Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File:                     qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier:          qvLkpGIWeKwi8aoX1rH5XtgnrJmWp70YnCyh4mSaHP8=
Subject key identifier:   EC:D8:A5:77:A9:28:9F:E3:34:BC:34:B1:DD:D5:31:04:98:3E:43:39
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer:       /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial:       01901B57A411D0FC1073E116D6B92EE00B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 10:00:46 +0000
Manifest this update:     Sat 15 Jun 2024 10:00:46 +0000
Manifest next update:     Sun 16 Jun 2024 10:00:46 +0000
Files and hashes:         1: fHLhL2Z7oUZOPluta0WGbOAClWY.roa (hash: np/GbmsWG6xqqsW/WQsC2URTEDkQ8+uV8SW60MC4s3Y=)
                          2: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: WNFoJDpcBSVAA+XxUoDUc4r9BtN1yqivRWxWcOYFj7E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:a4:11:d0:fc:10:73:e1:16:d6:b9:2e:e0:0b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
        Validity
            Not Before: Jun 15 10:00:46 2024 GMT
            Not After : Jun 16 10:00:46 2024 GMT
        Subject: CN=ecd8a577a9289fe334bc34b1ddd53104983e4339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:29:6e:1b:57:9c:15:dc:ba:f6:fd:e0:8e:
                    10:8a:3a:06:c4:69:92:69:f3:a0:f9:b0:9e:5c:29:
                    59:e2:fc:66:b2:b8:b5:fa:11:4d:5a:c5:ab:9f:15:
                    ae:a8:c8:82:6e:3c:d2:1d:e4:3b:c9:64:2e:15:27:
                    10:55:66:4c:eb:31:76:36:6c:82:96:d5:43:cb:dd:
                    aa:b3:55:d1:4e:a0:2c:cb:15:42:10:38:c2:00:f9:
                    98:e5:de:86:aa:68:0d:d6:cb:d7:69:33:f0:7c:5a:
                    29:c5:9c:0d:01:c6:b1:02:e1:0c:6b:01:be:15:f2:
                    ca:ac:cb:06:dc:80:66:17:59:c6:5c:b6:8e:fd:34:
                    17:ea:e6:83:e3:dd:fc:e8:10:e0:34:ec:17:ca:1b:
                    86:6d:f5:27:91:09:23:c5:a1:c5:a3:e8:95:de:50:
                    47:86:24:29:88:65:dd:d9:e5:99:23:dd:1a:6c:db:
                    79:62:26:0c:08:88:c6:26:b8:18:d8:b8:91:b1:88:
                    96:67:83:a2:ba:e1:0e:2f:a9:67:28:d4:ab:8e:85:
                    24:a6:19:6c:c3:2e:7d:f1:ba:0d:a6:a3:92:45:2b:
                    d8:fc:e8:6c:cf:5d:72:9b:7e:20:9f:dd:6a:7a:f0:
                    70:60:58:99:5f:f3:1e:c9:3f:7f:4e:bf:c5:f0:6d:
                    df:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D8:A5:77:A9:28:9F:E3:34:BC:34:B1:DD:D5:31:04:98:3E:43:39
            X509v3 Authority Key Identifier:
                keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:cf:4f:5b:43:83:8a:5e:7d:cf:1b:b3:81:22:7a:21:39:c5:
         80:08:57:a5:c4:64:32:be:7f:24:9b:ca:5e:fe:83:58:c1:99:
         3b:4e:85:5f:d7:44:aa:d5:d3:e5:76:6e:ec:b5:4e:ba:4a:27:
         12:59:f9:00:b9:a7:48:6a:c1:52:56:69:91:be:65:05:8c:cf:
         b6:98:00:f4:e9:05:56:97:e8:a3:e2:8a:3c:fd:a4:03:a7:95:
         4f:bb:bc:b2:b1:bd:a1:f5:8e:dd:f9:a5:e2:9b:49:95:77:83:
         88:22:7e:7a:a9:f8:55:ea:82:97:d0:31:9b:a6:7d:96:04:96:
         16:c7:60:04:f3:74:52:21:01:1b:06:ee:fd:15:0e:b3:ac:2b:
         1e:1d:a4:1c:26:0f:4e:54:76:14:41:82:29:63:d9:5f:c9:bc:
         ac:76:07:c2:db:8d:05:0f:8f:dd:c2:88:92:37:80:bb:2a:32:
         f0:83:6e:6b:47:cd:88:be:3b:bc:8b:4e:78:44:b6:61:00:28:
         ad:99:2d:29:33:8d:de:42:4a:56:79:dc:be:ab:9c:60:f6:2e:
         98:cd:d7:1d:28:04:a1:d4:56:fb:71:9d:33:54:4e:04:0a:f5:
         66:17:d6:aa:2b:1c:69:71:33:48:fd:66:ba:26:0a:30:61:a6:
         65:b8:5e:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAbV6QR0PwQc+EW1rku4AtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjMxMDA0ZGYxMzVhYTFhOGI5NDMwMzNkYjE0NjkxYjEx
YTYzZGQwHhcNMjQwNjE1MTAwMDQ2WhcNMjQwNjE2MTAwMDQ2WjAzMTEwLwYDVQQD
EyhlY2Q4YTU3N2E5Mjg5ZmUzMzRiYzM0YjFkZGQ1MzEwNDk4M2U0MzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA4pbhtXnBXcuvb94I4QijoGxGmS
afOg+bCeXClZ4vxmsri1+hFNWsWrnxWuqMiCbjzSHeQ7yWQuFScQVWZM6zF2NmyC
ltVDy92qs1XRTqAsyxVCEDjCAPmY5d6GqmgN1svXaTPwfFopxZwNAcaxAuEMawG+
FfLKrMsG3IBmF1nGXLaO/TQX6uaD49386BDgNOwXyhuGbfUnkQkjxaHFo+iV3lBH
hiQpiGXd2eWZI90abNt5YiYMCIjGJrgY2LiRsYiWZ4OiuuEOL6lnKNSrjoUkphls
wy598boNpqOSRSvY/Ohsz11ym34gn91qevBwYFiZX/MeyT9/Tr/F8G3fPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzYpXepKJ/jNLw0sd3VMQSYPkM5MB8GA1UdIwQY
MBaAFKizEATfE1qhqLlDAz2xRpGxGmPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQt
YzJhNDNiMDgwZDZmLzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQtYzJhNDNiMDgwZDZm
LzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd89PW0OD
il59zxuzgSJ6ITnFgAhXpcRkMr5/JJvKXv6DWMGZO06FX9dEqtXT5XZu7LVOukon
Eln5ALmnSGrBUlZpkb5lBYzPtpgA9OkFVpfoo+KKPP2kA6eVT7u8srG9ofWO3fml
4ptJlXeDiCJ+eqn4VeqCl9Axm6Z9lgSWFsdgBPN0UiEBGwbu/RUOs6wrHh2kHCYP
TlR2FEGCKWPZX8m8rHYHwtuNBQ+P3cKIkjeAuyoy8INua0fNiL47vItOeES2YQAo
rZktKTON3kJKVnncvqucYPYumM3XHSgEodRW+3GdM1ROBAr1ZhfWqiscaXEzSP1m
uiYKMGGmZbhefA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 12:28:26 2024 by rpki-client on console-fra.rpki-client.org