Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File:                     QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier:          WMG6pmkgsMGUm18fInZEZyyLhmEFuImL8g1WFep6v94=
Subject key identifier:   4E:CB:3F:84:78:16:0B:E9:AB:0F:DD:45:DE:3E:D0:20:60:4D:82:C9
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer:       /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial:       018F8748C8C021AC6B48C622DE9867CE6F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number:          0684
Signing time:             Fri 17 May 2024 16:00:45 +0000
Manifest this update:     Fri 17 May 2024 16:00:45 +0000
Manifest next update:     Sat 18 May 2024 16:00:45 +0000
Files and hashes:         1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: XvTqLXi5BXOqG3aQL/2GLHuDCZpo30eQcOJOJSqpnW8=)
                          2: sCHyn5DGEnhdj2KlKtHmM2DhKVI.roa (hash: 8DjF963Q2fNMXEoR4doE6kTz02KEHf89CXZ1+wOLUls=)
                          3: yG5_d_UMiqO4xI7iijIJhFoA9Eg.roa (hash: 2K5TLLwf3BJamYmnbrczREhUiyW2vj3CKb66+QPWBzc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:c8:c0:21:ac:6b:48:c6:22:de:98:67:ce:6f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
        Validity
            Not Before: May 17 16:00:45 2024 GMT
            Not After : May 18 16:00:45 2024 GMT
        Subject: CN=4ecb3f8478160be9ab0fdd45de3ed020604d82c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:03:d0:1e:ff:12:b1:a3:2e:37:99:f8:ee:
                    f2:7d:40:f3:5f:47:69:75:82:0a:ee:7d:b3:e8:3c:
                    c6:2a:41:ec:cf:90:3a:af:28:3c:4e:70:70:a8:d1:
                    51:46:75:17:f3:2f:7b:ac:6f:a9:d8:4e:d2:33:3a:
                    cd:80:43:c7:01:3e:69:bb:0c:64:dc:17:a7:40:5d:
                    dd:f1:cb:eb:b1:26:78:cd:b8:93:87:66:17:25:47:
                    8f:6d:b7:59:ab:30:01:10:ea:0d:86:50:c9:14:55:
                    8a:b7:fd:72:4b:26:54:4c:c4:96:51:f8:38:67:3c:
                    37:21:aa:4f:a0:b6:3d:f2:f8:e9:11:90:70:e5:b3:
                    a4:67:01:c5:90:f0:5d:41:55:96:13:91:05:c5:79:
                    c8:f2:bd:41:70:6f:40:e8:16:77:a1:75:a3:f5:e3:
                    da:0c:b2:b6:10:c5:ae:87:32:dc:86:11:38:34:37:
                    db:3e:55:ab:18:16:84:b3:fc:2c:83:b1:69:4d:c6:
                    e7:4e:b3:b7:46:be:63:a9:fc:18:18:e7:f8:42:3b:
                    5c:07:da:06:b5:3a:2a:00:de:c7:a8:cd:37:46:62:
                    a8:93:4a:72:4e:3d:95:06:b2:1f:f8:10:bc:c3:d6:
                    dd:7d:74:23:fe:a4:94:f6:56:f2:02:30:3f:dc:7b:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CB:3F:84:78:16:0B:E9:AB:0F:DD:45:DE:3E:D0:20:60:4D:82:C9
            X509v3 Authority Key Identifier:
                keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ed:58:9f:3c:2c:bb:d7:dc:4a:ff:38:c0:fa:02:c1:04:c9:
         37:ba:b1:00:df:60:b3:ea:71:a5:dd:17:8f:c0:a9:85:d5:aa:
         1c:80:4e:51:4a:cf:73:66:fa:f2:95:43:18:c9:00:75:1b:6c:
         c2:98:2a:52:99:e0:d5:44:3a:bc:0a:0b:d4:1d:bf:d0:e3:50:
         65:ec:5f:ae:e7:32:b5:e5:1b:96:e9:ec:2f:71:5c:89:f4:a6:
         2d:32:09:b2:78:8f:1e:74:28:69:f9:bf:3c:5e:29:8f:1f:54:
         07:df:cd:01:22:c9:3b:c7:fe:81:a5:b2:54:ee:50:08:9d:01:
         54:0b:06:43:e9:56:82:42:dd:16:e5:08:99:34:bd:3c:9e:c5:
         3a:1b:43:c2:65:d4:e6:9a:22:18:30:51:df:b7:a7:2d:8e:91:
         8f:63:52:fa:ff:d5:cd:61:71:db:0c:88:d9:7f:4e:49:85:7b:
         c5:14:e4:9b:b9:d4:5e:7c:68:e5:42:88:bd:15:7e:b1:1c:12:
         1e:30:f4:81:20:be:be:16:32:7c:fc:78:9e:55:99:73:b2:5b:
         a1:0d:50:5a:86:c8:e5:cb:6f:ef:d5:db:f5:1e:f0:48:10:da:
         7c:63:05:71:61:54:d5:6d:29:09:f8:ba:53:d9:c0:cd:1b:57:
         7e:6f:ff:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSMjAIaxrSMYi3phnzm80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDBlNGI0YTk3ODgyYzE3OThjNDcwZTNhYmQ4MDVlMzI1
ZGQ1OTUwHhcNMjQwNTE3MTYwMDQ1WhcNMjQwNTE4MTYwMDQ1WjAzMTEwLwYDVQQD
Eyg0ZWNiM2Y4NDc4MTYwYmU5YWIwZmRkNDVkZTNlZDAyMDYwNGQ4MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk4D0B7/ErGjLjeZ+O7yfUDzX0dp
dYIK7n2z6DzGKkHsz5A6ryg8TnBwqNFRRnUX8y97rG+p2E7SMzrNgEPHAT5puwxk
3BenQF3d8cvrsSZ4zbiTh2YXJUePbbdZqzABEOoNhlDJFFWKt/1ySyZUTMSWUfg4
Zzw3IapPoLY98vjpEZBw5bOkZwHFkPBdQVWWE5EFxXnI8r1BcG9A6BZ3oXWj9ePa
DLK2EMWuhzLchhE4NDfbPlWrGBaEs/wsg7FpTcbnTrO3Rr5jqfwYGOf4QjtcB9oG
tToqAN7HqM03RmKok0pyTj2VBrIf+BC8w9bdfXQj/qSU9lbyAjA/3HsoKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7LP4R4Fgvpqw/dRd4+0CBgTYLJMB8GA1UdIwQY
MBaAFEEA5LSpeILBeYxHDjq9gF4yXdWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAt
ZGFhOWYyYTMzYmFmLzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAtZGFhOWYyYTMzYmFm
LzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABe1Ynzws
u9fcSv84wPoCwQTJN7qxAN9gs+pxpd0Xj8CphdWqHIBOUUrPc2b68pVDGMkAdRts
wpgqUpng1UQ6vAoL1B2/0ONQZexfrucyteUblunsL3FcifSmLTIJsniPHnQoafm/
PF4pjx9UB9/NASLJO8f+gaWyVO5QCJ0BVAsGQ+lWgkLdFuUImTS9PJ7FOhtDwmXU
5poiGDBR37enLY6Rj2NS+v/VzWFx2wyI2X9OSYV7xRTkm7nUXnxo5UKIvRV+sRwS
HjD0gSC+vhYyfPx4nlWZc7JboQ1QWobI5ctv79Xb9R7wSBDafGMFcWFU1W0pCfi6
U9nAzRtXfm//Dw==
-----END CERTIFICATE-----
Generated at Fri May 17 19:10:48 2024 by rpki-client on console-fra.rpki-client.org