Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File:                     QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier:          FCOZGeaxzEFVHKAOdYqJ6T5+xpMNebPD308eVtnIOBU=
Subject key identifier:   0A:3B:1A:77:86:D3:94:44:6E:FC:D3:CB:72:3F:D9:A9:52:6E:B2:A0
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer:       /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial:       01901CA1821BF5EC35AE557670B85F10EF4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number:          05D2
Signing time:             Sat 15 Jun 2024 16:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:04 +0000
Files and hashes:         1: DNtgZodMjrvyOPIZIw8eyc8trYs.roa (hash: hP9R3Xo8GE/Ns8/Fyj6YST/LhbU8TyZGNkw0AaRaOns=)
                          2: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: KDDEsAxL1j8uvfOF5CHUOoaRCfyF/3io+Xt6N5hzxwU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:82:1b:f5:ec:35:ae:55:76:70:b8:5f:10:ef:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
        Validity
            Not Before: Jun 15 16:01:04 2024 GMT
            Not After : Jun 16 16:01:04 2024 GMT
        Subject: CN=0a3b1a7786d394446efcd3cb723fd9a9526eb2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:07:32:7c:05:90:c2:ef:71:37:ce:f5:b9:
                    92:ae:cb:5a:94:b7:0a:49:00:41:a0:51:63:d3:f2:
                    1f:53:9e:da:1b:3a:0b:6c:ca:77:b4:34:b0:33:2e:
                    34:42:7f:61:3e:42:52:37:9f:3d:54:06:25:4c:a3:
                    19:37:b0:9f:dc:25:bd:37:92:34:99:04:f2:e4:50:
                    4c:c8:66:f6:05:1a:79:a1:ef:9d:fc:c7:4d:d8:f3:
                    e0:78:b9:fd:e3:ea:ee:53:bc:0b:95:2a:fb:95:91:
                    f9:71:ab:7f:5b:21:b0:5d:c4:b3:22:98:5c:27:35:
                    c9:89:e1:a1:e4:08:aa:09:1d:16:8b:06:00:08:97:
                    60:ef:15:d8:5a:56:54:dc:6e:20:7f:74:53:7e:17:
                    24:2f:8e:a0:f8:8f:86:4e:5e:d3:06:ee:08:fd:6f:
                    9e:f8:42:9e:75:1e:cf:f9:e9:79:c8:4d:cf:ea:fc:
                    26:2c:1b:1c:98:32:2b:bb:47:27:b2:50:27:7b:e5:
                    54:f9:0b:b5:bf:76:46:e7:37:6b:ba:5a:3c:8f:5e:
                    a7:47:af:3e:1f:40:9b:72:ef:f3:67:93:89:b6:39:
                    4e:49:e6:97:a3:2c:25:5d:de:4a:8e:32:12:b9:0d:
                    b5:51:f9:11:db:6d:25:72:25:dc:09:f4:ee:9c:c3:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3B:1A:77:86:D3:94:44:6E:FC:D3:CB:72:3F:D9:A9:52:6E:B2:A0
            X509v3 Authority Key Identifier:
                keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:14:71:e2:59:00:87:7e:dd:41:93:64:ac:c5:2d:b2:eb:f8:
         75:d9:e5:14:23:be:a4:ff:64:69:55:c7:77:5e:f4:d4:9f:a4:
         1f:c0:e9:c6:e4:1e:ab:53:d1:fc:36:d4:d1:15:39:83:18:8c:
         e5:2d:cf:63:5a:49:25:7f:b3:f8:1e:01:f5:09:2c:38:93:3c:
         35:2d:fc:56:eb:9e:72:53:35:51:c8:f4:f9:d1:d6:4f:13:cb:
         90:00:14:31:d3:c1:9d:1e:ad:76:7f:a7:6b:a2:c4:62:c2:0b:
         e2:a3:e2:e0:5e:ce:6b:b7:98:de:9a:ef:83:b7:ab:6f:bf:bd:
         cc:61:51:b7:75:25:f7:4e:f8:9c:58:8e:58:77:91:de:fd:d7:
         b8:da:65:ef:40:c3:eb:22:4c:95:5c:ba:fc:fb:06:39:c6:e4:
         9e:09:40:a5:5e:50:a8:f8:7c:8c:a6:9f:ec:57:25:58:90:63:
         db:63:e4:6c:b6:f5:ad:97:70:32:b5:0a:ff:9f:66:44:b7:3f:
         01:70:57:c2:b3:e3:d2:fa:5b:bb:02:fb:35:a1:ae:17:f9:5c:
         10:76:c0:37:1e:90:c1:dc:ea:30:fb:b3:aa:be:61:c5:b1:ec:
         06:b9:05:6a:8a:b1:ba:b7:b4:99:ea:cb:c4:1f:4b:38:18:d9:
         a9:a5:6f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:56:14 2024 by rpki-client on console-fra.rpki-client.org