Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File:                     QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier:          rbxPP+jXtamJcjT8h8/EOWjmfaMT5YJsg7p8z5peMYM=
Subject key identifier:   11:43:E9:D1:51:17:CB:33:73:05:C8:08:2B:95:B2:58:12:16:C7:B5
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer:       /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial:       01901BFF2527BC207C1E44A5F4E4800CF8A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number:          105C
Signing time:             Sat 15 Jun 2024 13:03:44 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:44 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:44 +0000
Files and hashes:         1: FHLTz7eMLek_aYecVPBRBgPGQhQ.roa (hash: Na8GtSKEphzVEf9bolaQpGxI+1spXDJXJsiq6zvKyUc=)
                          2: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: ZYnp+zV+IN3xpytAP9D53ULEP5T0a05Oc6eDZlyuVS4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:25:27:bc:20:7c:1e:44:a5:f4:e4:80:0c:f8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
        Validity
            Not Before: Jun 15 13:03:44 2024 GMT
            Not After : Jun 16 13:03:44 2024 GMT
        Subject: CN=1143e9d15117cb337305c8082b95b2581216c7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d5:1b:71:86:5d:d9:14:89:6d:82:8a:2d:13:
                    25:d3:86:39:ce:c0:09:72:26:13:2a:07:0d:8d:eb:
                    fd:ef:2a:34:d7:3b:d4:44:5a:57:8c:b9:7f:f8:20:
                    e9:c5:30:cd:77:5c:51:64:59:1c:dc:e5:8f:c1:c9:
                    63:49:1f:38:6f:3f:36:96:81:f9:75:cc:9e:bb:e8:
                    23:40:0a:b9:8d:5c:24:9f:bc:d6:33:f3:80:33:bd:
                    ef:06:8f:19:53:dc:a2:00:14:84:0f:6e:8a:c6:4f:
                    47:93:3e:39:54:3c:48:1b:55:d8:c5:bf:8d:07:96:
                    43:01:82:c1:c7:a7:31:92:8b:06:02:3c:88:41:28:
                    e4:dc:c4:84:4e:dd:70:12:dd:7c:04:20:78:a0:3c:
                    91:d4:33:4c:da:e0:39:59:86:f2:15:a1:0f:f8:3b:
                    76:af:98:d4:85:ea:42:1b:52:6a:93:90:7f:61:ab:
                    a8:b3:b4:f8:ff:13:ad:fd:3a:ac:a8:a5:2d:6c:cb:
                    00:90:7f:78:62:e9:dc:9c:69:b7:6b:61:6d:b5:8d:
                    07:ae:30:a2:77:f1:c2:b7:31:76:b7:1b:bf:ef:02:
                    4f:3b:c1:15:94:c5:49:51:fe:4b:1e:15:01:80:c3:
                    d5:db:7e:7f:34:f4:e0:aa:20:5f:74:54:cc:43:fd:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:43:E9:D1:51:17:CB:33:73:05:C8:08:2B:95:B2:58:12:16:C7:B5
            X509v3 Authority Key Identifier:
                keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:88:db:c8:10:a5:75:27:05:be:76:7f:ff:df:7d:82:8a:
         9e:eb:64:ab:30:9e:29:f1:2e:da:6f:7b:6a:75:fa:2c:c0:62:
         81:60:74:76:20:7d:73:96:8c:25:04:dd:17:ef:bf:50:09:9a:
         75:e3:98:2f:47:54:80:bc:cc:aa:44:6d:8e:41:b5:83:fd:77:
         58:e6:12:45:04:03:f7:31:16:81:b4:2c:a9:c1:16:86:30:b8:
         49:3f:cb:b6:03:8e:9f:7f:e4:4d:c3:5b:76:4d:80:bc:99:04:
         71:62:bb:93:b8:31:79:e4:bf:7e:6e:32:74:81:53:3b:dc:25:
         37:ae:07:ed:36:5c:cb:af:3e:e1:63:e5:24:6b:d6:c8:a2:2a:
         ee:9c:84:af:5b:54:1f:21:e8:bc:a1:85:3c:7d:ef:2c:5d:69:
         01:9d:89:9c:91:11:d8:f6:20:ca:9c:ad:11:26:8a:be:33:a1:
         b1:75:5b:ae:48:6c:8f:44:df:12:e8:8b:f0:5c:95:a9:12:49:
         24:4c:76:e5:00:6b:94:57:ed:eb:85:44:6e:e5:96:d0:af:0a:
         a7:42:29:38:43:50:e2:87:42:e1:c0:32:cf:51:a3:ca:45:b2:
         11:5b:3d:dc:34:a4:71:59:ff:6b:cc:14:84:7e:6f:e3:d7:70:
         6b:0e:66:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:42:54 2024 by rpki-client on console-ams.rpki-client.org