Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File:                     Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier:          qhzhRGjsAa/f2olayqrZlSK+lakDs4Cb8AdCcNkwiwM=
Subject key identifier:   BB:99:6E:52:8A:F9:B9:46:E9:FA:41:64:78:03:20:2E:40:43:2E:30
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer:       /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial:       01901EC704EBC4E68E8168F6071837664307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number:          11CA
Signing time:             Sun 16 Jun 2024 02:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:17 +0000
Files and hashes:         1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: Sv2KJfuIUxMd1zi5mGRJw3+JaSfVN36k13+AOgoHZVU=)
                          2: Y5O-iH2qCSBMHHZ3oIydR3IfwRY.roa (hash: bCAaRk74inDYImJBN7EyI6QyT8xTKdl269c6x0Gba3w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:04:eb:c4:e6:8e:81:68:f6:07:18:37:66:43:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
        Validity
            Not Before: Jun 16 02:01:17 2024 GMT
            Not After : Jun 17 02:01:17 2024 GMT
        Subject: CN=bb996e528af9b946e9fa41647803202e40432e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:31:62:70:50:43:5c:aa:b0:46:9e:21:20:
                    ec:ba:3d:c7:30:b2:58:1a:34:11:a4:c0:34:65:e0:
                    73:53:98:04:67:c7:34:2f:3a:70:ac:4f:8a:5f:ac:
                    4e:09:28:7d:3e:52:7e:d9:aa:62:7b:0f:68:1e:47:
                    eb:bf:29:76:29:b1:be:86:b7:c0:8c:9e:0b:68:a6:
                    db:d4:95:d2:3d:70:2c:6b:8f:9f:8f:bf:d4:88:b7:
                    42:27:78:5f:e6:5c:01:49:4f:e9:a9:4c:71:6b:c1:
                    1b:d5:c9:a7:23:36:25:ec:95:aa:5c:4b:7c:b5:04:
                    e6:92:3f:70:08:26:f3:7e:97:cf:f6:31:a8:b0:43:
                    6e:df:88:6b:0c:29:41:c9:d3:97:ac:43:ae:33:72:
                    b3:82:94:54:9e:f8:70:df:2a:0a:9e:ca:38:87:a6:
                    1b:66:12:74:5b:64:94:8e:07:43:dd:d0:1a:8a:82:
                    3c:b5:94:a6:8c:5d:c3:e6:7a:c1:72:01:93:3f:02:
                    29:a1:91:d8:52:fb:dc:a3:bf:b5:7c:20:60:ef:b6:
                    84:78:22:b0:3b:30:3f:7e:55:50:59:64:cd:f4:e7:
                    55:02:6e:7f:75:b1:e1:e3:34:1a:87:b2:6d:f0:10:
                    1a:85:c1:19:89:f7:5d:ec:97:d7:12:9f:cc:3b:98:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:99:6E:52:8A:F9:B9:46:E9:FA:41:64:78:03:20:2E:40:43:2E:30
            X509v3 Authority Key Identifier:
                keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:f9:c6:9a:9a:11:fc:e3:75:84:e5:81:25:38:52:bd:06:
         19:5b:17:a8:7b:ab:a8:a5:cb:6d:1e:c0:90:49:27:f0:b1:ef:
         83:75:de:0c:fe:4f:cc:c3:15:be:26:be:ba:42:8d:23:a3:26:
         7a:07:f7:b4:1b:f8:37:4b:38:d4:6f:d4:08:4d:a6:5f:12:da:
         95:30:13:a4:f5:5e:d6:80:39:0c:79:49:1d:f5:8a:5d:6a:ac:
         59:9b:64:e1:53:87:57:44:b1:73:e1:df:ae:9b:07:d9:df:67:
         37:23:aa:1f:a8:ff:16:42:57:3b:b9:f7:c1:5e:10:33:dc:a7:
         fe:56:a8:7c:06:8b:f6:11:8f:a7:40:b9:a6:d0:1e:9f:ba:03:
         9e:ef:4b:08:aa:df:1b:ce:c4:24:b4:e6:e8:ee:02:a6:59:57:
         5b:f5:cb:98:df:a8:fb:d7:e3:ea:a3:19:ac:d6:b5:a2:f5:3c:
         1b:65:86:a9:bc:43:72:6c:af:38:c9:78:62:ee:6d:87:9d:53:
         61:f4:ea:16:c1:e5:8e:0c:69:90:eb:54:a0:82:13:c6:79:cc:
         9e:44:6c:1b:3a:10:71:93:c6:3d:46:66:d6:cd:a8:a8:77:4a:
         9c:d2:a0:3e:1e:5c:74:c2:92:fa:68:52:fa:8e:0b:f4:fb:a6:
         ef:26:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:55 2024 by rpki-client on console-fra.rpki-client.org