Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File:                     QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier:          qaT/+gaY0W6zxfoMEjs0o54C049qxlMB3Akx8c6Mdzw=
Subject key identifier:   1E:96:04:2E:30:5A:6B:84:38:42:0E:DA:FA:B4:A0:4E:C4:A6:B0:CF
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer:       /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial:       01901DEC74E3204800F29DC273690DD9200C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number:          09C7
Signing time:             Sat 15 Jun 2024 22:02:33 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:33 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:33 +0000
Files and hashes:         1: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: m7B0yVUCQ4KGjhRlQePKf1BNupmLZT7jkytE5Y4mqNQ=)
                          2: t1lPzHM4t1s7DphbAsdPtxw2AJQ.roa (hash: /kavas+yfik0Pv65GBLCGUPKl+zvo6SNSKedy7VCafU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:74:e3:20:48:00:f2:9d:c2:73:69:0d:d9:20:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
        Validity
            Not Before: Jun 15 22:02:33 2024 GMT
            Not After : Jun 16 22:02:33 2024 GMT
        Subject: CN=1e96042e305a6b8438420edafab4a04ec4a6b0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:11:cd:f0:08:ee:d5:90:a3:ee:cb:eb:f6:
                    aa:c1:0b:4b:24:db:14:c9:a5:56:d1:dc:91:71:cc:
                    78:77:5f:88:bd:25:0c:11:70:38:62:d0:e0:cb:48:
                    7f:b1:aa:33:7f:16:ad:b5:d5:38:d8:e6:40:34:73:
                    fa:2f:66:70:40:9f:9a:ec:cb:21:40:b7:9f:03:c4:
                    c5:ab:d5:1c:4b:54:cb:c8:12:2d:13:73:b7:9b:a4:
                    9b:c2:3e:c0:a7:88:89:8c:05:47:79:56:a5:fb:04:
                    4a:ac:11:f0:0c:3a:53:1e:76:bf:60:9c:b6:4e:74:
                    dd:cd:82:35:07:4b:ab:53:55:e6:c5:d0:97:7b:a9:
                    99:ad:da:6c:a1:b4:2e:eb:34:59:a0:00:eb:8f:32:
                    d0:5d:b4:be:cf:fe:45:72:d2:60:a0:7d:20:39:a1:
                    bb:ac:09:3f:c5:b0:83:fc:51:05:1d:6e:47:11:4b:
                    05:0a:b0:34:0e:9f:0a:7a:ba:ba:6e:da:cd:8e:6d:
                    74:b9:ee:36:36:7e:6c:97:22:6e:38:a7:53:92:99:
                    8f:47:d1:9b:69:9b:9f:b4:9e:0c:68:77:60:17:a1:
                    54:7c:0a:14:22:80:a7:ba:57:77:a1:0a:2b:98:28:
                    73:67:ad:c3:31:a9:be:74:4d:3b:e0:3f:24:32:6f:
                    bf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:96:04:2E:30:5A:6B:84:38:42:0E:DA:FA:B4:A0:4E:C4:A6:B0:CF
            X509v3 Authority Key Identifier:
                keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:99:8c:63:92:2d:6f:70:80:6d:f2:8e:95:eb:42:fe:a6:35:
         2d:d6:9f:ab:48:92:2b:e6:6d:07:34:dd:0e:46:b7:c8:62:2b:
         54:67:2c:9f:bd:f4:91:18:0e:00:d7:f2:80:5f:1e:6d:df:c2:
         28:39:81:24:40:fa:f7:16:d9:ef:b8:5f:fc:46:8c:62:75:b0:
         ff:bd:20:ae:53:c9:13:5f:ef:17:60:8c:28:cc:f3:64:ea:99:
         25:62:eb:07:7f:ea:ce:5e:c9:b2:6d:10:1d:90:b4:c1:99:de:
         13:e7:18:a4:77:91:98:20:01:b2:f9:65:dd:a6:dd:f1:b0:1d:
         f3:ce:02:e2:d0:35:8e:ef:48:5c:66:6a:68:82:75:d8:e7:67:
         b3:58:74:a3:b9:4a:4b:39:d1:16:9d:49:47:9f:fe:92:fb:08:
         85:c1:0a:2c:52:70:e8:f8:25:52:96:c8:bf:f0:01:35:a4:01:
         2e:d8:3e:f2:a8:e1:ee:97:5a:82:10:2b:b7:52:53:fb:25:4d:
         7a:84:d8:bb:56:aa:31:e3:22:d8:e0:41:ea:4f:65:42:af:45:
         e9:b8:ec:d9:f5:c3:58:ea:bb:ce:a2:c8:da:4e:31:c8:9f:51:
         4a:70:ac:fe:d3:49:e1:1d:9f:be:6d:1c:b4:be:e8:44:69:96:
         54:6c:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:01:02 2024 by rpki-client on console-ams.rpki-client.org