Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
File:                     q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft (raw, json)
Hash identifier:          1ltj/GdNcFB/2xKIbJ9Bc/lvre7HOM3pWXH52/qI0N0=
Subject key identifier:   90:2F:30:84:17:F3:91:1B:E0:CA:9D:6D:A6:30:03:19:61:1E:1D:7D
Authority key identifier: AB:73:BF:62:BD:1A:3F:49:DD:92:49:07:8E:39:D1:B9:4E:AE:6D:2B
Certificate issuer:       /CN=ab73bf62bd1a3f49dd9249078e39d1b94eae6d2b
Certificate serial:       018F8823EBE13B60B7E05A50BA45058B3B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
Manifest number:          0CE6
Signing time:             Fri 17 May 2024 20:00:06 +0000
Manifest this update:     Fri 17 May 2024 20:00:06 +0000
Manifest next update:     Sat 18 May 2024 20:00:06 +0000
Files and hashes:         1: q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl (hash: /hAX79Un3vhbuBSf5rt6pmloaKL07V7tQTqyitqfxfo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:eb:e1:3b:60:b7:e0:5a:50:ba:45:05:8b:3b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab73bf62bd1a3f49dd9249078e39d1b94eae6d2b
        Validity
            Not Before: May 17 20:00:06 2024 GMT
            Not After : May 18 20:00:06 2024 GMT
        Subject: CN=902f308417f3911be0ca9d6da6300319611e1d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:14:eb:5d:c9:8a:fd:80:7f:1a:4c:89:1f:
                    ce:69:d4:79:67:a6:c0:88:02:eb:dc:47:59:28:21:
                    bd:2f:22:1e:1d:5d:7e:88:a7:41:5e:99:51:5a:56:
                    cb:25:a3:b8:33:36:a3:e3:89:b6:13:87:05:9f:44:
                    3c:04:94:f9:9d:c1:ca:4b:24:69:ea:2b:41:c7:32:
                    24:e0:8a:9c:1b:b8:c1:4f:2f:6f:fc:95:69:4f:fe:
                    f0:77:b3:55:f2:91:e7:1f:31:08:96:a4:e2:e7:b0:
                    a0:0b:7f:3d:6c:84:56:c1:ab:c5:69:0b:15:d4:7c:
                    95:7e:53:ae:fa:6a:e9:53:0a:02:bb:76:44:c6:dd:
                    d1:17:8a:b1:4a:35:93:60:4a:fb:38:99:05:f0:ef:
                    37:68:6d:8c:5a:75:b0:42:75:dc:05:04:9c:bd:bc:
                    b5:77:4f:e6:dd:43:1b:eb:24:66:10:b1:6b:a5:b7:
                    78:81:03:a7:14:f3:74:1a:03:bb:54:ee:56:7c:04:
                    d3:21:7c:f4:68:41:92:e0:1e:f2:21:00:f2:42:9a:
                    45:e7:ea:db:59:ec:4a:8c:93:e5:7e:2c:86:aa:41:
                    d7:77:67:29:de:8e:a9:0b:61:90:4b:32:fe:bb:55:
                    02:bc:62:14:86:cc:5f:dc:f2:74:97:ef:9b:a4:3b:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2F:30:84:17:F3:91:1B:E0:CA:9D:6D:A6:30:03:19:61:1E:1D:7D
            X509v3 Authority Key Identifier:
                keyid:AB:73:BF:62:BD:1A:3F:49:DD:92:49:07:8E:39:D1:B9:4E:AE:6D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:2c:43:55:6a:85:b2:f4:34:be:e5:46:dd:0f:02:e6:ab:
         a7:98:32:ba:91:76:8a:24:d6:e4:c1:47:4d:61:44:85:d7:47:
         d2:12:48:c5:26:36:dd:ee:8b:e5:c2:26:1d:d8:76:15:f1:4a:
         50:64:f1:e2:99:64:17:38:ba:9c:9a:e0:7f:5e:34:3a:ef:bb:
         47:64:ce:b8:71:0f:89:7e:02:93:3b:81:03:b0:74:20:cc:a4:
         f7:84:5e:3a:91:74:4f:b8:b1:d8:cf:d7:51:78:b8:45:64:88:
         84:19:47:b2:42:79:af:9c:02:69:cc:b6:6d:81:68:8f:1f:12:
         30:78:53:48:79:ae:a1:ac:17:1b:78:a5:15:40:4d:4c:b9:dc:
         f1:a7:41:6f:2b:90:2d:5f:16:21:c3:8b:30:04:f4:61:eb:eb:
         3d:45:62:89:01:51:ae:d4:a1:82:16:32:50:f3:2b:3b:18:0b:
         3a:e7:20:b7:66:07:1b:87:cd:b7:fd:bd:07:f9:dd:f7:4f:5f:
         94:f4:61:a5:f2:17:f5:8e:57:aa:58:db:86:45:fe:6e:71:c9:
         b7:d8:12:53:f4:87:0c:37:4a:fe:f3:96:b6:4e:13:f6:1a:f8:
         a4:e0:de:17:cd:f9:ac:58:2f:2d:03:2a:eb:2e:59:9e:3d:f6:
         a3:98:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:58 2024 by rpki-client on console-ams.rpki-client.org