Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File:                     QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier:          hM8rIaffKkZQ7TfPem3mqzEEzV6/i2Bll4PddoKQ7Pw=
Subject key identifier:   6B:67:73:F0:C8:C8:C6:D6:82:04:E8:BA:B0:DC:8E:B4:33:D0:7E:EC
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer:       /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial:       01901BFC61108013529266E984E107244D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number:          0CCD
Signing time:             Sat 15 Jun 2024 13:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:42 +0000
Files and hashes:         1: 6rOvG-QDiRaqayPbCCbNKvjVBf4.roa (hash: DkpjblNYZ1cxvXK1J4G5wwqAQ4Zy+8Uy8eSjfyWbcts=)
                          2: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: 8Lns8djWoreV8L5OtqYiI7KFtjpqii25CB37Scs3M/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:61:10:80:13:52:92:66:e9:84:e1:07:24:4d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
        Validity
            Not Before: Jun 15 13:00:42 2024 GMT
            Not After : Jun 16 13:00:42 2024 GMT
        Subject: CN=6b6773f0c8c8c6d68204e8bab0dc8eb433d07eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:41:10:6e:40:58:b4:a5:77:3c:ed:02:67:
                    5f:20:53:2f:df:ba:d2:ce:57:9f:6a:e4:3e:fe:81:
                    61:9e:56:35:96:db:2a:4c:3d:d3:f8:e0:b7:fa:c2:
                    53:e4:ee:65:c3:03:4e:52:9b:5d:9e:26:7d:f9:3a:
                    27:f3:c0:f9:e9:96:c1:60:36:ae:ed:62:ae:58:27:
                    da:b1:7f:ef:cc:57:9d:96:92:cf:af:93:f9:5d:d3:
                    02:ad:89:55:8f:a7:4c:27:6e:51:5c:78:a3:71:ec:
                    a8:b7:14:b6:a6:3c:c0:bf:be:e2:05:09:50:72:50:
                    61:24:c5:85:c8:c8:a3:6b:86:ec:c1:55:13:ba:b6:
                    a9:36:ec:c1:71:9e:d6:27:a4:47:77:94:f5:02:28:
                    59:ed:97:ef:a9:4c:38:fd:9b:93:d7:5e:de:68:30:
                    b5:a8:53:12:1d:db:5c:31:12:7b:d5:7a:42:36:f8:
                    e5:1e:49:d3:d2:13:eb:0b:a2:f5:c8:fc:9e:c9:f7:
                    7a:92:1a:83:e3:ad:a4:1d:05:c7:69:30:e5:e8:4e:
                    7b:97:9c:b0:4a:d3:79:34:58:06:4c:88:ec:30:4d:
                    a8:a8:47:17:27:f5:f2:31:e2:8f:27:cb:da:96:be:
                    51:47:4e:e8:a0:03:69:41:c9:9e:1f:e6:ca:26:52:
                    4a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:67:73:F0:C8:C8:C6:D6:82:04:E8:BA:B0:DC:8E:B4:33:D0:7E:EC
            X509v3 Authority Key Identifier:
                keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f2:9a:eb:99:9a:79:b1:40:da:c0:12:87:00:c5:51:18:1d:
         cf:84:69:55:5d:c4:3c:6e:82:ae:32:5c:6a:aa:56:e7:5a:cb:
         3e:7f:e1:22:df:6e:d1:1b:f5:26:d7:38:a7:57:c2:f8:34:01:
         88:8f:28:52:33:5d:9f:72:b5:b6:75:6f:68:12:de:62:b1:2d:
         80:f2:6e:ea:0b:91:e6:67:6d:b2:7f:96:ac:99:27:b0:dc:9a:
         4b:fd:b9:d2:4b:cd:55:99:4a:a1:07:13:d7:02:86:8f:6a:34:
         0d:52:48:a8:96:33:09:88:d0:6b:c8:a2:11:01:2b:52:73:c1:
         34:0a:bf:de:ca:a8:6a:ea:74:ab:38:ca:97:01:5d:c1:97:6b:
         76:af:e4:67:e3:af:f7:0e:2b:e0:94:68:9d:42:47:d1:bf:97:
         d5:d9:73:b2:03:44:1d:e1:10:11:13:88:17:e6:a6:bb:aa:f5:
         22:a6:40:c0:3d:d0:33:84:f8:a7:78:4b:71:54:9a:fc:18:6a:
         b0:05:aa:01:ba:b9:a2:ec:71:04:36:8c:0a:17:4a:6f:bb:fc:
         42:09:85:0e:42:82:93:e8:59:8d:29:18:7c:a6:f1:01:64:42:
         4b:9a:e1:fd:de:36:7d:08:22:2b:03:b7:d1:a8:96:26:e5:d2:
         48:1d:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:03:08 2024 by rpki-client on console-fra.rpki-client.org