db:f5:fd:1a:fe:ae:e2:b8:6f:5a:
                    78:17:c4:58:1c:c9:a2:0e:a6:bd:03:34:57:33:21:
                    9f:e3:a4:8d:b3:13:76:ca:40:ed:54:11:0a:c3:1e:
                    72:fd:d0:3b:56:e7:ee:83:09:f5:63:05:59:29:9b:
                    55:2e:b5:e4:65:be:fc:5f:b3:06:32:4c:36:50:97:
                    50:ac:89:d5:76:e6:8e:3a:ef:33:1a:8d:3c:6a:68:
                    2e:e1:0b:0d:74:46:5b:27:3d:05:f3:d8:78:b1:db:
                    97:cb:dd:1d:59:b2:ec:30:83:f9:f6:4d:8a:bf:f5:
                    72:b1:f9:98:e5:25:6f:88:36:c4:ed:00:b8:0f:f3:
                    8d:23:78:38:49:c8:26:91:9e:b5:3a:b4:b6:4b:3c:
                    07:ea:d4:5e:5c:9f:ee:9a:56:fc:52:21:ba:92:a4:
                    28:9f:3b:ec:8f:2a:fe:1f:3f:d8:ae:26:9b:1b:f4:
                    1e:b4:40:2d:d2:b1:e8:de:48:8b:87:1b:4a:91:14:
                    5c:b2:e5:8d:2c:59:ab:6e:5d:fb:16:99:d3:c5:b5:
                    83:59:61:67:82:fa:8e:17:c9:bb:ef:5d:11:3d:68:
                    8f:cd:02:20:3e:97:16:e2:24:7e:b0:3d:00:7a:37:
                    8b:3e:94:7b:d6:5f:22:95:ba:31:5f:85:36:48:96:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:9C:81:3E:3D:3A:F8:C7:31:C7:5D:13:17:37:04:3B:78:7F:1E
            X509v3 Authority Key Identifier:
                keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:65:4f:05:f3:43:d6:50:fd:7d:19:3f:9e:50:1c:63:1a:5b:
         bc:2f:f8:11:54:10:98:23:78:ac:63:e4:e9:0f:85:f1:29:c9:
         ed:05:e5:54:f2:1f:87:96:07:3a:9e:3c:5b:1c:44:f5:4a:2b:
         55:e0:f8:1c:11:2b:65:2d:e8:77:35:64:66:f5:7d:09:da:bc:
         ff:62:bb:04:e0:63:cf:c7:41:ea:30:3d:a2:e0:bb:f4:da:d8:
         54:ac:3c:26:80:15:bb:49:2a:1a:8a:b4:a7:a0:1e:f9:f5:72:
         a0:5d:23:87:a9:80:13:b4:ad:32:d8:89:e9:b1:08:e8:f2:5d:
         55:3e:fd:54:bc:73:c4:fa:59:d8:be:ba:00:9d:6b:71:bd:95:
         31:6a:82:1f:7d:9f:8f:3b:38:89:ad:cd:8f:8a:81:98:83:de:
         91:bf:27:03:ec:2f:77:70:e2:05:4d:d6:36:46:1a:90:c2:48:
         3d:6b:5a:0c:9f:70:d0:78:fb:2a:db:83:9b:e5:d7:56:ed:d4:
         a5:40:2e:27:42:df:f0:60:a2:7f:46:98:57:33:a4:d6:e0:fe:
         0a:c9:70:98:1d:47:60:9a:fd:cf:93:8a:23:d4:8e:76:ab:5e:
         41:3f:b8:f9:17:4f:f8:c8:82:b4:cd:1d:a9:7b:cd:01:80:e3:
         6b:ae:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 05:18:27 2024 by rpki-client on console-fra.rpki-client.org