Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File:                     2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier:          tt10G81CnO5MO2cgfRmjbXh7rrF3fnuKY06vxPNZJIg=
Subject key identifier:   02:B5:CF:42:59:1A:9E:13:85:43:F9:EF:03:95:AA:47:4C:52:DE:39
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer:       /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial:       019040ADD18E1DA62A4A86A93B503AB7AA41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number:          0283
Signing time:             Sat 22 Jun 2024 16:00:51 +0000
Manifest this update:     Sat 22 Jun 2024 16:00:51 +0000
Manifest next update:     Sun 23 Jun 2024 16:00:51 +0000
Files and hashes:         1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: ZX2VK7oUAcXertAmGqWusLJJq4INx1E07WDGSJjKJYY=)
                          2: gmILmQzz_7IRSMICP7i8wZBQ96c.roa (hash: OjcqPKdtH8Zqs5iII4RLtPg6K7DgDVYP68OIrSbsFlw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ad:d1:8e:1d:a6:2a:4a:86:a9:3b:50:3a:b7:aa:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
        Validity
            Not Before: Jun 22 16:00:51 2024 GMT
            Not After : Jun 23 16:00:51 2024 GMT
        Subject: CN=02b5cf42591a9e138543f9ef0395aa474c52de39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:73:d7:db:2b:f6:7e:26:b5:a4:a8:d2:67:
                    7f:26:fc:41:02:3a:c5:b3:9b:5c:73:92:80:f3:a3:
                    dc:c9:df:a3:88:e8:d5:ca:f6:3f:77:9e:20:84:1e:
                    0d:3a:9b:84:2b:ee:77:29:d8:c5:b8:c3:65:3d:5b:
                    af:0d:b6:34:62:d2:c9:69:51:79:29:b2:50:aa:c7:
                    ae:15:99:0d:c4:14:a0:a8:01:ed:d3:06:04:f0:4f:
                    2e:ac:e9:78:53:fb:ca:13:db:e2:73:2b:1c:a5:67:
                    91:6c:f6:27:6c:b6:b2:8c:62:08:1d:8e:cd:86:08:
                    bf:c5:54:d9:b6:bf:1c:e6:d6:19:e3:5a:ef:ec:8b:
                    cb:d4:7d:99:00:3d:06:dd:b0:c1:ca:93:95:c3:15:
                    c8:95:2c:00:d8:1f:56:c8:d2:d3:e7:0a:ec:2a:16:
                    c8:a7:79:4b:bf:5c:2d:40:cc:09:a1:e6:a6:60:d2:
                    d9:ec:b7:3d:56:25:e3:02:9a:8f:84:05:c6:34:6d:
                    7d:83:58:97:86:af:13:c7:da:ce:b5:02:82:e1:7b:
                    46:bf:e8:c3:3c:ff:9b:cc:a2:2d:ab:1f:c9:c5:18:
                    65:f5:ef:73:e6:4f:23:7d:69:b2:44:65:52:e6:c7:
                    1c:c3:33:ce:f8:f9:44:4c:c7:39:84:0a:f8:d5:f3:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B5:CF:42:59:1A:9E:13:85:43:F9:EF:03:95:AA:47:4C:52:DE:39
            X509v3 Authority Key Identifier:
                keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:04:61:b9:49:7c:f6:c2:5a:a4:85:7c:5d:5b:ae:06:fd:
         4f:92:21:cf:13:27:46:e9:2f:ea:ee:65:09:b0:cd:47:fd:f4:
         85:f7:03:b8:8a:a4:0f:ae:be:4e:13:4e:84:da:a7:a7:2e:a0:
         78:cc:f1:da:7a:13:50:38:83:57:2c:39:f6:2e:0c:11:73:42:
         64:84:b9:d4:ee:9a:3d:ee:0c:36:38:bc:96:a9:3f:d7:68:4f:
         ce:89:c0:c7:c3:b3:0c:71:2c:cc:b4:49:83:6b:b8:b7:62:48:
         ba:86:93:74:d3:8a:43:db:9e:83:e5:c6:9e:c6:a8:c1:aa:b9:
         d7:66:bc:54:3d:63:71:b8:96:69:8a:72:3d:6f:f5:8d:9a:3a:
         a8:dc:40:9d:03:77:64:c6:b6:4d:5b:5a:33:18:68:dc:a7:8b:
         43:9b:da:34:f8:00:08:e6:7e:8e:7a:31:51:b8:1e:c6:68:a2:
         8f:30:b6:2d:2f:23:3c:e0:c9:0a:56:da:70:7a:02:ab:35:c6:
         16:7d:d4:84:26:3d:d5:76:c0:69:b4:a6:7b:43:d6:b7:67:f9:
         22:bf:92:59:e0:22:37:10:61:a8:9b:57:cd:e8:75:0e:a9:a3:
         cf:07:82:c1:47:cb:20:fb:96:b6:95:33:eb:2c:ae:ca:fb:14:
         21:86:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:39:04 2024 by rpki-client on console-ams.rpki-client.org