Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File:                     QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier:          z82zOg+lJfQhV8W4RN1cPTz0Qe4Xz1OIjTXzMZScNFc=
Subject key identifier:   00:84:34:B5:D2:70:1A:6F:34:63:FC:AC:5B:78:58:E1:31:08:02:75
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer:       /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial:       01901DEC2E177D9C0F071950BE595B92D4C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number:          0E58
Signing time:             Sat 15 Jun 2024 22:02:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:15 +0000
Files and hashes:         1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: M/zPQCiS0hzydIwGUl2Jxdcb6FNzYpWt7dyYsjjNp0Q=)
                          2: ffgd_T-f9GjEIXEHh6tTMjIp2sM.roa (hash: V/jhWP8kVAnD1IlrZOqwM3CsgdPI8gAv7WaqQDopnEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:2e:17:7d:9c:0f:07:19:50:be:59:5b:92:d4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
        Validity
            Not Before: Jun 15 22:02:15 2024 GMT
            Not After : Jun 16 22:02:15 2024 GMT
        Subject: CN=008434b5d2701a6f3463fcac5b7858e131080275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:bc:af:a1:6c:59:17:c3:2c:f8:8e:64:29:
                    28:3a:82:ed:52:c5:56:fd:80:84:e9:eb:6f:1e:78:
                    a2:e3:6c:24:5b:57:51:13:7b:0e:a6:fe:5a:4c:b7:
                    61:f0:2f:20:cb:4f:26:7c:f7:48:45:df:35:b2:45:
                    e9:5e:4b:7b:d1:a3:44:d1:ca:cd:e8:41:05:ae:01:
                    ea:fa:f4:3a:05:93:f7:17:31:f2:fb:6b:17:13:34:
                    c7:57:a7:bf:3e:09:e5:23:88:20:47:14:5b:cc:3c:
                    5c:80:34:09:32:bd:3c:14:51:af:3d:a2:bf:00:e6:
                    e2:74:15:7d:33:c9:66:62:17:24:d9:b9:9b:42:73:
                    ac:59:f7:5c:8a:a5:a6:83:1c:88:db:9e:d7:a0:66:
                    21:94:9b:72:38:6d:47:b5:65:72:bd:37:19:5c:ed:
                    e5:3f:fd:8d:0a:a9:31:27:b5:2c:50:ff:ad:b5:d8:
                    29:a8:05:b5:21:fb:60:d8:10:87:b5:ed:0b:b2:02:
                    25:0f:7d:2f:9d:35:8b:e1:46:0a:e8:1e:a9:d2:37:
                    c3:23:3e:70:24:4d:58:7a:15:b7:20:82:3f:3d:84:
                    64:7b:f3:3f:9e:45:62:f7:f1:34:59:53:8f:7f:46:
                    9d:1f:57:52:4f:49:e7:a4:94:88:e4:6f:1d:d7:26:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:84:34:B5:D2:70:1A:6F:34:63:FC:AC:5B:78:58:E1:31:08:02:75
            X509v3 Authority Key Identifier:
                keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:e6:0d:32:b4:81:e9:68:bd:f9:0f:07:c6:f4:18:35:cd:
         6a:4b:09:df:13:8b:6f:71:3b:fb:77:f1:9c:80:b7:f5:6a:7c:
         c1:40:d2:3b:d2:11:e6:3e:e8:da:53:2d:de:26:af:3d:bd:16:
         96:37:5b:e4:f5:2c:9c:aa:fa:b4:6a:8b:01:3e:7f:ab:f5:d3:
         bd:f0:76:c3:fd:32:57:85:2c:34:9e:10:e9:5e:aa:b3:51:ca:
         da:26:93:68:85:45:f1:1f:9c:7d:81:2d:86:60:8e:d7:f4:4f:
         f8:62:43:33:3c:bb:ed:ad:94:5e:dd:2d:16:80:b3:77:e4:1e:
         4e:3a:cf:9f:bf:ba:d5:06:e8:35:8c:2c:3b:51:93:a6:f8:f2:
         d1:3c:e2:c6:26:b5:72:66:e6:b7:72:9a:4e:27:a4:b0:a0:7b:
         0d:8f:de:6d:0e:f1:a3:d7:18:be:88:93:5a:d4:45:a0:b4:35:
         76:5c:1f:0f:12:cb:e0:e8:ab:1f:42:91:23:7b:54:73:14:6f:
         74:00:32:6e:5b:45:4c:33:a0:e6:8e:cd:85:ed:b9:fe:0a:e6:
         9f:f6:c3:f3:59:74:01:c8:86:24:c5:b4:76:dd:b3:b2:71:79:
         43:c8:72:5b:bc:f0:13:49:a3:7d:9c:e1:ee:14:56:f9:b8:63:
         99:13:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:35 2024 by rpki-client on console-ams.rpki-client.org