Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File:                     dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier:          2hlSWAKsIN29po5f61bAmhCgj8HMX7giJnDPW8puGFI=
Subject key identifier:   4E:DE:2F:26:0B:AA:DA:D7:BA:06:CB:39:2B:AC:EB:4C:88:C9:A1:1B
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer:       /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial:       01901EC6A6128D92126E12F777EC17EDC44D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number:          1158
Signing time:             Sun 16 Jun 2024 02:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:53 +0000
Files and hashes:         1: AbFUu7NgWsTd2Sp4L3XEsWgjSSk.roa (hash: VdxtG1ubUZ4p/AJXOGXKIdiyKq24yE+SQmyCdsNT43U=)
                          2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: ImetaBiKjKUyOaOFa/JqAqgtwXSzyY8+k+ScPeWKuq4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:a6:12:8d:92:12:6e:12:f7:77:ec:17:ed:c4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
        Validity
            Not Before: Jun 16 02:00:53 2024 GMT
            Not After : Jun 17 02:00:53 2024 GMT
        Subject: CN=4ede2f260baadad7ba06cb392baceb4c88c9a11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d7:a4:aa:ec:6b:5c:24:fc:cd:c4:8a:0e:a0:
                    99:69:34:fa:20:ba:73:5a:6c:5b:b9:3b:02:15:8c:
                    46:71:c0:ba:5b:3c:16:e1:cd:2b:de:bc:2e:cc:25:
                    d2:09:f2:58:04:8e:a1:f1:8a:85:38:b1:d5:b9:a7:
                    6e:5a:ce:cb:de:bb:cd:2a:25:a4:12:b1:ad:cc:e2:
                    8f:5b:29:cf:97:99:c4:c0:26:a5:63:47:5b:ed:61:
                    c1:60:96:1f:d6:88:bc:7b:36:1e:7d:b7:c2:b8:85:
                    ec:0a:18:c8:11:a8:d4:72:bf:ab:07:a7:cb:89:2d:
                    3a:cc:29:27:70:56:32:61:51:ab:e6:73:a9:30:f0:
                    d3:a7:f0:12:4b:67:ef:f4:5a:83:8f:20:6d:e4:21:
                    a2:b3:23:67:1a:12:c5:7c:76:7f:e0:40:7b:1b:c0:
                    2d:57:e6:54:bc:2f:ce:25:ee:5b:63:e7:be:ce:bf:
                    e6:5b:29:da:45:0e:67:8a:66:7f:6e:f7:2d:b9:02:
                    19:97:ba:88:f9:b4:b8:ec:b7:cc:bd:97:41:14:8b:
                    7a:bb:8d:27:f2:f5:68:df:d3:14:67:9b:ad:77:5c:
                    18:41:4c:b7:7e:a3:0c:9e:80:b6:b9:85:a7:e2:ac:
                    21:f1:9f:e5:d5:2f:38:3f:fc:36:8c:ee:26:1b:30:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DE:2F:26:0B:AA:DA:D7:BA:06:CB:39:2B:AC:EB:4C:88:C9:A1:1B
            X509v3 Authority Key Identifier:
                keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:22:3b:68:d2:e8:a5:eb:ec:4f:26:df:27:54:f0:57:bb:68:
         fc:9d:76:f8:5d:1f:68:8f:42:78:5e:82:3b:91:8a:61:64:81:
         1b:a7:73:38:84:e4:39:8c:bf:6d:bc:28:c6:24:87:af:26:8a:
         81:39:00:88:48:37:f3:64:44:53:42:e9:e5:f1:57:ba:4a:28:
         d2:39:55:08:0e:9e:3f:ef:c2:b8:16:d7:90:4a:b2:0c:df:fb:
         26:dc:a4:dd:f6:88:d3:b3:42:6f:7e:9d:aa:e5:0c:60:ca:4c:
         27:fe:dd:6b:16:5b:6a:f1:34:4f:77:c5:d4:63:e6:92:4e:ca:
         e1:f8:4c:4f:04:1d:39:92:15:69:02:33:e3:35:80:37:00:af:
         77:fe:a6:bf:2e:29:8f:66:52:d5:bb:b5:04:44:9c:1c:a4:d5:
         b0:99:4e:c0:fa:ed:25:17:59:81:54:2c:54:da:a4:ad:7f:e5:
         de:16:44:e6:59:e7:a7:f1:05:19:90:e6:4f:20:64:dd:8e:b3:
         3f:b5:e9:2a:5c:46:20:8a:28:27:bb:f4:17:ff:4b:e9:1e:90:
         92:2c:3b:72:0a:3f:1c:ae:ea:75:db:bc:94:29:47:b1:a6:b2:
         01:e5:4c:b3:91:ec:aa:54:4c:3f:ac:5c:d4:68:1a:9f:3f:63:
         f2:48:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:54:33 2024 by rpki-client on console-ams.rpki-client.org