Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File:                     QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier:          kEThHBjejPMBfMId6Y1LueULJGZjT+f+aglMSllfhZc=
Subject key identifier:   75:55:4D:5F:87:D5:12:1B:67:C5:BB:20:A6:63:FD:5F:97:70:07:BA
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer:       /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial:       01935688D12E7E5C606F4D1922AE7E66AF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number:          0C49
Signing time:             Sat 23 Nov 2024 01:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:27 +0000
Files and hashes:         1: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: Cxc1RSNFjUKhaJWqdiZzH/tZ21jarJsrET13XiDdT58=)
                          2: oE59or5LjZXam8R59JCmbyYAY4M.roa (hash: Odk6iQcHpzLNBhtamxzd6i7YU4DEmOVJ2rp+NLDDr4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:d1:2e:7e:5c:60:6f:4d:19:22:ae:7e:66:af:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
        Validity
            Not Before: Nov 23 01:00:27 2024 GMT
            Not After : Nov 24 01:00:27 2024 GMT
        Subject: CN=75554d5f87d5121b67c5bb20a663fd5f977007ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:4f:fb:8f:91:31:e0:1e:63:6e:93:ec:1a:
                    6c:08:1c:71:cb:86:d3:46:0c:8a:e5:ed:6d:6f:68:
                    e8:72:94:ff:da:99:02:a1:da:ff:12:5a:73:5d:dd:
                    7f:05:3d:7d:6a:27:8d:80:71:f8:af:22:09:a7:9e:
                    5e:40:f7:67:e7:a0:e2:09:1e:7d:a0:60:70:53:d8:
                    87:b4:42:8d:0f:2f:9a:72:ba:3f:e3:dd:fc:4a:29:
                    30:b5:8d:ea:d1:b9:ca:e2:8e:67:be:6d:79:5f:c1:
                    93:d4:7e:db:ca:60:7e:23:4f:77:65:98:a1:a6:a1:
                    72:ac:78:78:12:bc:01:c8:01:17:4a:50:98:36:31:
                    33:87:04:f7:33:c1:b6:88:79:2a:2d:51:7b:37:ec:
                    9e:a1:41:20:b2:d2:28:80:17:95:af:fe:d9:76:b6:
                    77:f4:c7:e9:79:58:94:55:19:69:5f:e8:33:aa:14:
                    74:97:6d:33:c8:04:62:1f:55:98:8d:1d:bb:df:1e:
                    9a:79:53:f3:4c:8d:72:0b:14:42:00:78:83:e3:10:
                    ce:8a:74:d8:33:96:3b:44:4d:83:ea:48:64:12:ac:
                    20:68:73:ce:e9:c7:6f:7b:87:ca:06:a6:fd:3e:a0:
                    cd:74:01:c8:84:08:a0:01:5a:d8:83:bc:72:36:7c:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:55:4D:5F:87:D5:12:1B:67:C5:BB:20:A6:63:FD:5F:97:70:07:BA
            X509v3 Authority Key Identifier:
                keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:36:02:f0:9f:6a:99:ea:ef:ec:83:1e:d2:0d:7d:db:15:20:
         31:d5:6f:0b:40:ac:85:fb:8f:26:55:35:11:7a:13:6e:15:2f:
         a0:6b:f1:28:2f:b0:6a:0b:55:c5:1b:3c:e4:39:5d:cd:27:4f:
         cf:22:b0:ff:22:a5:80:b8:48:40:b7:61:48:12:7a:b7:c5:e2:
         d4:aa:6b:e1:fd:36:3f:bd:dd:e3:99:f2:e1:51:93:58:61:aa:
         66:f9:dc:0e:9e:ad:b2:f3:60:1d:e5:e1:6c:df:9d:a8:33:5e:
         44:c8:55:58:f3:90:b7:ac:c2:b0:10:bf:e0:8c:54:84:d6:38:
         80:39:7c:23:48:64:2c:35:83:e9:a0:87:55:65:b3:04:7d:d8:
         52:83:39:6f:b5:c8:68:9a:4a:64:2f:11:92:0b:cc:bb:ad:92:
         b0:a3:d7:6a:f5:e2:4c:39:b7:7e:15:34:d7:70:49:be:6c:0d:
         5a:16:1b:fe:19:94:29:ed:9c:b3:96:2b:91:02:15:ec:a6:07:
         32:1f:9f:b7:06:a9:1d:e9:b9:71:a3:bb:c1:b4:b0:3f:73:2b:
         d5:88:bc:3b:49:41:27:da:23:61:a8:48:5a:ab:2f:8b:3b:0e:
         5b:0c:2b:4d:04:e3:97:5c:4b:61:0c:02:33:19:b1:96:6a:6d:
         01:c4:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:59 2024 by rpki-client on console-fra.rpki-client.org