Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File:                     QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier:          g19zR5ceqmN1tJ34Hmz95Lz0j9XmzMo1gyElmWskNwU=
Subject key identifier:   04:49:9F:CF:2B:91:14:46:36:D2:53:72:4F:0F:BC:93:62:2F:80:79
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer:       /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial:       01903DACB82D399A84295818DDD296168D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number:          0578
Signing time:             Sat 22 Jun 2024 02:00:47 +0000
Manifest this update:     Sat 22 Jun 2024 02:00:47 +0000
Manifest next update:     Sun 23 Jun 2024 02:00:47 +0000
Files and hashes:         1: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: pnPgoY2en0aOn3JVdladGTR/Bo/UvYurc04XR0hggvY=)
                          2: xf6JWU8eqnqtYpzbrLNcRhFiGvM.roa (hash: hODM5usVGdt1vyldHZe743cw7a+saENi5rbzPOasYmw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3d:ac:b8:2d:39:9a:84:29:58:18:dd:d2:96:16:8d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
        Validity
            Not Before: Jun 22 02:00:47 2024 GMT
            Not After : Jun 23 02:00:47 2024 GMT
        Subject: CN=04499fcf2b91144636d253724f0fbc93622f8079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:20:ea:da:2b:a8:ea:ae:e4:27:91:34:59:
                    98:f2:7c:ea:1a:62:66:bd:0a:6b:8b:11:ad:8b:42:
                    72:28:7b:a6:a4:19:d9:1f:de:67:78:50:f9:da:1e:
                    07:1c:dc:53:fa:3b:fc:cf:07:eb:60:19:3a:46:5a:
                    dd:97:41:a4:42:f7:c9:94:e3:45:b1:bf:48:1c:a6:
                    71:fb:62:5c:e0:6e:3d:c8:07:f0:2a:99:df:78:5a:
                    8c:5b:2b:57:e5:6c:0a:34:3e:2e:f5:a1:cf:ed:67:
                    86:ef:c6:fd:d3:96:14:67:5f:be:15:0e:19:f7:b7:
                    ee:21:19:4c:61:96:de:4b:5d:8b:8c:5c:0d:3b:1b:
                    b2:54:36:9d:12:ee:d3:ad:a5:0d:3b:fa:00:6d:d6:
                    d8:45:85:47:f7:ee:aa:19:77:ea:b1:83:83:2d:ae:
                    1d:1b:d6:39:d1:79:0b:3b:39:1a:23:98:07:01:2a:
                    d6:05:5d:d6:11:e5:e0:f0:aa:da:cf:b1:c0:91:cd:
                    c4:93:8a:cb:8e:64:2d:6c:50:bf:d2:36:8f:29:51:
                    26:1e:d5:d3:4d:d5:d9:39:69:ab:a6:30:fb:21:e3:
                    40:20:a0:bf:28:6e:d9:2d:20:bf:ba:51:fa:fa:26:
                    d4:f1:9c:12:ad:48:8a:aa:11:cd:8b:71:bb:19:09:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:49:9F:CF:2B:91:14:46:36:D2:53:72:4F:0F:BC:93:62:2F:80:79
            X509v3 Authority Key Identifier:
                keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:7d:d1:6c:f8:d8:73:3a:a5:69:f5:c5:64:b3:66:42:2c:
         11:0c:18:b9:d9:94:2f:3b:72:26:66:e8:65:69:01:25:1f:48:
         df:15:4f:8a:a5:e3:a2:f6:32:e1:01:09:3f:6a:3d:64:30:70:
         43:41:00:3c:d2:ba:7a:cf:f4:3c:81:0f:9b:17:28:89:bd:22:
         de:cb:ac:b2:44:c0:53:ca:06:f2:cd:ea:0e:74:25:dc:21:47:
         7a:1f:68:b6:a8:d4:38:b8:bf:38:6b:64:14:59:55:d9:3f:ba:
         01:51:1c:c8:2b:b0:fa:6d:22:d2:62:db:ed:6d:f4:93:a5:bc:
         dc:79:1e:7a:ff:fb:bf:d8:01:b7:26:9f:26:93:97:d7:ba:b0:
         9f:93:aa:2a:c3:f5:63:69:02:15:2e:54:c7:72:58:62:38:ca:
         4d:61:a5:29:66:f5:52:29:4a:03:19:50:01:d0:50:b0:29:7f:
         57:7a:be:9e:3e:c9:13:88:14:7c:c5:4d:4b:f4:b8:cd:c6:60:
         e9:1a:f3:41:39:f7:41:f3:41:c9:cb:14:b9:03:fe:c5:f3:19:
         97:a2:c7:56:2c:4c:ad:1a:51:dd:ff:92:df:0e:68:33:77:b3:
         c3:6b:f3:18:bb:70:e7:6a:40:c7:22:4f:d8:97:5f:72:4b:96:
         eb:20:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:07:00 2024 by rpki-client on console-fra.rpki-client.org