Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File:                     QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier:          ll6Ts1vmBgNFqp349P6S0zfdSh2mTx4jkoUDspHZhaE=
Subject key identifier:   AE:20:75:D8:B8:EA:EA:2D:B2:7B:41:68:F9:C3:0D:B0:15:74:E7:89
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer:       /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial:       01901E592A24F3CB1E6846255FF92AF33BF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number:          0CC3
Signing time:             Sun 16 Jun 2024 00:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:18 +0000
Files and hashes:         1: AfHNEBx1MY6TLVP_yNCkTro8g-U.roa (hash: ZmFTxBVEtUUYFA9Va9x6+Z1k4626SYNqzetcBzhrWUg=)
                          2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: SVFI2PsmS9/VOmT6B0hz+SVzKH7ppIdNhjTXv21Nx4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:2a:24:f3:cb:1e:68:46:25:5f:f9:2a:f3:3b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
        Validity
            Not Before: Jun 16 00:01:18 2024 GMT
            Not After : Jun 17 00:01:18 2024 GMT
        Subject: CN=ae2075d8b8eaea2db27b4168f9c30db01574e789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:d9:f2:36:66:c6:5a:67:cc:7c:48:cf:38:
                    7d:16:35:39:23:e6:44:b4:68:b6:7f:c6:b8:ff:45:
                    72:63:94:27:d3:51:29:1f:36:6a:30:47:74:da:0e:
                    2b:6b:7b:ea:0f:f4:f7:8d:7f:4e:eb:53:ce:c5:27:
                    60:80:7d:7b:a1:60:72:60:89:6b:1f:84:ed:ad:3e:
                    a9:df:c0:60:5f:48:66:7c:b8:63:4c:e7:12:0a:aa:
                    24:a7:e6:aa:a7:a0:04:6e:ad:12:13:e3:b4:5a:57:
                    ff:d0:c0:c9:03:9d:ed:09:5a:85:fb:6f:dd:cc:d5:
                    d9:14:a7:92:45:ec:0e:8c:65:6c:8f:59:66:16:25:
                    0c:68:76:e3:14:a6:fd:e7:20:ce:4d:27:95:e3:fe:
                    ee:c5:65:1d:a8:1b:a1:98:ea:0d:cb:7f:f0:1e:e3:
                    94:86:c8:e6:98:b0:1b:27:27:0e:04:8d:28:2c:c4:
                    ee:45:6b:a0:6c:57:66:bd:c2:63:08:c9:7f:c2:0f:
                    f6:e4:c3:0d:7d:65:54:ca:02:12:80:2e:66:b3:1b:
                    ff:fd:d6:3d:f7:a3:2b:b5:f6:a9:2b:61:95:84:db:
                    74:eb:8d:b1:b9:80:ad:d5:57:8d:97:00:4a:e9:07:
                    65:f9:95:25:47:64:d7:45:d6:eb:00:9e:99:5e:1c:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:20:75:D8:B8:EA:EA:2D:B2:7B:41:68:F9:C3:0D:B0:15:74:E7:89
            X509v3 Authority Key Identifier:
                keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c9:7a:ae:53:91:20:37:2f:2b:1b:b1:5f:42:3b:ef:d9:f0:
         ec:4d:52:92:7f:cd:ca:65:37:bc:68:9d:58:29:bf:1f:9f:5d:
         5f:7e:a1:19:99:45:dd:e6:e0:07:84:da:56:e9:bb:b7:7b:a8:
         19:bc:8b:f6:6e:40:86:aa:f8:e9:16:e0:65:d7:ff:4a:78:9b:
         a1:6e:b7:42:2d:46:f4:4f:f8:29:19:14:ae:d8:e0:3e:02:1b:
         6f:33:3f:58:94:fb:f7:6e:28:6e:76:39:a7:e3:af:93:62:ea:
         3f:38:82:c4:c7:f3:75:d4:c0:42:8a:60:83:f8:f6:ae:70:34:
         f7:14:47:ff:bb:7f:9f:37:47:55:e1:de:09:2e:93:40:9f:21:
         8a:16:c9:d2:5c:92:6d:68:83:01:ba:82:bb:3a:fd:16:be:bb:
         b5:8a:64:98:69:60:5b:7f:41:17:1d:04:fa:9d:6f:db:2f:08:
         f7:ae:e8:41:fb:0e:34:aa:bb:58:e9:1a:71:e5:5c:7e:fd:2d:
         a3:31:34:53:6b:91:3f:04:f5:0a:74:fb:10:6f:48:12:23:84:
         05:1b:75:d3:ce:e3:1b:d2:63:46:8d:09:d3:05:ba:5b:b8:3a:
         a9:82:6a:3f:df:48:29:df:8b:91:fd:3c:1c:f7:0b:d9:7c:16:
         28:89:f7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:57:39 2024 by rpki-client on console-ams.rpki-client.org