Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File:                     QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier:          8J2lIXbTkJduR66JWV8vDasYeKW+ZpAF+T0qLzodBTE=
Subject key identifier:   EE:BD:DB:0F:46:4E:3C:B0:F4:43:30:CA:09:15:BE:6D:ED:6C:43:33
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer:       /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial:       01901CD802BB658294CA8F808FD028CD1EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 17:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:36 +0000
Files and hashes:         1: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: o4d0lM0++s/XQTxSG2fjtLgI6Z7PCP8ztihuiBG0/XY=)
                          2: fl8HvhHMF8JruvZvy9GS-cNfh_Q.roa (hash: NNSxCQsJouAcTw4w2r+9K2jDJBTda6X6pC5Zp0SKrNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:02:bb:65:82:94:ca:8f:80:8f:d0:28:cd:1e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
        Validity
            Not Before: Jun 15 17:00:36 2024 GMT
            Not After : Jun 16 17:00:36 2024 GMT
        Subject: CN=eebddb0f464e3cb0f44330ca0915be6ded6c4333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:7f:03:bd:61:fa:f5:6c:0d:a2:11:4f:a8:
                    67:36:1b:e6:c2:20:c2:cd:33:41:2b:74:5f:c1:99:
                    77:3c:ff:66:00:79:74:0d:d1:4d:0e:be:cd:f4:10:
                    e2:e8:b5:6a:89:17:ba:fb:4f:39:72:d5:28:47:9d:
                    ee:31:bd:fc:13:64:c2:6a:37:51:dc:64:7e:7b:27:
                    a8:b3:75:6f:67:fb:87:53:cb:17:e7:cc:3d:aa:a1:
                    22:51:94:a1:b5:90:d4:37:dd:91:77:0c:84:bb:6e:
                    07:01:18:ce:97:b1:51:6e:8a:1e:b1:6e:a6:93:0f:
                    c6:92:e9:3d:c9:63:c1:79:5a:6d:2b:55:19:5c:53:
                    99:3b:7a:9e:ce:cb:08:cb:9d:e4:56:06:80:ea:17:
                    20:68:8a:71:b4:f9:cf:c2:0a:df:3e:5f:61:0b:1e:
                    a5:0c:ee:4e:b5:7b:14:ba:cf:01:d1:d6:7f:c0:13:
                    1b:ed:d1:ce:6a:6a:e2:58:d8:ac:a2:4b:94:26:5d:
                    e8:c6:a6:ab:22:ff:aa:1b:44:25:02:ec:a7:73:0f:
                    dc:07:22:cc:70:55:3d:ad:c8:bc:9c:d7:4d:db:b6:
                    a0:e2:79:4a:7d:61:7d:0c:f7:fa:b7:7f:2e:93:c7:
                    50:e8:93:ae:bd:61:74:ed:c8:33:ec:89:2d:ef:0b:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BD:DB:0F:46:4E:3C:B0:F4:43:30:CA:09:15:BE:6D:ED:6C:43:33
            X509v3 Authority Key Identifier:
                keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:83:b9:f7:5b:1d:18:00:5a:ef:d3:a8:02:86:e3:2f:4a:c2:
         ac:72:00:3a:8f:65:77:c1:f9:ab:be:08:66:76:d2:db:fa:1c:
         70:37:bf:91:49:97:72:a6:0e:7f:d2:27:b2:87:96:ad:10:83:
         2c:41:62:55:3d:f5:a6:3d:29:ef:90:3a:66:7f:61:e7:4e:0e:
         0b:39:98:0b:20:11:da:28:23:f8:fb:11:48:02:71:9e:f4:67:
         40:df:dd:bb:5a:a2:a1:fc:cc:af:97:89:74:c0:aa:91:29:30:
         9b:38:ee:98:a1:f5:a7:d1:a1:ff:c0:56:6b:7b:49:c7:16:1f:
         2b:96:9d:71:f8:76:fb:a4:cc:14:54:a0:40:4b:bf:da:45:84:
         5d:57:ef:83:44:96:c8:3f:47:8f:c6:01:92:bb:95:f2:2d:80:
         a2:53:c4:3a:38:60:38:43:ef:68:dd:85:29:90:59:72:6b:fa:
         97:f9:1f:93:63:de:91:6f:53:7d:fc:a5:7d:8d:23:7a:cf:59:
         b1:cd:5f:65:e4:94:a1:b5:56:dd:a3:b7:3e:f6:56:09:89:a4:
         9b:5b:a8:fa:f1:e4:15:a6:67:5a:a6:0a:6e:86:72:23:bc:c4:
         e5:aa:40:e3:ea:53:63:2e:66:00:4f:75:f5:fe:b1:10:32:5d:
         b2:38:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:24:25 2024 by rpki-client on console-ams.rpki-client.org