Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File:                     1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier:          XYCXtABaklmonzlvi6Hl1dUJg5QzsBx41YLeW6E2Tdw=
Subject key identifier:   01:02:03:0B:90:A6:D6:53:DB:37:F5:B6:B3:E2:8D:8A:6C:C9:A3:BC
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer:       /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial:       01901CD85A6813417B53F77D5801BD57B336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number:          0C8F
Signing time:             Sat 15 Jun 2024 17:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:59 +0000
Files and hashes:         1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: HdI3xE2/LAlm7Nh2V0Yvn6kCQRb3ScvOC3x7AUt74Yg=)
                          2: e-U8ugCVD8sFYYJIORcC_9BMRVM.roa (hash: QqepOJG7iQ9bvBAioAxVCodZ/zSdK3JCgt9YzeUWWBs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:5a:68:13:41:7b:53:f7:7d:58:01:bd:57:b3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
        Validity
            Not Before: Jun 15 17:00:59 2024 GMT
            Not After : Jun 16 17:00:59 2024 GMT
        Subject: CN=0102030b90a6d653db37f5b6b3e28d8a6cc9a3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:97:52:c8:5d:2d:3a:cd:33:a2:c7:68:f1:
                    c0:0e:d7:5f:bf:db:51:fa:f2:36:28:6c:b0:46:84:
                    0e:98:64:ab:4f:ed:e8:35:36:5d:36:47:f0:8d:b7:
                    a1:8c:1a:0a:69:dc:fb:be:2e:1e:cc:23:d0:ad:29:
                    44:78:97:ed:31:49:62:fa:86:d6:87:b0:73:d9:1e:
                    76:c6:af:fb:51:e7:f3:d3:31:d0:aa:01:0a:45:31:
                    12:7f:07:1f:3e:4d:85:c3:35:7b:db:1d:e8:e2:9d:
                    fc:4a:82:4e:1d:36:c0:01:8b:2f:7b:52:92:bd:71:
                    eb:b7:88:af:f6:c1:f6:9c:8a:03:f6:4c:d5:2e:0d:
                    08:f1:f3:f2:47:9d:1c:f3:d6:e8:7f:23:6f:44:55:
                    36:ac:cd:80:82:ec:17:22:6a:a6:73:22:52:85:26:
                    b2:8a:fb:95:06:0c:e4:14:7f:85:fb:8d:25:5b:b1:
                    5a:f8:60:bc:f9:7f:e8:d7:98:a2:50:dd:1b:f6:8f:
                    2f:1a:a7:26:87:02:57:a6:7e:67:74:e5:1e:e7:76:
                    29:88:ed:4d:55:95:5b:39:cd:66:d9:67:1e:13:da:
                    21:11:c6:26:d6:46:70:b5:7d:38:dc:3d:dc:4f:83:
                    2c:d9:5b:e4:82:d1:c4:17:fe:3e:92:af:e8:b1:73:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:02:03:0B:90:A6:D6:53:DB:37:F5:B6:B3:E2:8D:8A:6C:C9:A3:BC
            X509v3 Authority Key Identifier:
                keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:80:59:ab:c4:ae:69:e1:c8:09:29:cb:f5:44:59:9c:74:fb:
         ce:4a:03:6c:b1:63:6c:5e:5f:be:77:f0:03:88:3d:1c:ce:ac:
         db:ca:04:b9:93:00:8d:8f:27:83:40:0e:61:7a:5b:30:f7:f3:
         8e:61:01:81:17:54:cd:28:a9:00:6e:1d:96:91:4f:c6:00:fd:
         10:e0:51:74:66:40:ff:af:33:c1:1c:e2:af:77:16:68:1b:ff:
         77:12:97:06:f4:5c:35:9d:99:58:1e:e9:07:e5:1e:f1:4f:4e:
         81:8b:64:31:57:8d:52:6e:4d:1f:5a:c6:06:10:3a:3f:e3:b0:
         83:ee:d3:1f:6c:0b:5d:3f:97:1a:28:07:c4:37:86:e8:46:62:
         9a:60:dc:1c:36:0a:80:1e:c0:35:fb:9e:ca:f0:ef:58:20:18:
         a4:dd:11:79:38:c5:6a:70:12:42:e8:64:44:fe:14:e1:69:4c:
         11:5d:e9:7d:da:ce:8e:6c:be:63:53:8f:87:e4:6a:09:90:e6:
         76:e7:a2:ce:30:34:df:d0:65:69:dd:a3:a8:31:e9:52:52:37:
         c9:a8:e1:b5:41:55:a9:a6:8a:60:c6:17:2b:33:b1:07:a6:84:
         98:e9:99:a9:22:7a:7e:0b:eb:b3:77:46:71:49:cb:2c:a7:df:
         79:7e:fe:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:25:13 2024 by rpki-client on console-fra.rpki-client.org