Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File:                     qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier:          x0IZXwvXv+mqhGfvvc7ymaARVJCT6kRCxc0p0ysSs1s=
Subject key identifier:   84:9E:5C:0E:71:A1:09:29:40:E1:82:56:BA:97:18:96:2F:E1:ED:4F
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer:       /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial:       018F882470551769FF9D8A0600F64A7C1999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 20:00:40 +0000
Manifest this update:     Fri 17 May 2024 20:00:40 +0000
Manifest next update:     Sat 18 May 2024 20:00:40 +0000
Files and hashes:         1: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: GU2QJ6SRLvMZjcVf/JTdORWVQg1ULCXJWnU2FOKOm5s=)
                          2: sW2ZQzaznOYUTgaN0NWZRkv3mI4.roa (hash: l7Sq4LFbp7xgsLc7oQb5wU3gI9qjxq781R1Na+W+9lg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:70:55:17:69:ff:9d:8a:06:00:f6:4a:7c:19:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
        Validity
            Not Before: May 17 20:00:40 2024 GMT
            Not After : May 18 20:00:40 2024 GMT
        Subject: CN=849e5c0e71a1092940e18256ba9718962fe1ed4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:08:32:1f:1e:b0:62:78:46:61:a4:9f:50:
                    c1:20:38:ff:0e:c2:65:7b:b4:78:58:3a:ec:09:0d:
                    d2:14:a2:f1:57:d0:4f:05:34:50:19:51:da:9c:1e:
                    b2:40:52:84:ac:31:e1:87:04:f9:56:c5:70:04:48:
                    82:8a:a0:06:a9:91:1b:87:57:90:44:ca:c2:0c:f1:
                    cc:ba:cf:f9:0b:df:62:dc:3b:cb:12:15:b7:f1:96:
                    c8:e8:bd:c4:91:95:08:b3:1f:e8:17:87:b2:bd:b8:
                    ab:fe:f7:d5:a5:fb:a0:5f:b8:00:5f:3d:2c:62:dd:
                    dc:a8:60:fa:b2:6c:40:11:a8:af:82:f6:43:c6:41:
                    41:13:9a:b4:35:75:96:d8:ab:2c:79:ea:a1:82:7f:
                    74:6f:5f:6d:6e:53:ef:90:6d:29:82:ac:fc:08:4b:
                    36:4a:56:82:f4:78:e1:39:2e:3b:db:f5:cb:18:16:
                    0d:38:ee:4c:f3:44:b1:b7:76:31:a6:87:25:5c:63:
                    5f:94:be:13:30:1f:ac:95:fb:85:ef:07:05:03:9c:
                    81:cd:9c:86:48:72:3f:01:57:2d:b9:88:6b:46:83:
                    30:42:0a:54:c6:44:bd:3e:2f:b8:d9:c7:1a:d9:89:
                    9e:bb:53:45:af:46:42:1e:da:bd:e8:05:d9:8e:cc:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9E:5C:0E:71:A1:09:29:40:E1:82:56:BA:97:18:96:2F:E1:ED:4F
            X509v3 Authority Key Identifier:
                keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2e:f3:0b:35:be:ef:b2:e7:73:c2:0a:fb:75:be:3d:61:19:
         c0:0f:44:7a:49:54:0a:58:46:f5:12:ef:79:8f:62:e3:a4:5f:
         33:4d:2a:c6:a4:a5:ad:cc:57:41:ff:17:71:4b:8f:fa:1d:5d:
         f1:59:10:3a:29:ca:09:2f:63:4e:f2:07:c1:19:5a:f6:7d:73:
         46:a5:ec:90:46:b9:1c:2e:c6:d0:75:ce:cb:e0:44:cb:ce:16:
         72:84:71:fd:a0:35:88:20:74:25:d9:7f:1b:2b:d3:f9:0f:52:
         48:a0:55:68:32:98:99:89:e3:4c:07:bb:84:fa:83:79:a0:b4:
         f3:81:a9:4e:ca:e1:64:9d:00:c3:80:a3:99:18:fa:e4:c0:8d:
         cf:c9:90:37:a0:6b:86:2b:71:de:3b:bf:e9:b6:34:64:90:9c:
         dc:18:41:d8:cb:66:04:05:f3:8d:12:e4:43:f7:c9:be:b2:6c:
         4c:1e:30:3e:ce:69:45:15:69:33:70:5d:42:31:48:0a:16:e2:
         de:7c:e6:65:ba:2a:cb:39:94:c9:24:69:a5:c3:17:69:28:c9:
         7a:33:a5:63:82:6c:9e:c3:2d:b0:10:59:0f:64:c6:a7:a9:43:
         c9:e3:78:43:4b:bd:de:84:0a:50:e3:f0:9d:7e:88:71:3d:11:
         22:57:5e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:56:47 2024 by rpki-client on console-ams.rpki-client.org