Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File:                     qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier:          AKdim2F5lYWhPLI/mj9O/yNvG1Q2HclGoyMGrjwsBkU=
Subject key identifier:   BB:D9:2D:31:D8:1E:0F:AC:A9:69:32:95:D7:5A:44:03:7C:22:E1:6A
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer:       /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial:       01901D0F3F2EB541A49AA38BE5BEBC6F4734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number:          10F9
Signing time:             Sat 15 Jun 2024 18:00:56 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:56 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:56 +0000
Files and hashes:         1: bZP-cto19TrOHBNuQoGq-plcH4A.roa (hash: TcuSOqHOgSfGF6GOWj8uOYgUJfEzdorC3fZCig0XH+w=)
                          2: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: IsFWwVO+6nIi2bH3VrhDCDusLMvcYJDp+GaicAnx23w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:3f:2e:b5:41:a4:9a:a3:8b:e5:be:bc:6f:47:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
        Validity
            Not Before: Jun 15 18:00:56 2024 GMT
            Not After : Jun 16 18:00:56 2024 GMT
        Subject: CN=bbd92d31d81e0faca9693295d75a44037c22e16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b8:72:d3:3b:39:7a:eb:7d:c4:0d:b5:9f:64:
                    42:94:80:6e:4b:e4:f7:76:4f:6d:bc:77:28:e7:da:
                    43:f1:3b:b1:0c:38:b7:5e:17:b7:58:86:8f:59:ee:
                    4d:85:73:b9:03:be:ba:1a:c2:6c:c1:57:1b:1d:78:
                    85:6d:06:aa:b9:a6:22:f9:44:25:b1:ff:e9:81:5d:
                    88:8e:4c:43:5f:43:13:5c:a7:95:43:bf:12:fc:d0:
                    b7:c0:5f:cd:92:78:a9:8a:fc:8d:9d:67:81:ec:7d:
                    00:1b:27:2b:b5:0f:51:11:fc:d6:f4:2c:23:3e:5f:
                    fc:18:87:8d:16:e3:ca:c2:91:1b:22:66:bf:ee:98:
                    91:f2:1e:32:c7:6c:b0:a3:24:44:66:26:c6:4a:b1:
                    13:e9:6a:67:8f:46:ed:31:fe:3b:3f:07:6f:e0:7c:
                    81:48:f7:b0:4d:bd:ea:83:b2:7d:54:68:8c:82:f9:
                    9e:3b:51:79:3d:0c:26:ab:38:ce:a9:fc:51:b8:f6:
                    f4:51:87:b2:83:a1:0c:02:e3:0f:0b:0c:01:9b:90:
                    fc:a3:6a:2a:6c:a8:5f:ba:72:06:9a:bf:08:1c:4f:
                    d3:3c:22:af:c1:fb:f6:9f:3e:68:ec:c9:71:09:cf:
                    73:02:76:b5:07:cc:87:da:cd:5e:46:9b:c9:bb:d0:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:2D:31:D8:1E:0F:AC:A9:69:32:95:D7:5A:44:03:7C:22:E1:6A
            X509v3 Authority Key Identifier:
                keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:16:b6:05:b6:a1:bc:d0:fe:ed:3d:69:d4:50:29:b2:2a:57:
         c1:66:aa:6a:b3:2a:40:9b:42:00:ab:8c:54:6e:e2:b5:72:1a:
         a4:39:c2:73:de:4a:64:a1:1e:59:5b:63:0b:99:0a:17:e9:d0:
         0d:11:2f:2e:60:19:c5:da:db:cd:2f:1e:ba:44:35:58:82:a7:
         d8:fe:7a:88:63:4f:e6:fa:17:ef:63:de:7b:14:0e:5c:92:21:
         6e:b4:23:68:8e:10:b8:1a:a5:14:7f:41:cb:cf:8b:56:71:7d:
         32:de:c2:9d:63:b0:d8:10:fe:f1:df:0c:81:8e:9a:a9:1d:30:
         1d:42:69:bd:3e:a2:79:b7:aa:61:97:c0:95:0c:db:84:63:b5:
         af:9c:93:c0:68:ba:05:ac:82:51:ee:80:b9:0b:63:c3:b1:18:
         ec:10:00:f2:0e:12:30:1a:03:3d:c9:9c:4b:79:d8:68:de:c1:
         a7:c4:b8:bf:65:fd:2b:1f:cc:a8:b3:ce:ee:9f:47:80:f2:86:
         12:9b:b1:bb:30:9c:c3:7b:47:8f:49:8c:a9:72:ea:e0:d5:9c:
         a7:e8:f6:3e:dd:52:c4:39:a4:08:dc:a3:fc:4e:1b:89:7f:39:
         8e:f6:02:85:49:90:00:10:9e:43:b8:ea:ee:81:3a:4b:e1:79:
         87:ee:37:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdDz8utUGkmqOL5b68b0c0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk
MGMzYzkwHhcNMjQwNjE1MTgwMDU2WhcNMjQwNjE2MTgwMDU2WjAzMTEwLwYDVQQD
EyhiYmQ5MmQzMWQ4MWUwZmFjYTk2OTMyOTVkNzVhNDQwMzdjMjJlMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bhy0zs5eut9xA21n2RClIBuS+T3
dk9tvHco59pD8TuxDDi3Xhe3WIaPWe5NhXO5A766GsJswVcbHXiFbQaquaYi+UQl
sf/pgV2IjkxDX0MTXKeVQ78S/NC3wF/NknipivyNnWeB7H0AGycrtQ9REfzW9Cwj
Pl/8GIeNFuPKwpEbIma/7piR8h4yx2ywoyREZibGSrET6Wpnj0btMf47Pwdv4HyB
SPewTb3qg7J9VGiMgvmeO1F5PQwmqzjOqfxRuPb0UYeyg6EMAuMPCwwBm5D8o2oq
bKhfunIGmr8IHE/TPCKvwfv2nz5o7MlxCc9zAna1B8yH2s1eRpvJu9Ca7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvZLTHYHg+sqWkylddaRAN8IuFqMB8GA1UdIwQY
MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt
YjI2MzQxZDM4YzNmLzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm
LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARha2Bbah
vND+7T1p1FApsipXwWaqarMqQJtCAKuMVG7itXIapDnCc95KZKEeWVtjC5kKF+nQ
DREvLmAZxdrbzS8eukQ1WIKn2P56iGNP5voX72PeexQOXJIhbrQjaI4QuBqlFH9B
y8+LVnF9Mt7CnWOw2BD+8d8MgY6aqR0wHUJpvT6iebeqYZfAlQzbhGO1r5yTwGi6
BayCUe6AuQtjw7EY7BAA8g4SMBoDPcmcS3nYaN7Bp8S4v2X9Kx/MqLPO7p9HgPKG
EpuxuzCcw3tHj0mMqXLq4NWcp+j2Pt1SxDmkCNyj/E4biX85jvYChUmQABCeQ7jq
7oE6S+F5h+43dw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:02:31 2024 by rpki-client on console-ams.rpki-client.org