Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
File:                     qmWvaX3x9s2vTLvWbePUO-2GnpA.mft (raw, json)
Hash identifier:          82h7JAyMrIDsszQ8hOzRNRV6RKbEBgE8997mmisDLFI=
Subject key identifier:   CF:50:AD:EB:35:ED:38:8C:A1:4F:36:C5:BD:BB:EB:47:23:DA:48:C9
Authority key identifier: AA:65:AF:69:7D:F1:F6:CD:AF:4C:BB:D6:6D:E3:D4:3B:ED:86:9E:90
Certificate issuer:       /CN=aa65af697df1f6cdaf4cbbd66de3d43bed869e90
Certificate serial:       0190459DB0E5D4BCD8CEC304BA75974F6804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
Manifest number:          07F6
Signing time:             Sun 23 Jun 2024 15:01:20 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:20 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:20 +0000
Files and hashes:         1: kMq9diBowv6nCvabulowQTpN1L8.roa (hash: uU1YDBJdxC8e3v7LbcibWSN88T8Vo0X1lN/gu8i/NO4=)
                          2: qmWvaX3x9s2vTLvWbePUO-2GnpA.crl (hash: nZc+h9eMUQitwoOfvKucRm7qhz+p9jWdLG4NQLEAPus=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:b0:e5:d4:bc:d8:ce:c3:04:ba:75:97:4f:68:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa65af697df1f6cdaf4cbbd66de3d43bed869e90
        Validity
            Not Before: Jun 23 15:01:20 2024 GMT
            Not After : Jun 24 15:01:20 2024 GMT
        Subject: CN=cf50adeb35ed388ca14f36c5bdbbeb4723da48c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:27:25:65:60:2e:7a:50:90:8c:e1:11:53:
                    07:f2:7f:18:41:99:d3:89:b5:8b:fd:99:7d:b8:7b:
                    73:a1:0f:11:ad:29:4d:5c:a4:f7:4d:79:cf:49:a8:
                    e0:a0:15:b7:1b:4b:9a:28:23:19:f1:99:96:71:84:
                    60:1f:9e:fc:23:d9:e6:2e:92:3f:be:6f:37:71:5f:
                    31:81:c1:e3:f7:f8:96:ab:56:68:4b:75:5f:52:97:
                    74:76:bb:9a:26:a0:2b:dd:8e:3b:87:ec:ae:df:09:
                    8e:9c:26:35:aa:b2:50:83:78:81:4f:54:a0:d1:76:
                    e5:5d:5b:f6:e0:a7:18:56:d9:ea:5f:ff:6b:7a:fa:
                    90:74:9e:77:70:e4:d3:d8:46:94:2e:52:80:0e:b1:
                    a9:d0:b1:21:2a:c5:35:08:31:52:94:5d:67:23:a4:
                    bc:83:57:83:fa:ec:89:1d:83:ed:c9:93:e8:36:7f:
                    93:6e:b4:9d:1f:bf:c2:0b:56:31:69:e3:93:12:0d:
                    5f:10:27:57:09:19:ef:ff:5b:50:7a:6f:f4:2d:2c:
                    cf:94:36:39:9f:86:d3:fe:0a:c5:42:cf:c9:2c:bc:
                    ad:df:05:54:f1:0f:fe:5d:b8:4e:26:2b:f0:cd:b6:
                    32:f7:7b:3a:74:d6:df:fc:15:36:5f:4a:1c:c9:d3:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:50:AD:EB:35:ED:38:8C:A1:4F:36:C5:BD:BB:EB:47:23:DA:48:C9
            X509v3 Authority Key Identifier:
                keyid:AA:65:AF:69:7D:F1:F6:CD:AF:4C:BB:D6:6D:E3:D4:3B:ED:86:9E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:24:86:f2:9b:88:ae:83:f6:e0:df:b9:39:c0:3b:5a:29:04:
         7f:fb:19:5e:fd:bf:fe:35:31:bd:3d:20:ac:3a:27:dc:3e:c7:
         a1:e1:fa:d5:6f:4b:f8:19:3a:06:37:51:5f:c4:cc:3b:20:f5:
         97:4d:c8:58:6e:8a:dc:8c:6d:08:81:de:b6:6f:2d:17:45:8c:
         2f:72:e4:08:33:3e:c0:f7:56:77:ce:69:f6:53:34:46:55:b6:
         df:77:24:3e:52:79:7c:85:df:9b:e8:6b:9e:01:0b:c2:6e:d1:
         f1:07:04:f7:f9:57:a0:8c:f6:09:18:87:9b:b7:40:6e:cb:58:
         f3:60:e9:f2:a8:44:ab:c7:f4:b9:ed:87:57:33:17:e8:fc:b0:
         ad:5e:d0:50:34:05:20:d5:1e:40:e0:2a:70:4c:5f:81:7c:cd:
         8d:4f:7c:85:0c:e5:16:39:95:ec:4b:a2:f3:1a:84:53:dd:ba:
         37:82:51:ce:5d:ba:df:49:0b:bf:e3:55:d9:a0:ee:b8:25:49:
         f9:46:93:95:42:ce:e5:5d:6a:07:f3:d5:fe:09:9d:50:b1:4b:
         3b:4a:c6:9e:be:f1:39:12:2b:bb:bd:19:c2:0c:1d:84:ae:0d:
         16:cd:99:86:0a:18:2c:8c:b9:11:5e:8f:4d:7b:26:05:7e:38:
         ec:23:c3:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFnbDl1LzYzsMEunWXT2gEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjVhZjY5N2RmMWY2Y2RhZjRjYmJkNjZkZTNkNDNiZWQ4
NjllOTAwHhcNMjQwNjIzMTUwMTIwWhcNMjQwNjI0MTUwMTIwWjAzMTEwLwYDVQQD
EyhjZjUwYWRlYjM1ZWQzODhjYTE0ZjM2YzViZGJiZWI0NzIzZGE0OGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuwnJWVgLnpQkIzhEVMH8n8YQZnT
ibWL/Zl9uHtzoQ8RrSlNXKT3TXnPSajgoBW3G0uaKCMZ8ZmWcYRgH578I9nmLpI/
vm83cV8xgcHj9/iWq1ZoS3VfUpd0druaJqAr3Y47h+yu3wmOnCY1qrJQg3iBT1Sg
0XblXVv24KcYVtnqX/9revqQdJ53cOTT2EaULlKADrGp0LEhKsU1CDFSlF1nI6S8
g1eD+uyJHYPtyZPoNn+TbrSdH7/CC1YxaeOTEg1fECdXCRnv/1tQem/0LSzPlDY5
n4bT/grFQs/JLLyt3wVU8Q/+XbhOJivwzbYy93s6dNbf/BU2X0ocydN8wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9Qres17TiMoU82xb2760cj2kjJMB8GA1UdIwQY
MBaAFKplr2l98fbNr0y71m3j1Dvthp6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1XdmFYM3g5czJ2VEx2V2JlUFVPLTJHbnBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wNDAxOWMtYWQxNy00MjhkLWIzYTIt
MWJlMTNiYThkNDU2LzEvcW1XdmFYM3g5czJ2VEx2V2JlUFVPLTJHbnBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wNDAxOWMtYWQxNy00MjhkLWIzYTItMWJlMTNiYThkNDU2
LzEvcW1XdmFYM3g5czJ2VEx2V2JlUFVPLTJHbnBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciSG8puI
roP24N+5OcA7WikEf/sZXv2//jUxvT0grDon3D7HoeH61W9L+Bk6BjdRX8TMOyD1
l03IWG6K3IxtCIHetm8tF0WML3LkCDM+wPdWd85p9lM0RlW233ckPlJ5fIXfm+hr
ngELwm7R8QcE9/lXoIz2CRiHm7dAbstY82Dp8qhEq8f0ue2HVzMX6PywrV7QUDQF
INUeQOAqcExfgXzNjU98hQzlFjmV7Eui8xqEU926N4JRzl2630kLv+NV2aDuuCVJ
+UaTlULO5V1qB/PV/gmdULFLO0rGnr7xORIru70ZwgwdhK4NFs2ZhgoYLIy5EV6P
TXsmBX447CPDcA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 16:47:49 2024 by rpki-client on console-fra.rpki-client.org