Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File:                     qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier:          FqkbF8+l6g+9+dBiCkYlbLqqgtOo6EUUUSwCQ0Ne42o=
Subject key identifier:   83:C7:F6:0A:1B:33:59:D5:80:A0:34:FF:F8:9F:26:13:AC:CF:3E:8F
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer:       /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial:       01901EC728C9E6A05C32E5960379FEF0038B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 02:01:26 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:26 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:26 +0000
Files and hashes:         1: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: QVdoYKM4AHAkRbeQ9UzsuyaUfzsyEqMNQ+CFijLiYvc=)
                          2: sW2ZQzaznOYUTgaN0NWZRkv3mI4.roa (hash: l7Sq4LFbp7xgsLc7oQb5wU3gI9qjxq781R1Na+W+9lg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:28:c9:e6:a0:5c:32:e5:96:03:79:fe:f0:03:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
        Validity
            Not Before: Jun 16 02:01:26 2024 GMT
            Not After : Jun 17 02:01:26 2024 GMT
        Subject: CN=83c7f60a1b3359d580a034fff89f2613accf3e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:e2:24:e9:4c:72:9e:cf:f8:96:a0:ac:8d:
                    26:21:1d:eb:0f:48:93:1f:3e:5d:8e:3f:d3:8b:25:
                    27:8e:24:ae:1b:ec:f9:76:19:bd:0f:8f:94:59:fd:
                    47:17:cb:32:92:12:8a:b4:7a:18:55:cd:28:14:fa:
                    e1:67:0e:9f:ad:53:60:28:67:17:f7:9c:a3:84:05:
                    0c:5c:9c:91:32:5d:00:81:e4:02:f1:5f:e2:7a:e3:
                    6e:48:e7:fc:87:fe:2b:c6:7d:bb:e5:93:c1:a0:a2:
                    06:0b:7a:2f:5d:95:24:61:d7:8b:05:48:35:bf:54:
                    08:60:fc:47:37:02:50:d6:d2:66:52:2b:dd:df:c3:
                    c5:95:d2:6f:c0:61:9b:d2:f1:f3:9b:a7:63:54:f4:
                    ca:93:43:1f:00:7e:d0:cf:07:10:9a:32:21:31:5b:
                    a4:48:64:71:f7:c3:7f:b8:fc:92:f3:e7:93:42:97:
                    43:ce:bd:32:ad:fb:40:69:af:ab:88:43:40:98:0f:
                    ef:e8:62:bb:2c:55:3b:93:08:77:6e:d5:96:d9:5e:
                    c9:30:49:8d:8a:f2:01:50:80:c1:2c:63:19:b9:9b:
                    6d:d0:d0:24:e7:df:50:c4:52:98:fe:2b:a4:5e:ed:
                    3d:44:1c:4e:5d:60:bc:a5:6c:1a:5c:61:fb:70:ad:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C7:F6:0A:1B:33:59:D5:80:A0:34:FF:F8:9F:26:13:AC:CF:3E:8F
            X509v3 Authority Key Identifier:
                keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:30:1a:62:7e:53:1d:09:56:74:cf:88:f1:c0:fa:a2:61:22:
         c3:9a:92:4b:ca:e6:3e:ad:b8:95:34:53:b7:d8:34:45:da:f5:
         4e:1c:86:b9:ca:11:89:01:d4:27:6e:8a:68:d2:ec:30:fd:77:
         93:af:88:91:e5:cd:f1:e5:c2:47:ee:d6:99:80:c9:26:36:95:
         88:57:ff:44:90:e9:45:01:89:20:05:22:90:68:59:3e:0d:ff:
         67:01:94:0d:ba:1b:48:ee:cf:b6:e6:52:2d:c4:9f:80:a7:86:
         ff:c8:7b:41:46:24:91:2c:fc:dd:9a:c7:40:84:4d:45:52:89:
         32:a7:69:01:d4:6c:25:da:85:3b:16:a6:b0:13:6e:a7:fb:fa:
         14:d7:1f:2a:00:34:4d:b8:56:a6:05:81:ba:76:c7:5c:87:2a:
         2a:6b:0d:ee:71:de:87:94:1d:02:fa:be:c5:72:3a:90:b9:4b:
         84:d5:1e:a6:a4:cb:07:dd:7d:8b:ab:eb:32:50:6a:8c:d3:98:
         5d:2f:22:13:3f:15:28:98:96:4c:06:d5:8e:79:5f:45:d5:35:
         17:47:c5:17:0b:ab:91:54:5d:c2:aa:e1:d6:83:6b:b1:ac:ca:
         9c:a3:d9:1d:43:02:84:c5:eb:33:53:16:1c:6a:1d:b9:3d:61:
         d5:6c:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:57:52 2024 by rpki-client on console-ams.rpki-client.org