Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.mft
File:                     qQ3EdQKeHXkzVZeLpGv4cwZVZLE.mft (raw, json)
Hash identifier:          /IO4+aZXCoAlZ6GzSfjsP0ejvYI0C4q1zB/NX3sIcJw=
Subject key identifier:   47:C9:71:5E:06:AA:3C:77:F9:53:A2:0B:12:B4:AF:16:2C:49:23:A6
Authority key identifier: A9:0D:C4:75:02:9E:1D:79:33:55:97:8B:A4:6B:F8:73:06:55:64:B1
Certificate issuer:       /CN=a90dc475029e1d793355978ba46bf873065564b1
Certificate serial:       019041C04CCBB9C30A55BBE4AD948092C3D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.mft
Manifest number:          0604
Signing time:             Sat 22 Jun 2024 21:00:39 +0000
Manifest this update:     Sat 22 Jun 2024 21:00:39 +0000
Manifest next update:     Sun 23 Jun 2024 21:00:39 +0000
Files and hashes:         1: j1IEZXMzXLCKi9RncFlAMYKulAw.roa (hash: TXxPSz/pQk7cTxbi6YRxpNNlXPlIanShgMwqSRJgp5I=)
                          2: qQ3EdQKeHXkzVZeLpGv4cwZVZLE.crl (hash: m/2OibO3xgl06APIvmbYVOYShBwem9DaE96CRhhCmpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:4c:cb:b9:c3:0a:55:bb:e4:ad:94:80:92:c3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90dc475029e1d793355978ba46bf873065564b1
        Validity
            Not Before: Jun 22 21:00:39 2024 GMT
            Not After : Jun 23 21:00:39 2024 GMT
        Subject: CN=47c9715e06aa3c77f953a20b12b4af162c4923a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:e4:0f:00:2d:e0:cd:b0:0d:a9:ec:45:3e:
                    bb:13:19:f9:3a:dd:d8:7f:4d:a1:21:05:29:d2:15:
                    0a:f9:49:dc:f6:eb:6d:17:59:8b:db:89:a4:a2:1f:
                    08:8a:0e:c6:d7:bc:04:7d:d0:c4:48:1a:04:49:0d:
                    ec:ef:de:92:98:7e:42:a4:96:e6:fe:99:80:20:a6:
                    bb:f1:35:18:59:a2:c7:ce:16:3a:bb:63:18:7f:25:
                    5f:db:69:62:00:b6:55:04:b1:72:36:22:27:70:62:
                    2f:cf:95:0e:3b:17:98:22:75:2b:0d:d5:05:97:bb:
                    cd:27:af:03:56:3e:c6:bc:90:12:6c:b9:a0:53:28:
                    7e:2c:77:9d:e2:ec:05:24:73:2e:df:ec:e9:7d:3a:
                    38:90:e7:76:ef:43:51:04:44:c1:38:b3:7d:f4:6b:
                    ac:36:87:34:49:97:26:b1:78:54:f9:19:aa:2d:33:
                    c4:8c:92:42:a3:63:97:8a:19:8d:db:60:9c:ae:88:
                    fb:49:ce:e7:11:ed:14:fc:af:c4:17:21:ca:da:dd:
                    5d:67:e6:c1:12:37:de:f0:78:28:d5:41:24:bf:dc:
                    f3:5a:d1:65:2b:36:6e:6f:f8:81:6d:8a:df:53:1a:
                    90:56:d3:e5:75:24:68:1f:1f:af:cd:38:70:20:99:
                    dd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C9:71:5E:06:AA:3C:77:F9:53:A2:0B:12:B4:AF:16:2C:49:23:A6
            X509v3 Authority Key Identifier:
                keyid:A9:0D:C4:75:02:9E:1D:79:33:55:97:8B:A4:6B:F8:73:06:55:64:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ad:fa:10:a3:73:e6:c6:5d:b3:a9:65:54:69:ad:16:6d:13:
         b2:b8:a0:4f:34:1a:70:e5:07:7e:4d:59:10:cd:c9:b7:99:a0:
         22:9d:34:6a:7e:1d:fb:f6:6b:5d:4c:16:9d:87:19:ac:2d:4a:
         32:d9:db:c9:c7:da:65:89:27:2e:f0:4f:3d:1e:f1:be:8c:8e:
         b6:37:b1:dc:10:aa:66:72:a3:71:46:e4:42:6d:06:65:c7:0d:
         c4:6b:fe:35:5f:0a:83:ee:56:7f:a4:c8:b6:17:c9:99:0e:74:
         43:7b:76:1b:91:90:2e:38:76:e1:2f:24:4f:69:d7:f0:c3:27:
         db:f3:e3:ea:d8:90:67:1e:d7:4e:a1:03:02:dd:9f:ba:84:bb:
         5e:72:75:44:5c:15:f8:da:f9:4d:09:39:03:90:c5:a0:67:bf:
         21:fb:64:3b:f4:d9:89:f3:73:04:01:79:78:13:da:62:9d:23:
         cc:77:9c:ff:24:27:b3:4d:38:f8:cd:b9:2e:24:c8:ec:95:12:
         78:39:b8:ab:1a:78:b4:76:5d:d8:1f:ef:82:2e:87:7d:73:f9:
         04:19:b7:12:07:47:30:5d:a2:51:d8:0d:42:04:ae:93:f6:f9:
         29:b8:bf:77:29:84:c1:09:a3:63:bd:af:33:7f:0a:30:2e:31:
         0b:37:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:08:50 2024 by rpki-client on console-ams.rpki-client.org