Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File:                     qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier:          88E75EbPaUnb4u741xuIh/G1a0uOA/wEWa7RxW6eTcY=
Subject key identifier:   34:1C:31:60:2B:8C:78:87:3A:93:75:18:E9:A6:EE:A9:73:D3:95:DA
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer:       /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial:       01901CA1ABBBA19E0A6BF45573345B4CF837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 16:01:15 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:15 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:15 +0000
Files and hashes:         1: 1-HpsrpmMdTDHdfBKxbTpNc4byDw.roa (hash: Uphk+8aKqnGpFHYuk6i+WYE7+NxG7F7J9fYuqXCZa2M=)
                          2: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: lUqKf4acV2IrZlRs4mLJq529Kan/mbZ/SEiqNUM/JRE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:ab:bb:a1:9e:0a:6b:f4:55:73:34:5b:4c:f8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
        Validity
            Not Before: Jun 15 16:01:15 2024 GMT
            Not After : Jun 16 16:01:15 2024 GMT
        Subject: CN=341c31602b8c78873a937518e9a6eea973d395da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:8e:10:6a:2c:9d:da:1e:bf:f3:0c:ee:87:
                    9f:9d:a1:1a:4b:a6:c2:db:e0:9e:71:c5:e3:c2:02:
                    8e:95:d0:fe:78:58:be:c9:12:95:81:eb:72:7e:00:
                    47:49:79:62:33:e8:62:1e:f4:21:d0:dc:2c:b2:0a:
                    c7:43:4c:7c:c1:a8:ba:09:72:d4:9e:44:2a:8c:39:
                    63:c3:fb:c8:59:b6:02:d8:ea:07:a5:47:8e:6b:c3:
                    aa:8f:c5:06:a2:fd:20:23:ee:17:34:8b:30:78:13:
                    d5:39:fb:98:65:22:a8:f7:ef:81:09:61:4c:6f:14:
                    d6:d2:25:77:f0:d7:86:60:08:27:62:5c:6f:90:83:
                    aa:88:eb:4d:e3:e4:5d:c5:db:c5:ed:30:d8:b2:20:
                    5c:3d:a2:d7:cb:5c:82:41:1b:0d:f6:d5:80:b6:da:
                    52:90:fa:c7:88:31:e7:63:01:8b:88:d9:a5:b7:ac:
                    70:10:1b:59:bc:7a:ca:34:be:b4:b8:c0:be:a6:31:
                    aa:00:71:1a:de:a8:85:0a:24:db:2b:d8:07:73:6d:
                    ca:62:fc:01:15:a8:e6:d2:87:61:b7:0d:36:31:43:
                    68:0d:dc:4e:9e:0d:40:93:d1:51:30:60:63:cb:cb:
                    5d:98:17:6f:6a:bf:32:df:cd:15:89:2a:98:6d:c1:
                    ef:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1C:31:60:2B:8C:78:87:3A:93:75:18:E9:A6:EE:A9:73:D3:95:DA
            X509v3 Authority Key Identifier:
                keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8a:fd:5d:ac:a7:7e:27:98:a9:8b:98:7e:8f:48:74:b4:4b:
         01:3c:56:4a:22:23:5e:4e:c2:ac:31:e7:09:06:af:87:36:4b:
         34:59:6f:17:7c:ed:f8:4e:3e:17:58:a2:9c:64:aa:20:17:a3:
         be:45:fa:30:c2:48:d7:c9:5c:31:c2:d3:a8:a6:d4:19:10:27:
         3d:54:18:d9:69:e7:ed:ec:d7:bc:86:2b:d9:33:ae:e0:4e:4b:
         d1:a5:1c:91:fc:ff:f9:9c:bd:d6:3a:b1:6a:9c:1b:97:d2:24:
         09:c2:84:c1:5e:52:4d:cf:f3:d5:87:39:23:91:da:f2:bc:b4:
         35:07:a6:49:46:87:2a:92:97:36:cc:00:89:73:fd:9f:78:14:
         36:16:a5:73:67:00:6c:0f:3c:59:de:b7:d4:35:93:29:84:2f:
         1b:fb:a4:8a:63:f9:8c:6a:42:33:bd:fd:d9:b9:7c:b9:c0:37:
         ce:32:41:aa:61:2c:a1:eb:5c:c2:1a:08:61:8a:f4:e9:92:37:
         51:0e:b0:82:f7:73:b3:e5:61:1d:9f:34:19:05:d8:33:77:ac:
         96:97:51:0a:f3:a8:94:8a:0c:bf:32:db:23:ed:fe:a1:10:f1:
         b7:05:29:98:1e:12:2a:34:0c:33:f0:36:11:2b:27:07:49:7c:
         bf:41:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:59:37 2024 by rpki-client on console-fra.rpki-client.org