Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File:                     qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier:          yH7MZQ3XgVnuQUwBrqckzlKc6ygSwqSP0we4298ZoTQ=
Subject key identifier:   5D:6D:2C:93:DE:10:FA:D7:AF:B0:B0:A4:FE:DE:10:3D:16:09:E7:1F
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer:       /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial:       01901EFD7D8F0CFA66ED57E20A2A59AD10BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number:          B1
Signing time:             Sun 16 Jun 2024 03:00:47 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:47 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:47 +0000
Files and hashes:         1: 28St0on-J0hduJYqWHWbs0v0BwY.roa (hash: YiEmDySV9jbEaIPG3IZ7d1zI23PBN4yG+/4S9nDZE4o=)
                          2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: iVsweIm+EYxSMCxQfpgjXMbxJFdKo6R4lj3LUKqL3CE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:7d:8f:0c:fa:66:ed:57:e2:0a:2a:59:ad:10:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
        Validity
            Not Before: Jun 16 03:00:47 2024 GMT
            Not After : Jun 17 03:00:47 2024 GMT
        Subject: CN=5d6d2c93de10fad7afb0b0a4fede103d1609e71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:74:c9:02:04:be:eb:2c:02:16:62:71:72:
                    b6:a7:1c:68:91:cb:9a:82:0f:b3:b6:88:05:bc:70:
                    0b:07:4b:88:3a:97:9f:e0:91:4b:95:c5:82:1e:de:
                    73:0f:2a:c9:32:a7:9a:8e:fa:88:c2:8d:b4:7e:33:
                    53:3b:c6:49:3c:21:ad:d7:ac:bd:e4:4b:66:e2:16:
                    cd:e6:c2:35:b3:3d:8b:c6:84:71:63:68:9c:75:58:
                    20:a7:c2:5d:2e:fc:6a:4d:81:fb:f3:e0:1e:f1:0c:
                    b1:aa:b6:ce:9b:26:ec:8a:0b:32:c4:96:e3:a8:32:
                    bc:27:68:9e:9e:6e:2f:e8:19:c4:0a:bb:01:ac:52:
                    3c:bd:a4:f5:26:f8:2f:b5:1c:82:92:1e:43:c0:69:
                    7b:31:61:ad:98:d3:27:29:82:39:83:0e:82:23:49:
                    00:cd:06:f1:ad:fd:ed:01:a4:d8:ac:1f:1a:b3:d4:
                    5f:44:18:e6:b2:32:45:fc:4c:88:fb:69:07:00:8e:
                    81:71:a6:83:45:d1:b4:72:1e:93:80:26:86:cf:cf:
                    d7:07:7b:d0:5c:59:70:a5:d0:50:28:ea:39:0a:d7:
                    97:b8:26:2d:b9:75:42:0f:11:68:b3:ae:a8:ca:4d:
                    f2:e2:a8:40:09:95:c7:f3:15:cd:c2:a5:cf:36:76:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6D:2C:93:DE:10:FA:D7:AF:B0:B0:A4:FE:DE:10:3D:16:09:E7:1F
            X509v3 Authority Key Identifier:
                keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:65:2c:26:22:92:dd:12:a6:4e:32:ba:24:b5:45:1e:2e:82:
         bd:d6:02:7e:70:56:b3:45:a0:e4:9b:4f:80:28:7a:10:2a:72:
         84:56:d0:87:ee:5d:19:38:69:6c:62:00:ab:44:df:ff:f3:c6:
         38:38:4e:dd:60:6e:46:00:ed:fb:a6:50:b9:bb:d8:e5:2d:08:
         1d:82:16:bd:41:6b:b4:53:bf:6f:07:05:11:0d:99:55:16:d9:
         a5:fc:12:c8:47:62:0a:9b:40:ac:30:db:bd:0d:3f:05:6e:75:
         4d:ad:c7:92:a3:21:4d:48:ed:29:f3:ff:b5:ac:20:5f:0f:c8:
         53:f1:a7:ba:a5:ba:f2:ee:4a:be:59:ac:96:06:d9:cc:44:b9:
         ba:5e:b3:fb:92:a8:df:1b:77:1d:f4:b8:37:06:de:e4:20:29:
         a3:64:00:86:47:f7:32:19:ff:f6:1e:53:c6:06:10:4f:2a:73:
         bd:bf:9f:eb:4f:82:2d:3c:69:ce:eb:ad:d7:2f:e7:a7:c4:d3:
         e4:00:79:1e:ea:92:16:3f:e4:4b:94:c0:3a:cd:82:46:3d:c0:
         ec:78:61:cd:1b:85:d8:f4:6a:6b:26:c4:ce:40:73:d1:13:31:
         15:d1:8c:7d:8d:37:18:79:eb:a9:0a:dc:32:bf:e8:45:76:5e:
         82:23:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:38:17 2024 by rpki-client on console-ams.rpki-client.org