Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File:                     QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier:          VgVz1AgXngMtaMBnmyieVMH9IkxvFeV2S5WMPJbvcCs=
Subject key identifier:   23:FF:E0:9A:7B:54:A3:2B:4F:D8:AF:B9:BE:5A:DC:6E:36:93:34:15
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer:       /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial:       018F874A33B59129A83709E25241296D2AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number:          0F00
Signing time:             Fri 17 May 2024 16:02:18 +0000
Manifest this update:     Fri 17 May 2024 16:02:18 +0000
Manifest next update:     Sat 18 May 2024 16:02:18 +0000
Files and hashes:         1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: Q1n+12Hc2c0u/O6DZbrRV4Llrhgj4dtZuQ3HG8pvEmY=)
                          2: W3Uer_GZpL9fZZp-b4VtT12e5Ug.roa (hash: pFQsSffsqjaJmwtDo2yh2gDf3vdDMbCRSJOXnq9/XdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:33:b5:91:29:a8:37:09:e2:52:41:29:6d:2a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
        Validity
            Not Before: May 17 16:02:18 2024 GMT
            Not After : May 18 16:02:18 2024 GMT
        Subject: CN=23ffe09a7b54a32b4fd8afb9be5adc6e36933415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:34:3c:03:9e:2d:50:f2:9b:5d:da:ad:4b:
                    52:d8:dd:c5:1b:55:1e:b0:d3:2f:06:ba:ce:32:a7:
                    42:8b:35:4d:e2:66:50:1d:95:1f:6a:cf:d6:57:3b:
                    05:13:5e:a9:b1:e3:f7:e3:86:f5:98:9d:3b:c9:fa:
                    ba:ec:90:6c:1b:30:d4:f6:6b:b4:22:7c:1e:82:17:
                    e9:91:ff:c3:d9:a1:d0:46:14:26:9c:2c:d4:4b:6a:
                    ab:da:19:f4:50:ed:20:6a:8f:bc:ee:8b:ac:a9:fa:
                    51:6e:b3:52:f7:b4:b9:32:68:9e:03:c7:62:e0:42:
                    74:cf:20:87:18:02:16:5e:9d:ec:60:b2:64:97:cf:
                    d6:0e:9d:b6:e5:b0:d2:58:cb:64:2f:4d:5e:d4:4f:
                    7d:4d:25:0b:a2:6f:28:e3:98:82:5b:90:20:33:75:
                    64:45:76:ef:bc:17:42:a6:14:e9:bc:ae:41:f0:c7:
                    18:ec:22:6c:01:2c:f7:a3:0f:14:7a:ca:0c:6f:3c:
                    d8:b9:aa:4d:11:69:16:d2:a7:21:5b:83:f5:be:80:
                    ef:9f:e6:61:e1:cf:65:7d:4b:a6:3e:14:b2:cb:d5:
                    fb:29:ad:c8:d4:65:33:b7:ef:5e:f0:fa:e7:c5:15:
                    e6:6d:5c:ee:04:01:40:a9:f6:d3:eb:7c:21:a6:7f:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FF:E0:9A:7B:54:A3:2B:4F:D8:AF:B9:BE:5A:DC:6E:36:93:34:15
            X509v3 Authority Key Identifier:
                keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d5:cc:d3:a3:ef:40:6f:dd:4f:5b:43:9e:fa:4a:b3:a8:95:
         cd:93:ea:d7:40:08:19:52:cf:7e:56:69:7c:ca:a4:55:4a:26:
         ac:06:8f:e9:b1:dc:c1:a8:fa:1f:e0:08:1f:0a:2a:59:9f:d9:
         54:39:fe:50:51:d8:08:ad:a3:6e:ec:35:f8:f1:a5:b2:b4:9f:
         62:a6:6b:1f:cf:bb:9f:e4:8e:9a:35:2b:da:7b:8d:28:e3:7f:
         45:1a:4b:e5:33:ca:15:51:cd:ad:fe:bf:16:aa:2b:0a:f4:a3:
         07:9c:c0:2f:f7:3e:99:b1:b2:72:01:3b:87:69:0f:54:61:fa:
         00:ec:c9:18:ea:4a:a8:ef:a1:13:fc:b1:8c:06:00:9d:6c:8e:
         fb:cf:2b:0c:68:1b:0e:cf:68:e7:79:9b:0d:82:10:ea:ee:87:
         ab:11:02:f9:0a:f6:d3:af:d9:3b:aa:b1:8f:28:1f:9a:61:8e:
         ac:11:ba:87:bf:b9:75:1a:f8:19:ba:ba:e1:2c:52:f6:e0:b4:
         25:69:58:c4:94:d5:2d:59:ea:d5:29:54:18:98:30:39:15:fa:
         01:8e:d1:1f:7e:fc:65:aa:81:73:5b:d2:e7:f2:65:b1:bd:fa:
         d8:48:69:3d:09:94:54:f7:bb:e6:11:65:4b:60:ec:d4:7e:c1:
         d1:98:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:08 2024 by rpki-client on console-fra.rpki-client.org