Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File:                     qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier:          rVjY+NiZyD6+Cu4IENVUj1AravHEFykHvWAYP23AVoo=
Subject key identifier:   80:3A:A0:35:EE:D2:FD:27:47:B5:78:E7:35:FD:09:A4:15:F1:C8:92
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer:       /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial:       01901DEC2373E6E2BDA158777EAA23171939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number:          1157
Signing time:             Sat 15 Jun 2024 22:02:13 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:13 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:13 +0000
Files and hashes:         1: PjXKe2FdG9-RFDCI3YachS_tX1k.roa (hash: bMsUnyeu+xluIH9n7cJ+K5NOm1MHwtBa5yL3FSQ+JKg=)
                          2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: YHUDWqirsh8NZkO0DPqmvGj69OLZMV6qMeQutO6DM5s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:23:73:e6:e2:bd:a1:58:77:7e:aa:23:17:19:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
        Validity
            Not Before: Jun 15 22:02:13 2024 GMT
            Not After : Jun 16 22:02:13 2024 GMT
        Subject: CN=803aa035eed2fd2747b578e735fd09a415f1c892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:ff:7e:ec:18:3f:64:cd:67:a5:09:c1:42:
                    0d:92:a6:65:de:a4:e7:39:a6:e4:ea:5a:39:39:01:
                    e5:72:bc:99:18:65:bb:21:73:b5:2b:59:e0:04:f1:
                    19:d6:d0:74:c2:ac:5b:ce:73:9c:19:23:31:b9:d3:
                    d6:e2:6d:d2:59:5e:91:c6:b5:f4:ca:55:d3:82:98:
                    33:92:17:37:c2:5d:0c:c2:64:aa:90:45:38:78:d1:
                    ea:97:9c:64:43:4a:79:a7:07:d2:f8:e1:37:f4:1f:
                    95:7c:94:aa:2b:ed:46:2f:9d:2f:b9:f8:3e:7a:f7:
                    08:78:f3:bd:b4:e9:20:61:88:e0:9f:7d:c5:10:ed:
                    df:23:67:f3:9e:56:33:a0:ae:c2:40:4b:4c:4b:e4:
                    3c:1c:68:75:96:03:4c:82:ee:77:6e:d6:7b:e2:db:
                    54:12:8e:37:43:5c:90:dd:30:e2:45:b0:3d:f7:fd:
                    e9:33:e7:a0:f4:2f:8c:d1:e1:17:eb:e1:a3:84:ed:
                    8d:e9:b6:9c:4a:d4:a4:b0:f2:10:8a:21:eb:ce:80:
                    db:fa:45:70:e8:9a:f1:ad:b8:0d:b4:8a:f3:54:2f:
                    4d:ba:e5:77:27:47:cf:58:37:40:4f:24:4c:54:b8:
                    b4:ee:12:9d:61:fd:d3:54:03:9b:99:1f:b1:2c:c0:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3A:A0:35:EE:D2:FD:27:47:B5:78:E7:35:FD:09:A4:15:F1:C8:92
            X509v3 Authority Key Identifier:
                keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:66:1b:b1:fd:82:ed:c5:79:94:d1:f8:36:d1:99:88:b0:89:
         e7:14:e7:c3:68:d0:b9:b7:8f:81:17:ce:d2:9b:4e:e3:7e:b8:
         26:01:a8:83:59:7a:e2:80:ea:73:e5:01:41:44:46:3a:88:bf:
         88:19:12:d6:c9:5e:62:be:b4:bc:53:c1:c0:95:0f:38:a1:77:
         d1:ea:68:d8:4f:84:e5:b4:19:75:e0:e5:5c:bb:20:cc:52:42:
         90:f9:c8:da:88:bc:4c:c3:6b:33:4a:02:62:f4:46:c7:7d:58:
         7a:1e:75:6f:4b:c9:1d:20:cc:6f:5d:39:a1:d7:f7:a0:bf:15:
         cf:91:77:f4:a0:3a:0f:dd:64:39:1c:8a:70:a0:0f:06:4f:12:
         bf:84:fa:d5:c9:ba:d7:4f:0b:c0:9d:dc:7b:a5:de:ac:ea:cc:
         48:ae:ef:68:41:51:4a:f3:86:c3:32:af:50:01:fe:a3:73:17:
         9c:a0:de:0a:ce:b9:91:95:b8:9d:66:e3:ee:71:ac:6f:50:0a:
         6a:be:54:48:57:71:90:02:a6:43:37:0b:c9:ec:01:7e:6e:e2:
         24:fb:c7:46:24:f7:74:7f:0f:10:84:38:70:4c:60:70:9f:51:
         26:a8:f6:be:19:97:37:80:41:b3:11:c1:c4:8b:38:9a:30:a3:
         32:1d:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:31 2024 by rpki-client on console-fra.rpki-client.org