Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File:                     QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier:          r0hHDQW+ICClw2EAE/n88472YankUXSNZhUQL8PuCrA=
Subject key identifier:   B8:90:66:4A:3E:70:B2:F6:86:C7:F4:FD:C1:E8:EA:47:41:A1:EE:08
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer:       /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial:       018F83D986920C6298274C63D710EE795520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 00:00:21 +0000
Manifest this update:     Fri 17 May 2024 00:00:21 +0000
Manifest next update:     Sat 18 May 2024 00:00:21 +0000
Files and hashes:         1: 9oxwHTaGkfZuJT32md6CYBToQ80.roa (hash: JTermiy/BlRohLzvMWVrfYu9ASPrTjmJy+WVr2FnAVE=)
                          2: MDIpdE3cIvDZ4ys9dmyxViT4NK8.roa (hash: 3EBZBD2mvveL8x/k9u/M73utXrbbKt4HN7OeC5xMbpQ=)
                          3: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: DbtfdYmrh0h57rr2cTCUX2B8WwPuXXACf4rc5IUNMiQ=)
                          4: ZG1_aTQaR9Be7fw7MQSaxTtMROM.roa (hash: gUkxH2dlXj2daFVl2lDeQiFLHXqZNQuoYmwLdeihtEw=)
                          5: fle5ZRwVJ0SoawuoeABNXKLWxRI.roa (hash: orX7+PLVT4FHp3cStsaO1P68EP6VGUi16LY3gsFjag8=)
                          6: i8CiKE0XSB0Z4vj3PMufYiLS9x8.roa (hash: DY+SHYwqpazlktR9c54cxrckRhaJ02bzjiMICaDBtJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:86:92:0c:62:98:27:4c:63:d7:10:ee:79:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Validity
            Not Before: May 17 00:00:21 2024 GMT
            Not After : May 18 00:00:21 2024 GMT
        Subject: CN=b890664a3e70b2f686c7f4fdc1e8ea4741a1ee08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:bc:d5:52:5e:a6:37:8b:b1:5b:cc:ff:2c:
                    f5:fb:3d:ba:17:55:59:d6:de:74:e4:60:13:2f:4a:
                    c0:4d:d0:ed:47:53:e1:79:38:8d:6c:d8:ca:6c:1d:
                    18:83:c4:c0:41:10:7f:be:db:d7:26:9a:34:73:4f:
                    c1:a1:07:44:2e:54:21:da:07:40:96:79:05:83:ed:
                    e4:84:5f:a4:8b:75:e6:75:04:be:ab:9b:c3:09:4d:
                    5f:6b:b8:6d:13:c1:a6:ef:19:9f:67:88:1a:33:2c:
                    5b:4c:38:09:53:bc:7c:74:c6:0b:de:30:e9:a9:73:
                    b4:27:bb:95:02:c9:1a:f2:5c:45:c0:9b:10:ec:9a:
                    96:f0:fe:e6:5a:24:ef:8c:67:5a:b6:b0:17:fa:08:
                    0b:43:52:28:d1:88:27:63:92:46:1e:6f:c3:56:f0:
                    e8:e5:87:fd:b4:a2:e6:f1:03:5a:f4:37:59:90:91:
                    47:71:a1:49:a9:f0:cb:8b:e4:c5:77:71:bb:01:80:
                    3a:48:20:68:49:d3:9c:58:8b:4f:ae:d6:e5:97:f2:
                    00:e6:b8:ec:d7:3a:29:26:36:69:66:a4:56:3c:b9:
                    17:35:ae:a2:e6:2a:88:f0:fc:62:17:a8:ca:94:14:
                    76:3f:29:3c:cf:44:e2:aa:c3:29:45:ce:49:c0:de:
                    82:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:90:66:4A:3E:70:B2:F6:86:C7:F4:FD:C1:E8:EA:47:41:A1:EE:08
            X509v3 Authority Key Identifier:
                keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:a2:ee:2b:8d:4d:c4:14:a4:f5:03:50:39:7d:04:49:f8:
         d2:a6:66:43:11:1d:54:3d:ae:eb:7a:80:ec:08:2b:bb:91:dd:
         02:27:4b:4e:5f:96:30:15:aa:c9:ef:b6:84:9d:ca:d4:90:75:
         97:06:17:7f:0a:fb:3e:2d:1f:b0:d4:aa:66:47:3c:ac:09:30:
         f9:7f:d5:99:d9:e2:1c:04:72:c4:8a:c8:2d:c3:b9:4b:c9:8e:
         a6:9d:f7:1b:84:69:23:e4:2d:35:ac:4f:86:02:1d:09:45:a7:
         24:4f:7d:09:9e:42:a9:b1:f1:e9:59:8b:f4:8a:65:a9:c9:a7:
         e0:50:dc:8d:e9:d9:c9:34:ed:e4:86:72:a2:cf:9f:8d:fc:57:
         64:59:b0:88:ff:f2:18:aa:89:f9:35:9f:94:e3:cd:d2:7f:b1:
         a7:69:ad:a9:21:5a:61:22:52:1c:9f:b9:94:08:7e:ff:8e:f7:
         2e:93:e9:5d:27:85:cb:18:3d:2b:2c:a3:96:1f:0b:7f:09:78:
         8e:b0:88:e7:59:b2:88:ba:e7:5f:aa:8a:96:75:49:7c:ec:6b:
         1a:a7:1b:7a:1b:24:18:dd:09:90:d6:62:2d:9b:e1:4e:ce:77:
         ce:6e:be:c3:82:98:33:39:b9:70:71:6e:ce:c2:f7:74:c1:fc:
         83:e1:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:18:30 2024 by rpki-client on console-fra.rpki-client.org