Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
File:                     q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json)
Hash identifier:          pDrzB9UqUYQ6H/SN5KaHSbaKdFmsNbQnT4SUxFHVYCc=
Subject key identifier:   81:75:89:E1:DA:F5:FC:CC:0A:57:21:9B:12:93:44:CF:5F:EB:11:76
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Certificate issuer:       /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial:       0190459D9E35A8B1D3936066D3DFA81A3CC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
Manifest number:          0E86
Signing time:             Sun 23 Jun 2024 15:01:15 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:15 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:15 +0000
Files and hashes:         1: HuBFli4qaOOcXYLwpOn7HDxh9DU.roa (hash: zKQcJ/40lJWzz+vTyvCDZwTOUtf6DtHXFQWw2MhroAQ=)
                          2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: JDUz3MQZZRFzEUrx8D2hfqwjlugJT8ACjRJi2dRFiF4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:9e:35:a8:b1:d3:93:60:66:d3:df:a8:1a:3c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
        Validity
            Not Before: Jun 23 15:01:15 2024 GMT
            Not After : Jun 24 15:01:15 2024 GMT
        Subject: CN=817589e1daf5fccc0a57219b129344cf5feb1176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:bb:ae:40:d9:5f:f1:04:1f:dd:d0:0b:8c:
                    84:03:0e:e5:55:87:6d:4a:3e:a5:01:61:83:61:ca:
                    c5:1c:b6:f8:40:40:a1:a6:2e:99:a0:e5:e8:cc:b7:
                    e8:2a:42:23:e0:e8:57:fb:31:86:3f:3e:86:61:60:
                    28:92:4b:91:98:11:22:75:49:11:75:e7:36:7c:67:
                    62:a0:a3:06:d2:e9:29:c5:55:d2:c5:4d:bd:e5:cd:
                    6d:72:ac:60:8a:56:80:f4:14:2c:8b:f7:2d:6e:92:
                    7c:94:ec:02:03:a3:c7:43:93:26:9a:06:03:58:2c:
                    fc:78:79:39:41:14:f0:e1:63:32:91:6f:b7:17:2f:
                    01:e0:42:14:67:f2:85:a2:76:ee:ed:d0:48:a3:99:
                    b7:b9:2d:35:61:f4:4a:fc:7f:5c:e5:20:1e:e1:eb:
                    14:7a:84:6b:08:34:be:83:ed:18:2d:e1:ff:a9:4a:
                    c2:7a:19:64:7b:a3:15:0d:55:41:17:8f:23:16:30:
                    ca:73:48:52:36:c7:8c:2d:4c:26:82:13:52:9c:19:
                    c0:40:11:a0:22:e4:fc:54:cf:e5:74:2a:c4:ae:e2:
                    16:2d:94:91:6a:86:a8:c8:c1:be:f3:a8:69:1f:40:
                    56:96:0b:69:cb:3b:d2:ab:0a:cb:a8:bd:44:31:1e:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:75:89:E1:DA:F5:FC:CC:0A:57:21:9B:12:93:44:CF:5F:EB:11:76
            X509v3 Authority Key Identifier:
                keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:34:78:e4:17:45:af:7f:28:c7:20:50:9a:f6:fc:19:20:42:
         db:fc:c9:15:87:70:9b:e8:53:72:00:f0:23:78:e9:f8:09:e7:
         f8:cb:92:c4:56:68:c1:55:52:fa:dc:eb:dc:78:2a:d5:93:25:
         2d:98:04:0b:5b:15:f2:04:54:c9:b1:f3:29:75:d5:4f:a5:50:
         b3:c9:22:ea:08:f0:59:34:be:16:31:c1:15:48:25:47:cb:cd:
         93:2f:45:9d:14:93:56:e2:22:0d:17:af:9c:3d:08:fc:2f:5e:
         3e:7e:6e:95:71:d0:5f:37:e4:c3:88:b6:15:50:43:fb:69:23:
         e6:ac:2c:b1:82:63:41:57:66:ba:07:44:17:07:06:74:15:42:
         6c:5b:3a:9f:f3:e2:da:d6:34:46:84:8c:79:dc:b3:38:de:6f:
         18:28:d6:2d:7a:47:bb:4f:73:af:01:8c:13:9d:c6:44:68:1d:
         11:7d:d8:d7:8a:a2:1c:62:28:a1:ef:f9:4d:67:1b:bf:21:06:
         2f:ab:56:f1:44:fb:51:80:3a:50:07:cf:ff:6b:15:53:f6:0a:
         05:7c:25:6c:8e:e5:d6:32:77:b1:df:cb:c3:36:4f:ee:e5:56:
         cf:33:92:2a:a7:5b:f8:7b:a3:8e:db:06:39:36:24:d7:09:98:
         ea:24:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:01:05 2024 by rpki-client on console-ams.rpki-client.org