Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File:                     Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier:          5XCr30BqIdngkHfXLRYuM6KRPZZShuT4TWsTtJEvDi4=
Subject key identifier:   51:AD:A5:51:9D:34:CF:13:F6:BD:3B:ED:0E:B5:91:17:FB:04:58:98
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer:       /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial:       01901DEBF41F16618961AFFA6E45A6A1E195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number:          A6
Signing time:             Sat 15 Jun 2024 22:02:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:00 +0000
Files and hashes:         1: DkG35POjglD74yLxs5Kysj6-hU0.roa (hash: x7nGM9mKgkuHFNcF7lOIpSTpEqysduZPhhrvn7NidXk=)
                          2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: uMBV+DEqP6eVOyptjaNQropNMrZubG+eLMp/zo2nSFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:f4:1f:16:61:89:61:af:fa:6e:45:a6:a1:e1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
        Validity
            Not Before: Jun 15 22:02:00 2024 GMT
            Not After : Jun 16 22:02:00 2024 GMT
        Subject: CN=51ada5519d34cf13f6bd3bed0eb59117fb045898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:15:38:e0:41:7b:4c:66:f0:2c:f0:a7:80:
                    b7:46:a3:e4:80:9b:ce:4e:75:3f:c4:1c:9a:d0:08:
                    e6:4a:29:99:f7:d5:62:85:29:99:99:94:a3:f2:4f:
                    13:6b:16:6e:e6:a8:a1:35:db:66:2c:0d:0e:51:1f:
                    30:59:75:38:b1:a4:e0:e4:d6:12:2f:d5:6a:6f:d1:
                    ce:a9:1e:82:75:25:1f:49:5b:f9:9f:50:50:5e:9c:
                    66:31:fb:03:eb:43:0c:3b:6f:32:a6:f8:bd:f3:6c:
                    79:2a:2b:fe:b8:91:4f:24:6f:32:1c:40:49:23:2f:
                    da:ea:86:4e:19:ac:6c:91:97:37:97:ec:d2:90:a7:
                    24:64:5b:49:0f:26:b6:e3:92:03:83:cd:c0:81:90:
                    65:5b:a7:dc:f7:3a:2a:89:38:c0:25:9b:86:70:a1:
                    c3:df:81:15:3a:b0:83:68:0a:d0:25:93:be:bd:e8:
                    3a:78:9e:b8:fb:2a:93:a7:e5:31:65:ce:d2:a0:f7:
                    ff:53:41:67:41:87:e9:7f:19:a5:55:6c:7a:42:be:
                    0d:83:0f:58:81:0b:ac:a0:7f:88:a9:d2:cc:ad:eb:
                    90:b7:db:68:47:21:8e:0b:28:f5:74:fb:91:39:87:
                    6c:0f:bd:30:df:1c:d4:5f:b3:75:ea:a4:44:e6:ab:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AD:A5:51:9D:34:CF:13:F6:BD:3B:ED:0E:B5:91:17:FB:04:58:98
            X509v3 Authority Key Identifier:
                keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:8c:f8:e1:cf:17:76:7e:f6:72:1a:0c:14:b3:d9:ee:71:
         d6:8d:c5:5e:c6:a0:dd:1a:94:a8:75:29:d3:19:cc:c8:f0:c6:
         51:2f:28:ea:dd:14:ee:d0:72:73:b3:3a:02:d8:17:67:4f:40:
         a9:13:e5:09:4e:6e:71:4d:f5:cf:74:28:d7:9c:06:dc:6f:26:
         48:ef:c1:d1:5c:91:e5:84:7a:38:a4:7f:65:b3:cc:93:da:eb:
         1e:ac:5d:b0:90:55:cd:03:84:df:da:49:19:25:0f:81:b9:17:
         75:c9:3b:e1:ae:5f:e4:4a:d3:21:52:2a:3b:c1:aa:91:36:a9:
         52:6c:b2:0e:80:78:4d:dd:cc:a6:92:b5:62:59:26:24:05:70:
         05:2e:45:0a:c1:2d:93:e7:12:52:46:3d:50:0b:00:eb:1e:ed:
         50:a9:68:90:59:f1:52:3b:6f:86:42:c0:6b:d4:ff:2d:99:83:
         5f:6d:b4:81:cb:8b:ee:8f:20:57:91:99:29:96:5f:59:5a:a5:
         4c:d4:c0:6d:f8:7c:34:df:55:5a:4c:95:ac:dc:84:58:7e:4e:
         64:9c:39:87:99:65:d4:e4:7b:95:9e:e7:21:dd:d9:22:c9:3a:
         cb:ac:04:ea:1d:3a:c7:57:4e:d2:54:16:79:3e:8f:e5:a9:4c:
         52:ff:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:31 2024 by rpki-client on console-fra.rpki-client.org