Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File:                     Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier:          +X2Y1k/v/HjjV/P0DQv/yPzWLT9ZDerpc3/rz+T4+Ew=
Subject key identifier:   6D:29:FD:50:16:42:85:CC:40:0A:36:13:0D:41:E6:1A:F3:AC:D8:99
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer:       /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial:       01901E58D949CFA74774F1AA1A482EEF857D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 00:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:57 +0000
Files and hashes:         1: KZF7nutfuUg5-YzRYz3twqYDF1I.roa (hash: OKL2jGxl+5iRZQTpfuc851ODoSAmpXlUOJxvIRgbQuk=)
                          2: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: WdLzOc48tCN9zcbbBxJIsgb+vj1+u0akX7MB3oHPLfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:d9:49:cf:a7:47:74:f1:aa:1a:48:2e:ef:85:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
        Validity
            Not Before: Jun 16 00:00:57 2024 GMT
            Not After : Jun 17 00:00:57 2024 GMT
        Subject: CN=6d29fd50164285cc400a36130d41e61af3acd899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:d6:5e:9d:f5:78:ae:60:6e:55:6a:c3:31:
                    5c:78:6c:b7:ae:23:2b:d1:17:a5:a2:23:1c:ba:b9:
                    c8:d2:4b:33:af:9c:9a:91:2a:9f:ff:f2:b6:f7:81:
                    c7:c1:d4:ce:6b:6b:8e:be:f5:9e:43:f8:0d:09:ac:
                    fa:bf:4f:e9:b0:a1:fa:a5:50:45:85:cd:97:b1:8f:
                    ed:0a:93:4c:2f:77:30:15:43:99:99:19:af:2e:74:
                    bf:a1:1c:9e:44:98:76:34:82:ad:9c:5b:2f:21:ed:
                    e9:3f:ad:fc:36:69:07:e9:a1:51:3e:0c:05:8c:01:
                    a4:96:c4:ea:ba:75:88:42:bf:6a:96:2f:1c:46:92:
                    44:15:5a:fd:75:2a:b7:2f:4f:02:bb:5e:80:aa:b1:
                    c1:d9:0c:86:b7:00:92:52:37:db:09:b8:72:65:ea:
                    d1:d9:b3:f7:35:2f:cd:58:df:f4:e7:0a:f2:cc:14:
                    c2:6b:e9:79:e3:4c:8f:84:72:d7:e9:fa:9f:ab:fb:
                    08:7e:cb:fe:fe:7a:18:6b:7c:75:e3:ca:9b:2e:31:
                    95:65:f1:97:cb:13:6c:b6:99:b6:f0:a1:82:5b:7c:
                    28:67:0e:68:3d:47:13:dc:53:e9:21:51:f1:64:32:
                    34:a4:e2:d1:37:84:51:9c:91:9a:89:85:e1:74:78:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:29:FD:50:16:42:85:CC:40:0A:36:13:0D:41:E6:1A:F3:AC:D8:99
            X509v3 Authority Key Identifier:
                keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:17:da:e5:b4:78:21:da:e2:a4:90:2c:39:d3:f7:4c:f8:
         cf:2f:11:cc:2e:63:c4:e5:0e:e6:1f:41:b8:be:47:5d:d0:99:
         bc:e5:d4:38:ea:f5:2d:5f:45:66:df:30:22:4b:ea:ee:d7:77:
         8b:d8:99:c4:9c:ba:c3:7d:e9:de:ed:27:58:0b:a5:f3:1a:4b:
         1c:8f:48:29:b1:c7:66:ba:55:e7:96:f0:21:0f:d7:3d:9d:aa:
         4e:3c:20:3d:3f:af:31:9d:b6:83:a6:74:e5:00:91:8c:e0:43:
         f7:08:26:0d:6c:cc:16:0c:9f:57:98:e2:37:ad:d3:e8:16:e6:
         ba:b9:31:57:61:0a:64:21:98:95:d6:ce:2c:70:3a:87:b3:50:
         70:b4:32:1b:a8:b8:d1:43:a4:93:0a:46:be:b2:36:58:15:27:
         97:35:30:df:33:77:62:80:c2:0f:37:73:63:42:da:d9:3b:d9:
         3c:d5:09:4d:ab:c2:ad:12:72:fd:4b:af:5c:ea:12:a0:df:75:
         7b:be:f0:63:97:5d:b7:89:10:8e:b0:ef:ce:8d:b4:17:bc:6e:
         54:23:df:9d:21:77:62:bf:56:b0:69:63:db:a4:86:7f:ff:6e:
         1a:40:99:dd:ae:d7:c2:63:0d:d7:db:9f:1d:9e:20:87:e0:1e:
         a4:bc:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:28 2024 by rpki-client on console-fra.rpki-client.org