Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File:                     Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier:          z4nZj6SCMvb5VMgefmdWoHgI7mD0sClJDzxYMSwFMFk=
Subject key identifier:   98:1C:93:B2:85:7D:B7:3C:85:B3:9B:44:A5:D1:61:D7:1A:8C:4D:6B
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer:       /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial:       01901D0F25834FD44A6FF394FA51AA92AF0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 18:00:50 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:50 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:50 +0000
Files and hashes:         1: Os_bqy157Rcaga8z6UWPKBb8pV8.roa (hash: Q2GzduMCNyC7yIgE7zcom7hyhyiHQotRTcYNh8hhOUM=)
                          2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: 8ejw/t42nJPboBs3UB+2KCQfqi+4HiAWrt93UOetWsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:25:83:4f:d4:4a:6f:f3:94:fa:51:aa:92:af:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
        Validity
            Not Before: Jun 15 18:00:50 2024 GMT
            Not After : Jun 16 18:00:50 2024 GMT
        Subject: CN=981c93b2857db73c85b39b44a5d161d71a8c4d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:3e:84:73:18:37:51:03:52:d4:62:cd:b5:
                    18:76:4c:db:ee:5c:90:b5:59:30:73:80:7e:6a:7e:
                    fb:ee:5b:e6:a8:a1:ee:ba:f3:e7:00:4d:77:d4:b2:
                    b3:cb:ed:56:12:1b:5b:89:d3:43:4c:cd:ac:0a:a8:
                    fe:c5:c5:51:f0:62:c1:91:d4:ef:56:c7:75:59:aa:
                    4a:67:da:09:ec:27:9d:9a:f1:99:4b:c0:32:0b:2f:
                    92:ab:24:4b:82:cf:6a:e5:c5:82:d8:ab:5c:fb:b9:
                    34:b0:9a:d6:cd:8d:c6:fa:a8:f7:7d:a1:f7:57:e9:
                    a7:48:56:17:2d:31:26:83:63:83:f9:fa:c3:20:9e:
                    cb:cd:21:de:86:90:22:67:35:b6:a7:c6:36:4b:a6:
                    c1:3b:e8:d7:d0:99:47:67:62:db:50:33:d9:82:ad:
                    ba:bb:12:40:ef:ed:cf:2e:40:78:03:e9:45:09:ff:
                    00:5a:3e:d7:8e:92:22:4c:6d:f8:5b:a8:35:31:f3:
                    fe:51:ff:7e:f5:39:49:5e:c0:69:29:f6:cb:0f:49:
                    7c:29:74:ab:06:16:df:e0:55:e9:94:f2:02:6e:bf:
                    b8:10:a7:22:5f:ef:85:ce:d9:8f:1e:47:39:38:56:
                    59:65:bb:af:55:3f:8b:4e:09:30:c1:fb:2d:28:f6:
                    1b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1C:93:B2:85:7D:B7:3C:85:B3:9B:44:A5:D1:61:D7:1A:8C:4D:6B
            X509v3 Authority Key Identifier:
                keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c5:7c:b6:8d:b9:04:d9:88:82:bb:24:95:a5:99:ce:94:a8:
         db:f2:f1:0a:06:2f:10:fc:ec:78:16:7a:65:0c:36:d6:2d:43:
         2d:18:46:e6:9e:06:dc:e0:14:6d:70:b4:42:e6:42:da:5b:29:
         6b:94:02:78:bc:bf:d9:2f:4b:62:d4:01:28:97:cf:bc:f6:2b:
         39:02:a0:7d:a3:4b:98:4c:70:fb:06:4a:5c:c5:02:56:ab:94:
         6c:67:37:c3:55:7a:a9:46:23:42:51:2d:92:cf:ef:f0:68:1a:
         49:17:e3:1b:71:a6:d7:73:5d:84:5b:4d:cf:65:9f:8d:82:82:
         e3:a6:55:9c:7e:ed:7f:58:58:0f:10:7d:ee:e7:c1:8e:7e:a5:
         d7:fe:1c:eb:7d:8a:e8:53:e5:45:f1:09:ba:3f:7d:f2:16:ea:
         13:4f:1e:35:de:9c:60:1b:9d:1b:01:87:66:37:70:d1:3d:af:
         b1:79:4f:ba:69:01:2b:9c:ea:1d:a8:78:5d:e7:97:00:5a:b8:
         d8:44:59:53:10:4e:77:5e:e4:0b:4b:05:ef:1e:a6:ac:85:5f:
         85:51:b0:6f:df:b4:09:53:5a:10:e5:1f:48:db:d7:b0:0f:ec:
         58:79:fc:9e:e6:94:4e:1a:28:4d:89:09:27:1c:03:b3:ad:f1:
         00:46:cc:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdDyWDT9RKb/OU+lGqkq8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxY2VkZTkwNzQ5MmU1MGM5NTEyNjM5NTc4ODFiYzNjYzVj
ZTMwYWUwHhcNMjQwNjE1MTgwMDUwWhcNMjQwNjE2MTgwMDUwWjAzMTEwLwYDVQQD
Eyg5ODFjOTNiMjg1N2RiNzNjODViMzliNDRhNWQxNjFkNzFhOGM0ZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJg+hHMYN1EDUtRizbUYdkzb7lyQ
tVkwc4B+an777lvmqKHuuvPnAE131LKzy+1WEhtbidNDTM2sCqj+xcVR8GLBkdTv
Vsd1WapKZ9oJ7CedmvGZS8AyCy+SqyRLgs9q5cWC2Ktc+7k0sJrWzY3G+qj3faH3
V+mnSFYXLTEmg2OD+frDIJ7LzSHehpAiZzW2p8Y2S6bBO+jX0JlHZ2LbUDPZgq26
uxJA7+3PLkB4A+lFCf8AWj7XjpIiTG34W6g1MfP+Uf9+9TlJXsBpKfbLD0l8KXSr
Bhbf4FXplPICbr+4EKciX++FztmPHkc5OFZZZbuvVT+LTgkwwfstKPYbSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgck7KFfbc8hbObRKXRYdcajE1rMB8GA1UdIwQY
MBaAFEHO3pB0kuUMlRJjlXiBvDzFzjCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jYTljYzMtNzUzNy00YzZhLWEwMjgt
NzBhZjVmNjU3M2I1LzEvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9jYTljYzMtNzUzNy00YzZhLWEwMjgtNzBhZjVmNjU3M2I1
LzEvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsV8to25
BNmIgrsklaWZzpSo2/LxCgYvEPzseBZ6ZQw21i1DLRhG5p4G3OAUbXC0QuZC2lsp
a5QCeLy/2S9LYtQBKJfPvPYrOQKgfaNLmExw+wZKXMUCVquUbGc3w1V6qUYjQlEt
ks/v8GgaSRfjG3Gm13NdhFtNz2WfjYKC46ZVnH7tf1hYDxB97ufBjn6l1/4c632K
6FPlRfEJuj998hbqE08eNd6cYBudGwGHZjdw0T2vsXlPumkBK5zqHah4XeeXAFq4
2ERZUxBOd17kC0sF7x6mrIVfhVGwb9+0CVNaEOUfSNvXsA/sWHn8nuaUThooTYkJ
JxwDs63xAEbMMw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:15:57 2024 by rpki-client on console-ams.rpki-client.org