Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File:                     qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier:          krUKANLD5G2454ujtPsSkR6zfIEm5QL6xSJaDxZvFd4=
Subject key identifier:   EE:AE:3C:55:07:E6:1E:05:31:4C:BA:84:15:9E:C6:EB:02:8F:38:BF
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer:       /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial:       01901E8F8A25225A1166304ADA9727C3CF42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number:          0F11
Signing time:             Sun 16 Jun 2024 01:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:41 +0000
Files and hashes:         1: BlPl9tMqzpyPmk5KgzzeKug8IMA.roa (hash: ojy6HpVcW5GTs7IUBgIM8sLwSOUbMlfXdTji+WHjM40=)
                          2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: 7wUzpLRGJIFXItjdE22U/agJvNGqrZd/ewCSqi7IVr4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:8a:25:22:5a:11:66:30:4a:da:97:27:c3:cf:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
        Validity
            Not Before: Jun 16 01:00:41 2024 GMT
            Not After : Jun 17 01:00:41 2024 GMT
        Subject: CN=eeae3c5507e61e05314cba84159ec6eb028f38bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:30:c2:70:4a:51:84:67:c2:84:17:ae:a1:
                    d9:2d:a8:43:0f:61:19:11:c3:81:9f:d6:b9:5e:cc:
                    83:ce:b2:8d:40:cd:27:bf:a3:7c:64:b9:06:c1:f8:
                    43:c9:94:b9:1a:6c:9b:12:4a:86:d5:2f:13:fc:5c:
                    0d:53:9e:be:08:c7:08:0d:73:01:db:10:65:52:7d:
                    c5:db:15:ef:f0:e7:7d:bc:88:12:da:93:2c:97:4d:
                    6d:88:b0:23:9d:b5:cc:b5:c1:5f:58:2f:a5:9c:66:
                    22:26:47:fe:6b:ad:d6:fb:9c:6f:d3:fa:14:9f:62:
                    4f:b4:12:b3:d4:22:cb:7b:e3:7d:a8:d8:9e:2f:19:
                    e4:1b:31:63:af:6f:f1:5f:66:2b:7b:b1:4f:ee:a9:
                    eb:0d:ad:dc:9f:af:c4:60:37:12:af:54:48:34:b3:
                    ff:bf:ae:29:c9:6e:ca:f7:4e:16:eb:b4:6a:78:f2:
                    74:8e:02:41:25:a5:e3:5b:46:96:fe:9b:76:fd:f5:
                    25:26:24:1f:b3:aa:0b:b9:7a:e9:21:49:61:20:73:
                    df:e4:b9:1c:62:59:d5:9a:86:9b:80:67:43:13:92:
                    f8:5e:dc:c2:4c:5e:fb:d7:dd:86:b7:03:2b:b4:0a:
                    dd:a1:2d:27:1e:ff:06:3f:54:b1:62:ac:f9:77:b9:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:3C:55:07:E6:1E:05:31:4C:BA:84:15:9E:C6:EB:02:8F:38:BF
            X509v3 Authority Key Identifier:
                keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:54:5a:08:ad:a9:e3:1c:48:82:9d:12:7b:41:8e:96:a1:e8:
         d1:ce:62:47:50:5c:56:22:91:93:b7:43:04:fc:2c:b3:33:9d:
         3d:55:eb:72:fb:0c:22:25:4a:70:0f:f3:44:64:b6:73:7a:c5:
         e8:6e:99:14:3b:f3:79:8f:f5:8d:f3:85:cc:9a:74:3b:ad:8f:
         b3:38:4b:16:30:b2:11:77:8d:c7:13:04:07:ed:eb:6f:47:72:
         48:98:7e:eb:1a:01:bb:df:e4:8a:49:40:e0:13:15:8a:b3:d8:
         3a:42:dc:ee:fd:70:10:6e:d0:97:80:bf:ca:60:bb:6a:14:f5:
         3b:b1:63:ea:11:09:12:73:a2:fd:86:2e:d5:43:46:5a:f2:d9:
         b9:26:8b:c0:47:dd:51:68:53:c4:78:44:22:63:e4:45:a4:cb:
         69:8a:a6:51:04:fe:71:6a:d7:92:4c:0d:d9:f4:6e:ad:5c:3f:
         e7:2b:9f:d1:e7:8f:1e:2b:24:af:40:10:20:ec:9f:50:e6:88:
         7c:93:f4:c0:cd:0d:ac:7c:fd:73:b2:d8:5e:33:25:49:5c:9a:
         95:67:6d:cb:b0:f4:33:3c:26:1b:84:6c:35:45:8e:46:04:dc:
         a4:9f:48:18:8d:48:b4:09:8c:87:e9:cf:4d:7a:3d:1f:80:7f:
         07:3a:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:30:15 2024 by rpki-client on console-ams.rpki-client.org