Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File:                     Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier:          7N6efrM5tR9EXPdMyddgcLyRGpaglEbsv3CaUQTmBtk=
Subject key identifier:   72:6A:99:D0:2A:0E:23:3F:79:A8:2A:E5:B6:63:B7:17:3F:69:40:B7
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer:       /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial:       018F90F28831A77D1402857056FEAAA20709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number:          117D
Signing time:             Sun 19 May 2024 13:02:44 +0000
Manifest this update:     Sun 19 May 2024 13:02:44 +0000
Manifest next update:     Mon 20 May 2024 13:02:44 +0000
Files and hashes:         1: 1-vRSdKtXWz9Y8mE7p_Cq4jrVhwo.roa (hash: nfJ5goiu4O+tWwlJChwreXXDqhJJCYf3x2gmK+c+gp8=)
                          2: Dk0pfIg8YqWyY_3RrBWdnN1GV3M.roa (hash: kegvfqEIiNBVkJJoxo4vcTPEvO1b2cN435KWv6jgAZ4=)
                          3: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: OYajbRnhcC+O5axXzop3w5jZSuCQtOI7GWHPKCafOB4=)
                          4: dOYC4COGFul6i3yyWrC0C1CmAJ4.roa (hash: lmqcFn7ikNWuJd4CBK7vIa/tEPcy/mvuzZDHZPpZRlQ=)
                          5: rOzu6vCcdfq32Zg3Oi-x3Bp5M6M.roa (hash: rpHpMwLqX4C6bvXhlqKRizVrfpj51/Duzu29qbZAEhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:f2:88:31:a7:7d:14:02:85:70:56:fe:aa:a2:07:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
        Validity
            Not Before: May 19 13:02:44 2024 GMT
            Not After : May 20 13:02:44 2024 GMT
        Subject: CN=726a99d02a0e233f79a82ae5b663b7173f6940b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:a2:a3:76:a6:b7:e2:51:e6:88:94:23:3c:
                    ef:b0:8f:b7:16:bd:bb:fa:6d:37:2b:ea:96:71:22:
                    ae:db:f1:28:8d:d1:d0:4c:19:25:7a:da:da:df:b5:
                    04:a0:86:cf:66:ae:d0:f3:25:51:78:e1:7f:f5:76:
                    db:f6:49:28:25:63:96:b8:54:9d:70:57:48:9a:da:
                    9f:02:dd:1b:4a:f8:8a:53:d4:58:95:4d:7d:0e:19:
                    da:29:bb:a3:86:70:de:d0:1a:90:4c:48:5e:d8:75:
                    ae:14:cb:49:4a:56:3f:90:4a:c4:ef:28:a6:fd:32:
                    cc:dd:d7:c2:1a:c8:12:9c:d6:ba:b6:b4:90:b1:8a:
                    c2:bb:fd:d2:7d:5f:e4:58:0b:d5:58:47:b3:67:79:
                    90:2c:e6:30:09:25:7d:7e:2d:d0:30:1c:57:c1:f4:
                    dc:f6:7a:96:74:95:31:6e:01:36:0b:cb:50:52:c8:
                    e7:ce:11:6a:91:87:ee:e2:9e:96:1e:8b:72:d5:1b:
                    4b:8f:b8:82:6e:91:37:82:99:2f:61:73:fa:c0:2e:
                    00:73:77:af:2b:e1:8c:93:63:15:75:a8:d0:37:8a:
                    29:10:c2:9d:6a:b9:46:7d:d9:82:f4:c1:a7:30:92:
                    6d:57:3f:81:a3:36:0f:3e:43:53:fb:2f:20:d4:5e:
                    a7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6A:99:D0:2A:0E:23:3F:79:A8:2A:E5:B6:63:B7:17:3F:69:40:B7
            X509v3 Authority Key Identifier:
                keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c5:0d:2f:92:81:39:c9:c5:d9:70:ea:cf:f7:ba:ea:d9:37:
         de:52:5e:56:2b:ba:6a:63:44:de:81:da:44:67:2c:c6:33:26:
         9c:d6:cb:24:36:9c:5d:2b:71:1e:fe:72:de:f7:86:f6:08:90:
         e4:85:8d:72:f1:df:ad:3f:1a:86:7c:f2:da:96:9a:d1:87:69:
         22:59:03:50:f4:f9:93:3c:8e:eb:db:f5:e7:86:7d:02:4b:bf:
         b0:0b:89:3c:71:0e:61:7e:57:a3:17:82:97:87:4f:2b:5d:8b:
         7d:33:1a:e3:57:aa:02:2e:11:57:ab:7c:09:81:5d:90:1c:9c:
         22:27:07:7a:e7:d5:f8:b6:36:47:95:18:b0:8f:1a:6d:f8:ce:
         e6:ba:b2:84:31:52:51:77:26:83:ab:ab:2d:01:1b:d6:df:46:
         16:80:a3:15:33:20:e5:4b:d0:76:7f:ae:43:68:a5:3f:b6:82:
         91:da:d0:c5:4a:1b:4b:fe:83:49:af:d9:ca:93:f3:c2:2c:f7:
         c5:7d:08:c8:6f:4d:69:d1:c7:1d:67:c6:88:f0:28:e4:2a:c7:
         ff:00:ff:51:91:4a:47:a8:73:e2:39:7b:45:92:6b:3f:6a:74:
         67:5e:04:a7:87:0f:59:6d:c5:13:9a:40:3f:05:4f:27:a3:70:
         cb:5c:98:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:45:35 2024 by rpki-client on console-ams.rpki-client.org