Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File:                     CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier:          voBEBtjm8wz4IsL08fResdeK16lLVKoroqQkxS3rpAQ=
Subject key identifier:   8D:13:E5:F0:96:A0:B6:18:B5:55:51:14:5D:DA:96:FF:0B:9A:57:60
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer:       /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial:       01901BFD099B89F47C82DDA5FFF47E9EEF17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 13:01:25 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:25 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:25 +0000
Files and hashes:         1: 8s4IkYO9ZNc9rJp7RxCM3Qs3iO4.roa (hash: dHJKL/D6M5rRqAd5fbvGNtB3b0VvA+cXK1LxnmBsL5A=)
                          2: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: V5bYcy2TGjKqVrwt1a07+M6feNS7cmFEO8QqO/oAn7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:09:9b:89:f4:7c:82:dd:a5:ff:f4:7e:9e:ef:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
        Validity
            Not Before: Jun 15 13:01:25 2024 GMT
            Not After : Jun 16 13:01:25 2024 GMT
        Subject: CN=8d13e5f096a0b618b55551145dda96ff0b9a5760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:25:9b:e0:13:28:31:d7:ad:ed:dd:41:02:
                    55:48:e7:28:34:31:18:e8:25:c2:b0:75:6f:f8:34:
                    ad:b3:34:d5:df:b5:17:91:17:f7:9a:8f:09:6f:f5:
                    da:83:28:09:d3:56:a9:6f:2a:03:f5:f7:ab:e5:dc:
                    39:27:7d:93:1d:fe:60:63:2c:b4:be:f5:9f:fe:74:
                    1f:7a:b4:96:19:17:9a:7e:e5:5f:0e:ec:01:14:f4:
                    d4:47:c3:96:16:4f:bb:6c:4b:09:aa:5b:7e:b9:26:
                    82:5c:96:d1:a0:62:18:ad:8e:fa:1f:2c:ef:3f:7f:
                    d6:65:70:d5:c4:47:22:bf:ae:28:06:59:54:05:50:
                    1f:a7:72:f6:c6:ac:27:57:f7:12:a1:4a:27:f2:c3:
                    cc:c7:b7:34:63:27:bb:b9:89:97:a5:8a:f6:6d:63:
                    c1:e3:64:93:75:44:34:cf:dd:6e:f1:9e:2b:61:7d:
                    fc:99:f5:6b:55:6c:97:e5:8b:1f:fd:78:a1:46:f2:
                    04:df:d0:48:66:5e:cd:41:ec:09:7d:ec:6e:04:82:
                    c0:cd:21:a8:fa:7b:c3:2f:e5:5a:4b:8a:41:9a:d2:
                    a6:ff:d8:d1:80:b4:de:cb:8e:59:31:12:f7:8a:ad:
                    18:9a:b9:89:a8:4c:3d:1d:7f:94:13:d7:c6:e9:27:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:13:E5:F0:96:A0:B6:18:B5:55:51:14:5D:DA:96:FF:0B:9A:57:60
            X509v3 Authority Key Identifier:
                keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6d:50:03:41:76:25:0c:8e:d9:0c:48:3e:50:15:be:62:e1:
         e1:1b:8f:cb:aa:4e:61:18:00:0d:d8:b0:fe:93:8e:64:fd:b1:
         8a:2a:3f:2a:ff:49:f7:5d:ae:f6:46:2a:c6:59:b7:e3:e3:87:
         01:65:ae:e8:67:53:5f:c5:c8:45:77:41:44:8a:fb:9d:19:71:
         cd:d2:11:18:82:2f:2b:23:ef:66:de:f5:e0:37:e2:ab:6b:6e:
         de:ce:42:47:3a:e8:26:80:b8:38:1a:08:7a:7f:18:73:68:95:
         ec:80:a9:e4:52:b9:d0:37:ad:c9:f6:d4:2a:75:99:be:23:f6:
         e0:5a:42:00:bf:41:b5:c5:38:83:eb:64:e0:aa:26:18:d2:16:
         bf:fd:c0:2c:23:65:8c:2b:96:08:f0:85:ba:7b:ff:23:eb:e5:
         ae:00:35:65:0a:69:bb:da:9b:cc:96:a5:60:09:d5:4a:91:e3:
         17:8d:de:1d:d3:76:cf:d3:8d:dc:0e:a9:75:e1:11:f3:e1:c0:
         0c:2d:f6:b6:39:f7:29:41:0c:42:ed:b7:ef:59:03:f8:b2:f3:
         9e:76:c7:64:43:5e:33:d5:c4:ad:1e:42:52:d9:a5:14:56:9c:
         ee:cf:9f:0b:3d:5f:21:e0:1d:60:40:dd:7f:42:4f:f0:ec:2e:
         ef:62:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:24:21 2024 by rpki-client on console-ams.rpki-client.org