Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
File:                     qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft (raw, json)
Hash identifier:          Wba+yerZ80YpKFq/Znm+q/nQfXWqrSZ7dJGKF5P09JI=
Subject key identifier:   83:74:F9:13:13:2C:BF:49:93:28:CD:48:83:E0:CF:82:79:2F:51:56
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Certificate issuer:       /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial:       018F41C3F39523CF546AB525A5C492AA43A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
Manifest number:          1114
Signing time:             Sat 04 May 2024 04:01:51 +0000
Manifest this update:     Sat 04 May 2024 04:01:51 +0000
Manifest next update:     Sun 05 May 2024 04:01:51 +0000
Files and hashes:         1: KD-JQiQDMfVbklVHw95UF-j0wGE.roa (hash: 1UNS4cwqClDzy4wQle4mv6143SihAgX5U7sZtAbRnyg=)
                          2: qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl (hash: SNa0PymB1wQdRE+N9rF4MeT8b2iT1213+lPZYlfPTAI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:f3:95:23:cf:54:6a:b5:25:a5:c4:92:aa:43:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
        Validity
            Not Before: May  4 04:01:51 2024 GMT
            Not After : May  5 04:01:51 2024 GMT
        Subject: CN=8374f913132cbf499328cd4883e0cf82792f5156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:b0:79:8f:e1:15:2c:df:b9:bc:75:4b:72:
                    50:48:12:19:d8:eb:84:d1:e7:77:af:5e:af:86:1d:
                    55:c7:fd:7f:e0:c1:0c:83:e3:9c:a2:2c:e0:e3:6e:
                    f3:69:45:9f:f6:63:6d:96:87:be:e7:e9:43:4d:bb:
                    ec:21:29:10:d8:b5:64:08:23:77:a7:e4:08:57:cf:
                    c5:df:c5:99:c5:9b:59:27:f9:6a:1c:dd:3a:d5:1d:
                    64:c1:52:7c:c8:e8:c5:87:61:a9:1d:5d:3f:ae:9f:
                    82:02:23:e4:9c:12:d2:b0:72:98:fb:3f:de:14:22:
                    29:1f:75:6f:be:cc:1f:67:ea:35:09:84:b7:06:96:
                    e6:54:9f:b9:09:1a:5c:32:9c:77:64:b2:96:b1:7e:
                    c4:8d:af:3c:01:0a:e9:18:eb:93:b9:3c:2b:00:91:
                    12:34:c8:9d:de:f1:36:56:35:df:89:81:fa:ff:ef:
                    72:f1:d7:14:5e:be:b3:dc:74:27:9c:43:56:04:ce:
                    3d:52:2e:80:71:8f:8d:d5:5f:e8:46:77:e8:19:0f:
                    c5:e1:b2:d5:89:4c:40:c6:a1:4a:30:11:a8:24:40:
                    33:04:29:b8:e8:1f:57:60:5e:b4:e0:03:9f:71:6f:
                    f9:74:df:b2:89:ab:67:1f:0f:3a:73:0e:f3:3c:d9:
                    26:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:74:F9:13:13:2C:BF:49:93:28:CD:48:83:E0:CF:82:79:2F:51:56
            X509v3 Authority Key Identifier:
                keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3b:07:57:e9:79:52:c6:52:e7:a4:12:ad:9a:d2:dd:a3:40:
         7d:5d:94:ea:0e:47:7a:ab:93:44:98:37:a4:db:a1:c7:25:5b:
         bb:5e:d0:0e:a5:b0:92:ee:e4:3c:50:6c:87:7a:7f:ad:e5:42:
         3e:fa:43:0b:0e:7b:48:1b:4e:3d:5c:98:dd:1b:6c:48:f3:7a:
         16:06:93:c7:41:b3:26:79:5a:f8:77:3f:42:ff:4b:b3:44:49:
         cb:a8:05:77:37:94:7f:b7:04:9d:5a:b6:d3:b9:9e:d7:0c:20:
         ef:5f:55:a1:7a:60:3f:0b:83:cc:97:8f:64:8c:92:34:89:43:
         5b:c4:e3:62:28:4e:75:21:39:92:b8:18:42:e3:27:7c:97:df:
         ec:65:f4:14:a8:c7:6a:81:69:9c:3b:d5:9c:15:fa:ca:51:10:
         38:34:aa:03:5a:b1:f4:a6:26:4a:c8:0c:d6:8d:a3:df:89:70:
         f6:92:62:4a:74:a8:03:d1:a0:90:f2:f0:7b:4a:91:56:77:c9:
         75:12:55:81:a7:25:db:16:19:b4:42:4e:47:ae:25:38:0a:75:
         17:63:54:63:e4:25:c3:46:ee:ef:ab:24:4c:cd:2a:e9:68:a8:
         a6:af:5a:0b:72:a1:5f:87:d6:48:13:35:3d:de:6a:c5:1b:28:
         32:78:f6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 10:06:46 2024 by rpki-client on console-fra.rpki-client.org