Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File:                     QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier:          y3deOwzpwDQkPNROFbhcZCzvhoxSWN7A7xrdIDadPHc=
Subject key identifier:   4D:D2:E4:CD:47:02:9A:28:A4:1D:62:13:59:80:9F:6D:56:8B:1F:38
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer:       /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial:       018F8748CDB65AA3FD65F35E198A4ADF2266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:46 +0000
Manifest this update:     Fri 17 May 2024 16:00:46 +0000
Manifest next update:     Sat 18 May 2024 16:00:46 +0000
Files and hashes:         1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: 9yLHO0JGXNeWnyvDDVrxsKKfJdOkjLhx/wH9Feh+pmg=)
                          2: jX_0rCcRlctQoFptcI2IX2O1soI.roa (hash: L1QZEQcuFKAweQMDgzWSzg/RU6+/Kyjh+upgzE28w9E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:cd:b6:5a:a3:fd:65:f3:5e:19:8a:4a:df:22:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
        Validity
            Not Before: May 17 16:00:46 2024 GMT
            Not After : May 18 16:00:46 2024 GMT
        Subject: CN=4dd2e4cd47029a28a41d621359809f6d568b1f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:86:02:e3:cf:54:8d:b4:8f:99:db:06:e0:
                    5f:10:f1:5f:9a:7d:40:bf:17:69:e1:a8:c0:51:87:
                    5f:3e:a4:1f:85:4c:ca:83:4a:ee:49:2f:72:ed:86:
                    a4:65:b8:01:a8:ce:84:5b:15:7f:93:33:ac:86:6f:
                    5e:e2:2e:82:db:89:0c:34:18:97:b0:3c:68:c8:94:
                    86:19:43:ac:67:b3:83:34:3a:83:c7:2d:0f:2b:84:
                    84:c0:b4:ad:21:5e:32:ea:f7:15:0e:2d:c9:43:7d:
                    2a:66:9c:23:11:bb:9c:f3:cb:a2:a5:52:ec:f3:a9:
                    4f:14:f2:9e:44:e6:93:93:b3:3c:3f:ac:9d:1c:44:
                    c0:10:8e:b8:9c:d0:7c:5f:e8:6b:24:20:eb:1d:35:
                    ba:af:21:a4:46:aa:98:04:e3:c9:cd:6f:c5:69:c5:
                    1b:18:a6:8c:b5:b4:0b:49:0e:f7:c0:00:47:b4:ce:
                    2f:8a:65:3f:a2:fa:88:62:c2:38:31:03:9a:92:4f:
                    82:85:53:22:79:e2:1b:dc:1b:11:44:07:02:89:3b:
                    3e:bc:03:c4:b2:07:9e:5b:69:b4:f1:a7:f9:4f:9b:
                    2b:d5:61:99:53:d6:89:1d:3d:70:4d:83:8f:0b:91:
                    c6:1d:99:11:77:3f:44:e4:f5:dd:25:6d:90:ac:5b:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D2:E4:CD:47:02:9A:28:A4:1D:62:13:59:80:9F:6D:56:8B:1F:38
            X509v3 Authority Key Identifier:
                keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:75:39:44:69:db:5e:3c:12:7d:67:6d:0d:e9:a8:02:5b:ba:
         26:8b:e4:69:ff:1d:cc:9e:bf:5d:99:71:2d:a6:6d:e6:29:bd:
         1b:e4:25:2c:d6:f8:e5:9d:dc:cc:06:a2:65:a6:8f:60:97:7d:
         1e:f1:48:eb:db:3e:ad:33:66:3a:98:71:e5:6d:0e:21:67:f1:
         3f:19:f9:6e:89:31:f4:8e:a9:68:2b:5c:64:18:1c:f4:a1:ba:
         65:3c:1f:5b:16:6b:b1:dd:2e:4d:9a:67:cd:b5:ac:05:d0:e4:
         6b:a0:fe:63:60:89:02:00:ba:24:4e:5d:57:27:02:ad:90:d4:
         ad:fa:ee:1c:ae:f9:4b:4b:35:bf:ec:e3:ee:08:20:03:17:97:
         f3:e8:84:a4:70:fa:3b:6b:a1:08:15:9e:82:e8:3d:3c:b7:23:
         d7:42:e6:d8:20:bc:ac:53:5a:1d:da:6f:df:6c:24:bc:d7:9b:
         2e:28:e6:58:72:b6:94:d1:23:5e:1b:69:ea:15:2a:3c:00:1d:
         2f:ba:1a:dc:56:b9:1c:cd:6b:99:12:2e:dd:fd:54:63:ba:00:
         98:23:d7:df:04:ed:fb:99:80:db:c7:54:ec:d3:db:15:2d:7e:
         47:72:4e:d1:c5:b1:f3:12:e7:85:9a:37:00:cf:fd:c2:6e:e8:
         61:e3:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:04 2024 by rpki-client on console-fra.rpki-client.org