Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File:                     qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier:          hzV2EMWSYA3jvgswWGRiUgKJ2naFYP6D8Ap4EDZvVXY=
Subject key identifier:   53:EC:D9:40:A2:B4:33:97:D6:56:F7:82:3E:3B:3E:35:E0:9B:80:ED
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer:       /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial:       01901FD90E62BD22F92883E2417E21DEF924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 07:00:36 +0000
Manifest this update:     Sun 16 Jun 2024 07:00:36 +0000
Manifest next update:     Mon 17 Jun 2024 07:00:36 +0000
Files and hashes:         1: ScccwXon05t59yBDYOkj_6pSBzo.roa (hash: 9L40E9vJNuaMsmt05Rbbr1j90sCXRETKEjensRsXvSM=)
                          2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: U+wRFBeUIcFvjuD7Sm/amxgVDI9qYniBtOy/9oNkcBU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:d9:0e:62:bd:22:f9:28:83:e2:41:7e:21:de:f9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
        Validity
            Not Before: Jun 16 07:00:36 2024 GMT
            Not After : Jun 17 07:00:36 2024 GMT
        Subject: CN=53ecd940a2b43397d656f7823e3b3e35e09b80ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:57:91:73:33:ac:de:e2:b1:20:3e:0b:3d:22:
                    b5:3e:0f:c8:40:62:f5:34:69:ae:f8:15:a6:93:77:
                    41:62:0c:8f:63:99:92:c0:d0:a4:7e:1c:7b:02:9a:
                    90:23:f5:f5:80:bd:68:b0:9b:c8:44:1f:56:fd:07:
                    31:33:45:47:e3:f8:ec:86:8a:c5:b3:4a:b3:97:72:
                    c3:86:39:0f:80:40:b7:34:38:60:7d:c4:1d:81:e9:
                    86:5e:16:f6:fd:e6:e0:b4:25:d4:04:0b:76:7c:0c:
                    9a:e1:f8:50:ca:51:15:4f:95:70:65:b4:67:7c:86:
                    a6:c3:49:88:da:fe:79:7b:8b:96:eb:f8:3d:3e:14:
                    c2:60:ca:b0:62:e2:b4:ed:92:5e:8f:0d:61:4b:bc:
                    4f:26:52:9d:0f:c5:a5:6c:ae:69:61:36:f2:d2:f4:
                    22:12:d2:e3:23:28:dd:66:3a:ec:3a:5f:2e:2a:92:
                    47:6e:b6:c9:c2:44:b2:eb:40:7f:ec:d5:d1:f9:f1:
                    22:d6:4a:cf:ee:0b:64:97:4a:f0:53:a2:ec:ab:7f:
                    20:d5:27:14:4f:e7:ef:17:6d:d3:be:45:3b:c6:63:
                    97:57:64:99:13:90:c8:7a:f4:70:a5:8b:02:86:da:
                    01:f7:e4:77:98:de:bf:cb:55:c2:b2:f6:3d:ba:4d:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EC:D9:40:A2:B4:33:97:D6:56:F7:82:3E:3B:3E:35:E0:9B:80:ED
            X509v3 Authority Key Identifier:
                keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:43:08:fb:67:6c:39:82:51:71:a6:93:0a:f1:9b:b4:6b:21:
         15:13:fd:be:68:d9:a8:17:02:7f:75:d0:e7:50:93:be:7c:59:
         c9:07:fe:32:7e:9c:21:01:35:35:31:59:ed:4b:29:ed:22:30:
         0b:b9:3c:eb:d9:52:77:6a:bd:eb:72:41:56:dd:c3:28:8d:0b:
         4f:e7:96:cf:f3:a6:5f:43:e7:bd:57:31:2d:3d:11:71:3d:68:
         f9:a2:07:9a:61:91:a7:61:a8:49:8a:60:d9:de:a5:5f:82:fa:
         33:26:d8:1b:09:76:19:ab:4e:ff:58:09:8d:cc:0f:3a:0a:2c:
         5c:e0:47:b4:65:10:5d:ea:09:ac:61:04:97:b8:c2:bc:47:6c:
         ed:d2:0f:78:76:fe:fb:72:a0:f9:7e:95:14:ad:82:c6:68:63:
         2e:f0:9d:ff:c0:22:2c:8a:ee:14:02:05:dc:74:25:c9:bd:df:
         1e:54:ab:cc:37:f8:f3:f3:f7:32:f3:9f:09:81:cf:dd:97:4e:
         fe:df:b5:cc:50:b6:79:b6:be:a0:2e:3a:07:04:6f:2b:55:08:
         88:05:88:6f:6d:bd:f9:21:1a:3c:d3:fb:de:57:7d:cb:3b:de:
         cf:95:7d:d6:5c:96:1b:06:96:1f:c9:29:b4:3b:e9:41:d8:c3:
         9b:b8:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:53:27 2024 by rpki-client on console-ams.rpki-client.org