Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
File:                     qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json)
Hash identifier:          bj+iQ7d5i7jX0FiBfrCqqUdWXRGdM7BeqkApCP8w98c=
Subject key identifier:   24:1E:08:8B:59:D5:77:B1:FB:4A:1B:AC:C2:77:BA:13:1D:EF:EA:54
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Certificate issuer:       /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial:       01901E21C83CB0201CFA3E40B1DBD975812F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
Manifest number:          09AD
Signing time:             Sat 15 Jun 2024 23:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:48 +0000
Files and hashes:         1: AspSVUqcTyY3tgeJPVtmoMZTUEc.roa (hash: 5mazVwl41nmOIHx0+IXkI5Y6TP9lGglLHqnZw5m790Y=)
                          2: EFqz7lx9I4P_kfwri9FSWNBahXg.roa (hash: We3JwkjHovpi6e4tGxCGtco2K9kE2lyKSPcGvk/s6n0=)
                          3: QXmvJo6-tOzIkusbW4ikLtcGRNA.roa (hash: vNHIwg5S8DKIvFrO7yhmpJZ1EYpnraJs705PwTgYbQs=)
                          4: RLS1isuDZ2Q_9Zi0ARaB9g2UU6I.roa (hash: A3M1t1uzu6sHac9OcyNLH04j9BWOPBs5Oi4krCAyW5k=)
                          5: VPtPysHSOmlX7ebQX3Mc9NW0mqQ.roa (hash: CPbtTtuQm1D31R9pe+64uycEABH3ONKwSpF8v6ChlPw=)
                          6: k1T8BtKmLAvGLRQOJkwBUJvJtko.roa (hash: 2yWzR6brNimJxyZVSDkBhtZGlLvW1d2CJ3NPSGIg/n4=)
                          7: lsGvSke7WiBxu7As3xtdo2tm8FM.roa (hash: MXzauXCzOAHoQhiLB4LbBDy1gGefx040R+U5hJWCAVY=)
                          8: n8m9rV5Jny2tual3PiuDuyKQYzg.roa (hash: 7ZaRlsnxcpwy6D1Shqsur1nWXScYf13NisiVH9mIHbQ=)
                          9: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: eTTAY4+RKujPfouIeN2oXgVLudvKXSWzmcs1bb+GTzU=)
                          10: sZWPaxj3o7dJqiBJGcQ_ZlSOI-c.roa (hash: zxeVB7p+B0lDUYrg+Lk8IkAt7uYVlmrkLo2Dsl8E/1k=)
                          11: u2iY02RaZacNA4z2HA0Y9KidfIo.roa (hash: tmsEqSB1MWNvuwah79s08gxV9oc+s/iAeyC4d1kCaVU=)
                          12: z9MgkyyUamM1CFQrm0UVdeK-Em4.roa (hash: lur8IpG2D9Jw42ZDqnkqTitVWToL9yQLfEmQ2sW/9oU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:c8:3c:b0:20:1c:fa:3e:40:b1:db:d9:75:81:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
        Validity
            Not Before: Jun 15 23:00:48 2024 GMT
            Not After : Jun 16 23:00:48 2024 GMT
        Subject: CN=241e088b59d577b1fb4a1bacc277ba131defea54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:13:6a:9a:dd:6f:f0:9a:26:f4:04:3f:76:
                    e1:77:5e:09:60:a9:c3:6d:15:e8:b5:3a:54:40:51:
                    d1:8e:e7:94:85:87:a5:e0:08:d0:22:41:3f:cb:74:
                    c6:d6:8b:f8:bd:dd:bc:72:ac:b7:ae:ef:d7:86:82:
                    74:e7:57:78:ab:5b:66:86:94:a8:db:5d:1f:c8:50:
                    2d:f9:49:f1:71:4c:4c:77:2c:f4:a6:ea:86:29:63:
                    0e:b3:ff:dd:59:d2:76:f1:c4:e4:4f:e5:c3:26:6b:
                    34:dd:38:64:d9:0e:db:8a:b2:c7:87:4b:76:06:cf:
                    4d:77:b9:71:c7:8d:00:37:85:24:6f:26:94:d3:fb:
                    e3:be:86:c0:a8:6e:78:c0:be:76:60:37:e1:fa:e8:
                    8d:08:45:6c:06:e3:f4:7b:f2:90:be:28:d2:77:d5:
                    19:52:36:46:08:f8:41:81:a2:fe:9e:ef:f0:01:87:
                    c4:d8:4b:a7:f8:93:b3:b3:ec:64:2e:95:2b:7a:f4:
                    29:4f:3e:22:34:7c:36:70:4a:77:b0:69:0c:13:5b:
                    d6:2c:3b:cf:b4:d9:3e:3f:1b:de:ed:ec:a1:b5:4d:
                    83:a7:a8:80:8b:f8:c7:eb:39:51:78:d7:91:11:ae:
                    b2:5b:a5:1b:1e:6e:28:34:8b:af:38:55:a9:00:80:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1E:08:8B:59:D5:77:B1:FB:4A:1B:AC:C2:77:BA:13:1D:EF:EA:54
            X509v3 Authority Key Identifier:
                keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:65:ca:ff:d6:af:49:9c:68:a8:52:b5:4b:e6:e7:32:29:
         13:1d:32:a7:ca:f9:e0:a3:3d:8e:06:0f:91:76:c1:29:5f:be:
         84:be:eb:ea:ec:c2:b8:5a:fe:fa:e1:79:25:d0:45:90:4c:ab:
         9e:5f:c6:94:bb:df:45:d9:8e:73:88:97:07:7f:bd:bf:7f:6d:
         7b:9e:c4:d8:d7:89:cf:17:01:06:0b:af:3f:44:cc:f0:cb:ad:
         07:0a:09:8c:d5:87:51:68:23:54:83:e4:4a:5f:cb:e9:ee:3f:
         fd:46:5b:a3:63:2f:2f:c0:d5:f9:0f:ae:47:c0:6b:93:16:a4:
         9e:d1:da:b9:c2:29:3a:af:2b:eb:e4:c0:ca:f2:40:87:74:a6:
         7d:8d:fc:5b:5e:30:6f:32:ae:ad:fc:5f:dc:28:ac:bd:a6:52:
         55:83:da:f7:ee:3d:61:80:9e:d3:5e:73:88:a3:5e:2e:40:a4:
         85:a3:8b:d4:e8:fa:92:f0:8e:e3:29:86:31:02:e3:78:51:e3:
         13:1d:12:84:87:60:92:02:e0:ed:50:a1:56:a0:f9:6e:ed:a0:
         86:52:61:fd:71:9a:44:da:c6:60:f6:b8:d2:25:2d:96:74:e5:
         20:fd:64:79:1c:f1:4d:49:55:24:1c:da:33:16:32:c9:d1:3b:
         46:c8:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:10:13 2024 by rpki-client on console-ams.rpki-client.org