Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File:                     QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier:          zto8M/YO0r75QvpSyUL+MzuycQNfzeDGKnihg7QHhjs=
Subject key identifier:   6B:C2:F2:C2:EA:2D:09:F5:A8:D1:41:16:12:7F:E3:A9:D5:E3:46:F1
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer:       /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial:       01903D765664A7C51E3201CCB84C593B7FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number:          0247
Signing time:             Sat 22 Jun 2024 01:01:23 +0000
Manifest this update:     Sat 22 Jun 2024 01:01:23 +0000
Manifest next update:     Sun 23 Jun 2024 01:01:23 +0000
Files and hashes:         1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: oNa1bRrT3w7k5IZHL7hG/BlrUkT2wsqRJUgLFPmDgsg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 01:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3d:76:56:64:a7:c5:1e:32:01:cc:b8:4c:59:3b:7f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
        Validity
            Not Before: Jun 22 01:01:23 2024 GMT
            Not After : Jun 23 01:01:23 2024 GMT
        Subject: CN=6bc2f2c2ea2d09f5a8d14116127fe3a9d5e346f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:52:32:4f:78:78:9f:0a:7f:a7:90:dd:58:
                    85:db:a9:fd:55:ec:41:60:b2:28:2c:6a:8a:37:ca:
                    e5:bf:0a:51:7f:0c:2f:bc:3d:86:f2:f1:6f:63:bb:
                    0f:41:ff:1a:e6:4b:65:8d:66:55:99:f7:0b:64:15:
                    13:6a:8a:7f:4c:9e:ca:46:67:5e:fb:c2:5d:7e:14:
                    93:6c:1e:31:bf:be:89:ca:94:1a:d7:6a:86:18:8d:
                    84:16:c6:ca:f5:ce:7f:f3:ee:99:70:5c:8f:6d:2b:
                    e6:80:f6:38:53:c1:ba:a6:80:96:5e:ee:ed:6f:49:
                    55:90:f4:d5:6d:3d:b7:da:01:f9:99:6d:f5:3e:dc:
                    ab:1f:92:df:d4:64:3b:9c:d8:c4:2b:e4:4e:ab:2e:
                    7b:9b:45:5d:cd:4c:13:c3:0e:d6:6f:c8:58:c3:c7:
                    90:ee:d7:2c:0f:1f:fd:7c:d3:05:a7:2f:ee:1b:31:
                    f1:54:76:dd:43:b4:07:b1:a2:a2:d4:40:88:fd:b7:
                    5c:0e:64:63:d2:70:b0:b3:24:4f:4e:36:d4:5c:ff:
                    d4:48:df:68:d9:e5:fd:0a:aa:cf:99:f4:7e:10:fc:
                    f2:9e:4a:94:e1:b8:63:88:1c:07:3f:3a:c6:1a:80:
                    f8:e8:dd:b9:2e:1e:3e:4a:c4:5c:13:2e:d0:0b:aa:
                    c6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C2:F2:C2:EA:2D:09:F5:A8:D1:41:16:12:7F:E3:A9:D5:E3:46:F1
            X509v3 Authority Key Identifier:
                keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:51:f0:ba:0d:38:32:07:48:12:46:f4:57:03:ab:d4:eb:7f:
         0e:e2:bb:c0:57:7a:0a:66:b9:1a:35:d2:ec:28:29:8c:3b:12:
         f8:c8:cc:58:85:78:60:95:c5:fd:b0:c5:3a:21:4b:bc:6d:66:
         67:89:80:97:47:15:e7:a6:43:dd:81:ba:85:48:0f:3d:d2:aa:
         8b:c8:85:49:42:b8:ef:e6:00:bc:b9:2b:b1:3d:ce:6f:f1:33:
         67:b5:85:f0:9c:50:81:6d:ca:bd:a7:46:8b:06:60:3b:24:23:
         2c:e7:0a:fe:0e:8b:86:84:bb:49:b0:4c:99:cd:db:dd:7f:8a:
         e2:09:a9:69:cd:d8:a6:0a:06:ce:65:b4:9b:89:87:52:21:84:
         e3:5b:a0:83:5d:ae:e3:c2:76:cb:2e:d2:17:6b:b6:96:fa:75:
         33:3e:71:b9:7e:23:2e:ad:0b:22:f5:81:12:5f:95:9e:18:4b:
         6a:5c:7e:45:29:21:a7:32:ac:10:33:c6:09:51:12:2f:a0:a4:
         fb:bc:96:fe:a6:01:0b:6d:13:2c:18:6b:4c:16:c8:46:d3:0b:
         6e:85:67:1a:ec:70:6c:c9:4b:4c:16:da:83:da:95:94:2b:c5:
         66:1a:e6:fd:4c:b9:6c:32:7b:e0:7a:6a:ed:01:7e:75:5f:97:
         1e:b1:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:19:32 2024 by rpki-client on console-fra.rpki-client.org