Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File:                     QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier:          zXb1upDX7E4ri28N6dyhD4N5iXymv38zOQkw/NsMqfA=
Subject key identifier:   82:D6:38:45:CF:C4:11:1B:B8:6C:36:8C:F8:EF:B2:67:50:A5:55:61
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer:       /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial:       01901BFC8AF1DD3A3C5FDA58D06658FED8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 13:00:53 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:53 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:53 +0000
Files and hashes:         1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: 3Dwh5YhgLtrW7l68GLKaFIUD04PXtnVPMEagIjk1gWk=)
                          2: SrjhWUXPib27kudiepGJJBxMKHw.roa (hash: JjTa+nvSVz2oxEx3psBpa35w11t61tvV+BYEwaBMCWg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:8a:f1:dd:3a:3c:5f:da:58:d0:66:58:fe:d8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
        Validity
            Not Before: Jun 15 13:00:53 2024 GMT
            Not After : Jun 16 13:00:53 2024 GMT
        Subject: CN=82d63845cfc4111bb86c368cf8efb26750a55561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:df:07:5d:ee:26:2c:9a:4c:4f:76:b3:e4:
                    5a:c9:3c:cf:b1:3a:06:2d:3d:41:59:7d:39:95:c8:
                    99:e5:3b:56:f9:db:3d:f8:23:5d:f7:47:d3:19:f6:
                    33:35:b5:12:16:30:c0:27:4c:5b:cd:2d:25:e4:39:
                    b7:1b:25:e7:d8:2b:fd:a2:5f:14:95:43:43:9d:c3:
                    a2:8e:c2:b9:98:30:f5:06:7d:25:a7:c8:2c:53:e7:
                    2e:74:21:e9:0f:a5:d0:de:a4:78:21:ca:01:87:ab:
                    31:1a:7f:a8:6d:17:d6:a7:43:4d:a3:86:fc:9a:80:
                    27:74:62:63:9d:6b:ec:3d:6f:b4:47:49:78:a8:91:
                    ef:e3:53:60:d9:b1:be:08:63:2e:a5:64:0c:e3:a0:
                    ac:90:d5:41:d8:7a:70:69:2a:a4:01:f7:48:84:d5:
                    7f:45:19:c0:f6:29:ef:0d:9f:a9:9d:91:21:5c:4b:
                    79:89:62:31:a1:6a:04:b2:40:26:20:18:1e:f2:6c:
                    f2:ca:c6:67:cf:b3:af:eb:21:73:e9:7e:e7:d4:a1:
                    f3:5a:77:0b:ef:1a:81:28:2d:b9:77:0a:9a:57:7c:
                    71:0b:53:f6:06:09:59:9f:6b:a8:3f:77:ad:4f:69:
                    0b:68:6a:b2:64:fa:77:69:52:2b:6b:24:f3:66:05:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:38:45:CF:C4:11:1B:B8:6C:36:8C:F8:EF:B2:67:50:A5:55:61
            X509v3 Authority Key Identifier:
                keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8a:bc:f9:d6:e4:ff:f6:13:94:d0:65:3d:ef:81:a5:b6:60:
         57:36:33:e8:d9:55:94:bf:0b:be:de:02:a0:23:cc:80:36:2d:
         47:a1:9d:31:99:bc:4f:fa:f3:01:21:a3:2a:dc:97:c4:56:b6:
         ca:39:2b:0d:81:27:84:f7:04:16:ec:99:a3:eb:cc:eb:ac:5e:
         94:1d:bd:a7:f1:9e:32:bc:42:60:fe:37:e7:71:c0:31:2b:8d:
         78:4c:b4:c8:05:d4:e0:bc:09:a2:19:04:00:d8:29:88:34:75:
         6b:bc:02:ad:c8:42:27:a8:06:78:ab:f9:c4:2e:4d:61:b2:52:
         7f:f9:3b:af:d8:a5:9f:44:d6:24:b0:3b:8d:12:e4:d4:31:dc:
         36:63:28:3a:c7:dd:37:8e:83:ba:ba:7f:19:b4:e4:cd:ab:5b:
         b2:c7:ab:91:95:74:0d:8a:d4:dd:08:d6:b9:5a:b2:5b:4f:6d:
         00:52:09:74:c7:67:9e:d8:ab:b4:2b:55:b8:8e:9e:17:92:be:
         47:7f:02:ed:a5:a3:bc:b5:d2:4e:fd:12:e2:22:bb:36:cc:0e:
         2d:91:af:d9:5e:9e:e3:e9:7e:c1:87:c0:46:7c:11:15:20:fd:
         95:00:e5:c7:4e:84:b9:e3:c2:a8:b6:dd:ed:5f:c9:57:2d:bc:
         30:4a:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:22:24 2024 by rpki-client on console-ams.rpki-client.org