Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File:                     qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier:          foDX2/wrfRIfny4qI/KE/l1odRP6nkmQnm97fs2Ck3k=
Subject key identifier:   22:6D:0E:1D:E6:91:1F:4D:96:DE:06:8D:08:B7:49:76:51:CC:EC:32
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer:       /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial:       019072AC6FF739450F3CB2BE41EFDC1EF848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number:          BA
Signing time:             Tue 02 Jul 2024 09:00:21 +0000
Manifest this update:     Tue 02 Jul 2024 09:00:21 +0000
Manifest next update:     Wed 03 Jul 2024 09:00:21 +0000
Files and hashes:         1: YcvglW45trHd9TikrBDBne7Z6Og.roa (hash: oa1mMxhJP5VLMEaxzDBABu/oMCkGLr0++ZAUYEaGJY0=)
                          2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: xGDJnyB/kJiyjZ5uickXdDp/wLKrDmq7NHDbBr7oCHY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:ac:6f:f7:39:45:0f:3c:b2:be:41:ef:dc:1e:f8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
        Validity
            Not Before: Jul  2 09:00:21 2024 GMT
            Not After : Jul  3 09:00:21 2024 GMT
        Subject: CN=226d0e1de6911f4d96de068d08b7497651ccec32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:2c:ac:4f:cc:2f:cc:2c:15:dc:8d:a8:a0:
                    b9:30:ee:c2:72:4a:99:30:a8:bf:a1:eb:75:d2:f9:
                    ec:ff:36:d9:4f:a0:20:8c:ea:da:11:ea:a0:ee:33:
                    6f:ae:0e:86:f0:c8:7a:0d:93:ea:a5:a2:3c:16:d1:
                    04:b8:36:4c:df:e4:0e:c5:4a:28:e3:2f:7d:cd:b3:
                    ce:40:45:a7:bf:6d:a6:47:d4:d2:c5:9f:98:84:12:
                    15:e9:c9:a8:5f:b4:b7:1a:87:7c:2a:df:91:a6:bf:
                    8f:4b:4c:d8:2a:89:46:65:c6:5b:4e:bf:15:a1:81:
                    6f:87:d1:8f:33:c1:23:7d:04:e3:54:b1:5b:2b:3d:
                    c1:11:63:00:8b:29:ec:7c:84:54:dc:f3:25:30:1e:
                    e5:ec:4b:19:a0:24:b6:34:bf:85:a3:c7:bd:fc:3b:
                    e9:19:3a:8f:be:2e:b1:b7:81:47:7d:76:6b:3c:70:
                    31:94:f9:f9:e1:73:78:f4:b8:ad:da:99:c5:1f:59:
                    a3:c9:93:4c:35:d7:35:00:ac:54:5c:58:fa:39:2e:
                    26:fd:17:68:1c:be:69:85:32:50:3f:b6:b8:db:73:
                    ef:aa:d9:9f:d8:3a:d2:38:7b:fc:95:bc:a1:76:d0:
                    fe:68:ce:a8:71:6c:f5:66:ed:e4:41:e2:92:ec:f2:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:0E:1D:E6:91:1F:4D:96:DE:06:8D:08:B7:49:76:51:CC:EC:32
            X509v3 Authority Key Identifier:
                keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:29:fc:c3:a1:3e:85:eb:fa:5f:ec:21:00:39:49:ba:2f:09:
         e3:7c:b8:b4:f3:dd:68:2b:f8:a2:e6:cd:52:1e:fc:f2:36:92:
         93:5f:b6:b3:82:54:fb:63:01:2b:29:b1:18:52:25:f2:78:14:
         d8:ff:3f:5e:2c:77:bb:4e:bf:84:67:34:5c:d3:f7:5c:b5:aa:
         c6:84:53:94:3e:c3:c1:aa:b0:93:97:29:4b:69:81:aa:30:7d:
         e4:6c:0e:5a:5b:32:b0:d3:91:c1:54:5d:32:e0:09:98:83:7c:
         61:6d:c2:d6:71:60:47:a3:ab:f0:20:f1:e6:e7:3a:21:84:41:
         79:0a:81:1d:0d:10:6d:f5:9b:61:ca:87:9f:ae:0f:d6:b6:4b:
         b2:18:10:86:a8:b9:f1:89:96:0f:cd:1a:5f:48:c8:c2:e2:0d:
         12:37:2a:ae:95:c8:d5:83:f0:70:d5:e0:84:1a:62:51:58:d0:
         48:0a:58:44:6c:d5:20:f3:e7:ac:71:40:44:02:e8:b4:cb:b8:
         03:7a:ba:8f:ea:24:89:89:4a:e3:af:20:00:90:9e:5c:47:75:
         5d:ac:af:f0:b7:e3:c0:e6:13:ea:1a:41:73:84:a8:04:61:85:
         e8:48:18:43:1e:00:b7:ab:18:5d:47:b2:0f:da:bf:14:58:b5:
         de:ba:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 10:47:44 2024 by rpki-client on console-ams.rpki-client.org