Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File:                     QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier:          5k1TxhOAZWPblb33PvhSQnpvJCxMUv5l2Fvim7K3Xyg=
Subject key identifier:   D3:14:29:1B:00:54:A4:68:70:89:02:8F:D5:8F:25:CB:1D:CE:66:E3
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer:       /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial:       018F8F049DB97B410B6BF02C0DB488E2344D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number:          117B
Signing time:             Sun 19 May 2024 04:03:15 +0000
Manifest this update:     Sun 19 May 2024 04:03:15 +0000
Manifest next update:     Mon 20 May 2024 04:03:15 +0000
Files and hashes:         1: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: wO/y8vH1YQoxa+E8IiFEJw2kBDuXz/a7OpJI2Y7A2yA=)
                          2: gX2O5YdaW5pGGuBB3Pm6dGJswec.roa (hash: xXSvsOAikuiU/cbpEKXTIjYoYofHOSA6Z9NNGe/7zrE=)
                          3: iULy8Djl5_TRgw9hP5o9m5dr8_I.roa (hash: X9gVLxAwGXxjXDVoXh2pcgB/+kq9kXhcfltwOHw8Pjw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:04:9d:b9:7b:41:0b:6b:f0:2c:0d:b4:88:e2:34:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
        Validity
            Not Before: May 19 04:03:15 2024 GMT
            Not After : May 20 04:03:15 2024 GMT
        Subject: CN=d314291b0054a4687089028fd58f25cb1dce66e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:ff:69:08:8b:db:0f:1b:d9:ee:e0:43:6d:
                    77:af:d2:7c:07:3f:d7:cb:4e:a8:93:a4:a3:77:64:
                    c0:8a:c6:7b:72:01:ba:66:dc:5b:1f:bd:7b:e1:42:
                    d8:81:da:38:2f:91:dc:30:d6:0d:87:0e:08:75:28:
                    dd:ba:fe:b8:82:d0:21:bd:b9:33:9c:e4:26:7d:39:
                    b4:95:e6:42:16:f7:19:98:7b:0c:e0:65:91:53:4f:
                    04:82:0c:82:2e:49:29:0e:6f:ff:18:29:5f:57:bc:
                    5b:f8:66:0a:c7:67:ce:4a:d2:42:1f:cc:e5:28:da:
                    e7:60:b7:55:f9:13:09:f5:fd:b4:36:8e:34:aa:5b:
                    c6:47:d4:2e:36:63:3b:57:8d:19:f5:6f:1d:cb:8e:
                    0d:44:07:19:e1:3e:4e:e9:4c:77:cd:70:ec:b9:8d:
                    27:cf:c3:14:13:e0:62:97:d7:54:61:06:71:a2:d6:
                    3a:3c:a9:43:39:fb:bc:90:9a:4f:e6:bd:19:ee:bf:
                    19:05:f1:cd:4e:88:f9:47:52:71:83:7c:e0:da:e0:
                    21:38:eb:c0:4f:6d:b7:88:46:02:bb:ee:bd:de:d9:
                    fa:f2:f2:a1:e9:f6:65:9e:47:43:d1:23:33:7c:94:
                    ce:95:90:2f:a3:4a:5e:98:38:e0:ee:9f:ad:ad:cc:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:14:29:1B:00:54:A4:68:70:89:02:8F:D5:8F:25:CB:1D:CE:66:E3
            X509v3 Authority Key Identifier:
                keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:e9:c5:45:9c:4f:1e:0b:bd:c0:85:eb:b3:a4:71:29:5d:
         1b:97:76:f4:a2:d6:fb:8d:b2:7c:14:11:ef:95:c4:db:8d:b4:
         e7:84:93:8d:94:83:aa:82:cc:0a:e9:b2:55:e6:12:13:eb:6c:
         90:40:7b:5b:f8:12:08:24:0e:f1:79:b3:da:83:4c:8f:d9:01:
         f2:c5:76:f7:2e:d3:29:28:44:e5:c0:e8:ea:df:82:9d:bf:7a:
         98:f3:96:d6:05:c9:e1:6a:2d:b8:63:32:d3:17:43:79:13:63:
         61:6a:42:c6:77:3a:35:6c:b5:67:c4:91:24:7e:f9:55:5e:6e:
         3f:92:c8:09:87:66:8d:4f:d5:d9:a2:18:ae:1b:d6:49:fd:57:
         65:ae:f6:5e:4b:2b:e1:1c:95:09:e8:8e:62:3b:e1:d1:83:38:
         7c:50:16:03:15:a9:bd:f9:bf:e4:3d:88:13:07:d4:97:fb:03:
         22:dc:8f:1b:5c:e0:a7:c9:0b:4f:28:54:5b:72:e2:2f:b3:a3:
         37:ae:c8:c3:32:ec:6a:66:55:65:4d:56:e9:ce:b1:47:92:d7:
         74:ed:64:3e:b9:35:52:ab:42:fe:52:4a:7b:1d:c9:c0:fd:c4:
         58:a7:d6:bf:07:7f:c1:eb:9a:f5:67:8d:39:cd:fd:5e:ec:69:
         a0:01:1b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:58:13 2024 by rpki-client on console-fra.rpki-client.org