Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File:                     QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier:          Bo2X6LyCoj9OHNWbgd/upa/6FoVQyH3hvNOcS6Ap88c=
Subject key identifier:   4C:52:D0:B5:8C:98:00:37:A2:20:67:AD:18:08:B2:EC:45:DB:D3:A0
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer:       /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial:       018FA4E5DEC11CFEA20861B7F0E594D4D95B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number:          118E
Signing time:             Thu 23 May 2024 10:01:19 +0000
Manifest this update:     Thu 23 May 2024 10:01:19 +0000
Manifest next update:     Fri 24 May 2024 10:01:19 +0000
Files and hashes:         1: 1f17xm76lUSJclYbNYDtmigLnEQ.roa (hash: UrrEtwQGFKc3lqoaEld9XLorRAP/EcL2MrHtjmSqgp0=)
                          2: 8Ku-uykbIPPTlg6srAUkHaIWrAY.roa (hash: P8wJJdhINlvCX0c4HKpxxZMuSCo21FS84pundorzeng=)
                          3: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: Py6jJAp+FMl173cx8Mwnbt+sDYejIs4i4aPFFLkH0Ig=)
                          4: UcUWLwHzk58XamMxbAXZGCUlnMU.roa (hash: KeRbjN9PJeP/zHTETmiWOP46hb9UpdskBcS9SFoxm1o=)
                          5: arPmcy2TNegZT6aKHptURdXhRpU.roa (hash: rJKbsDYWUsB7rYCYJ3zOS1eS9E/1FsJLNCYQ5urJ7P8=)
                          6: kQPM49QgSdDxOD0FqWZR9uqZzvE.roa (hash: TFX2yn/9nXE2/wRCc8e2znDiNTJDxpdZ6D/QkOKOBhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a4:e5:de:c1:1c:fe:a2:08:61:b7:f0:e5:94:d4:d9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
        Validity
            Not Before: May 23 10:01:19 2024 GMT
            Not After : May 24 10:01:19 2024 GMT
        Subject: CN=4c52d0b58c980037a22067ad1808b2ec45dbd3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:18:b0:87:68:b2:f1:32:38:be:a2:83:4e:
                    a3:9c:fc:f8:a8:48:91:de:40:c6:7f:d3:f1:5e:71:
                    30:37:b1:58:32:b2:ad:fc:20:f4:6b:77:74:fa:b3:
                    cc:1d:18:2c:85:77:8c:f3:90:85:dd:cf:b2:83:49:
                    75:4b:d1:04:7e:65:02:69:d8:8a:73:16:0d:5a:c3:
                    ce:03:85:0f:92:65:71:34:52:df:e0:6d:c7:1a:06:
                    12:70:fb:f7:cc:86:42:5a:69:c1:04:f8:7a:d7:1d:
                    ef:f1:09:f6:03:f1:9c:cb:ff:53:ef:4b:4c:04:9c:
                    99:60:4f:ed:0a:ed:c8:49:87:b1:b0:e6:7f:ca:52:
                    ca:73:3e:c2:9b:d7:2e:0d:91:3b:5a:45:90:a6:0f:
                    0f:03:a3:75:ca:ff:dd:ed:4e:da:ae:cf:97:36:86:
                    91:30:68:2a:7c:c7:f4:5d:e3:2b:e4:97:8d:f6:5f:
                    89:5c:d5:19:a2:2e:2e:10:24:78:49:83:93:10:39:
                    96:02:22:5c:5a:67:d1:92:71:e4:d4:de:21:12:9c:
                    78:b6:7c:4b:aa:88:75:b8:20:27:aa:91:a7:e9:40:
                    9b:1c:7d:8d:e3:d5:97:61:0e:02:7b:da:be:c5:31:
                    26:97:09:63:6b:b7:80:e0:b4:55:87:22:79:96:25:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:52:D0:B5:8C:98:00:37:A2:20:67:AD:18:08:B2:EC:45:DB:D3:A0
            X509v3 Authority Key Identifier:
                keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f0:32:67:6c:40:e3:03:2f:17:c8:a4:3b:58:e9:72:d8:4c:
         13:58:60:2d:04:40:74:fc:6c:1b:36:a3:ff:0f:a3:04:67:da:
         54:ab:7d:76:59:ad:1a:81:a0:fe:da:23:d7:bc:e2:30:80:da:
         6a:45:31:aa:97:a2:4b:90:17:13:f6:01:a8:99:d1:44:1f:79:
         e3:11:17:bd:48:1f:0f:73:23:24:4b:8f:d8:73:49:bb:e6:e7:
         bc:ba:e2:e6:66:93:73:d2:e2:0a:0e:1d:43:d6:94:19:37:fb:
         10:34:3a:4f:94:ed:e3:1d:88:bb:ec:9b:03:6a:c8:7c:5d:3c:
         e8:25:96:3f:c4:1e:67:2a:27:79:84:d3:d8:88:2a:7d:b7:73:
         b2:db:ee:08:ed:bd:c4:63:05:87:36:32:02:46:90:7d:54:08:
         e5:8a:12:55:a8:01:9f:6c:16:49:20:cf:8d:b5:42:94:0a:b8:
         ed:79:b6:1d:03:5f:cd:8d:d1:f6:a5:33:2b:dc:41:f8:ce:8b:
         dc:d1:f0:a1:56:bf:78:42:4a:4a:2b:fc:73:90:54:dc:33:80:
         24:94:29:22:c9:37:0f:d4:da:ae:c1:9b:e5:eb:bc:93:80:0d:
         68:0f:9a:34:1f:1d:f9:90:4d:07:7b:fd:8c:87:6b:e3:c1:1c:
         26:d2:c8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 13:49:21 2024 by rpki-client on console-ams.rpki-client.org