Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
File:                     qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft (raw, json)
Hash identifier:          XRtprLOvxmhT2anTSNgt5rhBV0j3zuci9cCHapH3q9I=
Subject key identifier:   7E:76:94:81:C1:68:08:C7:7E:94:AF:5D:EF:DD:65:EC:89:56:D7:46
Authority key identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
Certificate issuer:       /CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Certificate serial:       01901E588848FF2DBAD809E01A3816CB1782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
Manifest number:          7E
Signing time:             Sun 16 Jun 2024 00:00:36 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:36 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:36 +0000
Files and hashes:         1: bhYdrdzjKeTLowEPNhY72zFE-j8.roa (hash: YdeFQ7ebewDV+6UeeahEnKtrO/waDj7Ako7nf/mLkk8=)
                          2: qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl (hash: eZmhY6maQxm799P+uDfRnV54C0eHFAnG01qEpoeZSkk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:88:48:ff:2d:ba:d8:09:e0:1a:38:16:cb:17:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
        Validity
            Not Before: Jun 16 00:00:36 2024 GMT
            Not After : Jun 17 00:00:36 2024 GMT
        Subject: CN=7e769481c16808c77e94af5defdd65ec8956d746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:f6:5b:c1:10:b2:56:2e:4f:06:8d:94:0e:
                    b5:69:48:12:17:71:1c:42:06:a5:91:9c:ac:73:a2:
                    09:98:ad:35:41:cb:34:5f:ce:7d:f8:c6:f6:1e:e7:
                    56:a1:8d:e4:3b:ac:39:b0:69:48:ca:fb:ba:90:76:
                    96:ac:76:64:f2:55:e8:d3:a3:01:97:be:e0:93:83:
                    d9:d6:97:39:76:c6:84:22:48:fb:15:61:45:14:43:
                    17:a7:94:21:32:32:cd:d9:c7:a8:c5:d1:f5:98:21:
                    f3:d7:e1:77:92:41:54:89:5d:3c:79:f0:d5:4f:90:
                    81:65:b5:01:1e:bd:ea:8f:e3:4f:3f:0e:88:00:ea:
                    7f:0d:a2:48:d1:45:1a:4c:43:91:cf:fd:a7:c1:4b:
                    af:6f:90:15:29:68:cd:67:d8:bd:63:54:cb:b7:90:
                    20:37:36:35:2c:51:f1:c3:f7:45:20:3e:e9:2a:56:
                    89:f6:06:2e:0b:b5:86:5e:11:41:49:59:b9:96:d4:
                    b7:07:7c:e5:56:62:52:39:c4:f8:90:0b:8d:aa:be:
                    09:cf:2e:5a:2a:2d:eb:20:2a:19:95:71:da:26:e6:
                    8f:21:3b:48:cb:77:01:93:80:98:06:07:f9:2d:2d:
                    b6:f2:e0:e7:b2:57:e6:a9:df:45:f9:32:c3:65:15:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:94:81:C1:68:08:C7:7E:94:AF:5D:EF:DD:65:EC:89:56:D7:46
            X509v3 Authority Key Identifier:
                keyid:AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:55:cc:a4:51:1a:53:6e:a1:cb:3a:92:2f:b3:b1:f0:fd:
         1f:9b:38:87:b7:b7:8b:47:8c:a5:62:84:2f:ab:ee:54:16:40:
         78:72:c4:33:73:d9:be:a2:01:92:cb:92:5e:ae:a9:d2:93:27:
         43:32:5a:eb:90:4a:82:c4:b0:29:1a:6d:4f:a4:d6:ff:60:e1:
         6a:9f:74:ff:79:a0:ed:24:fd:6d:9f:2b:02:9e:da:21:e6:52:
         14:8c:ad:f0:dc:2d:4f:1a:6d:2c:5b:3d:92:66:c3:ca:81:94:
         bc:b7:87:ff:15:bc:26:0f:7f:11:34:0b:77:09:05:e2:de:86:
         6b:73:6a:78:13:c8:2f:07:77:cf:d5:a9:7a:db:be:72:70:bd:
         8f:4f:6c:9f:8f:32:2b:e4:b2:71:f8:8a:36:10:fc:11:01:c3:
         22:7e:14:e5:d8:ee:95:33:91:64:28:b8:37:60:1b:95:65:ea:
         a0:a3:6f:71:1e:17:48:1d:9d:27:de:8e:68:54:77:40:a3:75:
         66:a6:14:f7:3f:c0:3e:3f:9f:4f:f0:81:c6:9c:d0:82:13:34:
         2c:53:d5:8b:38:f3:28:0b:dd:09:81:80:8f:3d:ff:b9:3b:04:
         c3:40:c0:c2:8a:6a:bb:d8:3f:ae:b9:ae:a0:b1:b2:6e:31:86:
         95:e8:ef:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:27 2024 by rpki-client on console-fra.rpki-client.org