Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
File:                     QA4H15n7NVyVICXz0nsA6bTuNO0.mft (raw, json)
Hash identifier:          Ka02HqsddHalVqd+/1quy8vl3nq/5weeOZw3MxRlxtQ=
Subject key identifier:   E9:2A:9B:6C:FC:D9:CB:05:80:A6:9C:72:38:D0:AE:D2:67:33:6E:6F
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Certificate issuer:       /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial:       0190448B2006A20B38906AB45E294F1BC4FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
Manifest number:          0442
Signing time:             Sun 23 Jun 2024 10:01:26 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:26 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:26 +0000
Files and hashes:         1: EQ-MI94gNTH8NuYQrRLRT_LJg3E.roa (hash: XlnynrfroVIPGbV843O9WaPTHuciNIwrM8cO9bg61ec=)
                          2: QA4H15n7NVyVICXz0nsA6bTuNO0.crl (hash: vlQCavasGU7N/B27EzD29Qww7cYsHr43FYTOubrfExk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:20:06:a2:0b:38:90:6a:b4:5e:29:4f:1b:c4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
        Validity
            Not Before: Jun 23 10:01:26 2024 GMT
            Not After : Jun 24 10:01:26 2024 GMT
        Subject: CN=e92a9b6cfcd9cb0580a69c7238d0aed267336e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:58:22:26:73:0a:42:af:26:7b:3c:24:70:
                    6e:d9:1e:18:a7:36:5d:dc:3b:bd:36:a1:29:42:82:
                    d8:67:cf:b5:90:60:f0:54:e0:17:cb:01:99:40:d0:
                    dc:11:26:af:5e:37:c2:17:62:2d:35:5a:d2:e5:ea:
                    87:8f:e1:39:fd:88:52:10:b5:a4:03:c8:66:e4:fd:
                    57:8e:fa:30:79:f3:6e:f2:e3:c4:b5:42:83:c6:6d:
                    5d:03:03:7e:e7:a4:cb:10:85:b2:b4:64:82:d1:af:
                    05:5c:76:b7:35:42:bf:e6:ef:1a:35:d1:4d:6e:77:
                    d3:e6:e0:2a:7c:af:ab:68:40:d1:78:06:8d:c2:05:
                    48:86:d7:00:26:d0:4d:93:00:d2:13:1a:a9:02:72:
                    a8:c5:43:40:52:ea:a2:c9:be:12:ef:d9:15:aa:c5:
                    97:7b:92:12:b7:a1:7e:21:10:85:1d:38:11:d9:fd:
                    25:9a:48:55:37:ce:0e:c4:1b:f2:a3:a8:a4:69:c2:
                    c1:48:6b:d7:7d:d5:0e:14:f0:fa:af:bb:24:d3:30:
                    19:53:d1:6d:c5:ec:f8:14:3f:fb:17:a7:1c:27:96:
                    d4:ff:94:29:10:02:78:60:e9:db:a3:ac:0e:9b:0e:
                    c0:27:5b:e5:0f:70:8e:d2:d2:83:69:e7:f4:f9:17:
                    f9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2A:9B:6C:FC:D9:CB:05:80:A6:9C:72:38:D0:AE:D2:67:33:6E:6F
            X509v3 Authority Key Identifier:
                keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c5:cb:60:b1:17:0a:97:92:ef:aa:0c:55:ad:48:cf:a4:09:
         08:36:a5:8b:ae:32:0a:83:df:c6:ca:3c:e7:06:d8:67:6d:4e:
         1a:85:cc:d6:59:de:7b:a2:f0:d0:e6:b5:69:91:c5:68:f2:fc:
         74:7e:b2:02:8c:45:17:ab:49:a4:68:b9:54:16:a5:2d:20:d0:
         64:e0:b2:9d:67:ad:bd:12:5c:90:5c:18:b2:e2:c4:7a:0c:5b:
         a5:3b:32:81:4e:19:99:df:92:f1:b9:ed:13:c9:51:78:dd:79:
         06:9e:67:b2:88:5f:9f:5b:00:13:74:7b:b0:f3:83:45:7b:69:
         a1:bc:8d:ba:e7:de:cb:21:d8:60:df:c8:bf:80:b8:a9:b2:06:
         20:e5:70:75:50:60:69:5b:d8:08:4e:b2:7f:77:ea:41:75:e7:
         7e:ec:80:0f:03:8c:9d:92:aa:42:e3:81:09:af:e3:37:6b:82:
         89:17:c2:63:73:79:93:48:2b:4d:71:16:ad:d1:70:3b:ff:c3:
         32:be:a4:62:59:07:85:33:2d:1c:75:b7:4c:bb:df:06:bd:ec:
         10:6e:ed:45:b4:3f:a5:19:fb:96:73:d6:9a:84:64:e4:dd:67:
         53:37:42:0e:c0:1e:da:0f:59:a0:8e:01:b1:27:7f:6e:c9:d0:
         ed:b0:24:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEiyAGogs4kGq0XilPG8T7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMGUwN2Q3OTlmYjM1NWM5NTIwMjVmM2QyN2IwMGU5YjRl
ZTM0ZWQwHhcNMjQwNjIzMTAwMTI2WhcNMjQwNjI0MTAwMTI2WjAzMTEwLwYDVQQD
EyhlOTJhOWI2Y2ZjZDljYjA1ODBhNjljNzIzOGQwYWVkMjY3MzM2ZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk5YIiZzCkKvJns8JHBu2R4YpzZd
3Du9NqEpQoLYZ8+1kGDwVOAXywGZQNDcESavXjfCF2ItNVrS5eqHj+E5/YhSELWk
A8hm5P1XjvowefNu8uPEtUKDxm1dAwN+56TLEIWytGSC0a8FXHa3NUK/5u8aNdFN
bnfT5uAqfK+raEDReAaNwgVIhtcAJtBNkwDSExqpAnKoxUNAUuqiyb4S79kVqsWX
e5ISt6F+IRCFHTgR2f0lmkhVN84OxBvyo6ikacLBSGvXfdUOFPD6r7sk0zAZU9Ft
xez4FD/7F6ccJ5bU/5QpEAJ4YOnbo6wOmw7AJ1vlD3CO0tKDaef0+Rf5eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkqm2z82csFgKaccjjQrtJnM25vMB8GA1UdIwQY
MBaAFEAOB9eZ+zVclSAl89J7AOm07jTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAt
NDhmZTYzM2IxYjNmLzEvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAtNDhmZTYzM2IxYjNm
LzEvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsXLYLEX
CpeS76oMVa1Iz6QJCDali64yCoPfxso85wbYZ21OGoXM1lnee6Lw0Oa1aZHFaPL8
dH6yAoxFF6tJpGi5VBalLSDQZOCynWetvRJckFwYsuLEegxbpTsygU4Zmd+S8bnt
E8lReN15Bp5nsohfn1sAE3R7sPODRXtpobyNuufeyyHYYN/Iv4C4qbIGIOVwdVBg
aVvYCE6yf3fqQXXnfuyADwOMnZKqQuOBCa/jN2uCiRfCY3N5k0grTXEWrdFwO//D
Mr6kYlkHhTMtHHW3TLvfBr3sEG7tRbQ/pRn7lnPWmoRk5N1nUzdCDsAe2g9ZoI4B
sSd/bsnQ7bAk9w==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:55:45 2024 by rpki-client on console-fra.rpki-client.org