Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
File:                     QhUNRjwyZnxqkpbI0luzg89BnGE.mft (raw, json)
Hash identifier:          jPn98WWiZ4fEv+lC26JxYgvd3wh1dKRsoLyaPRtMen8=
Subject key identifier:   A0:13:D0:BC:81:C0:63:70:5A:4D:5E:A5:5D:9F:05:66:D9:F1:59:90
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Certificate issuer:       /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial:       018F882435703A318A251BDD853A9CCC3F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
Manifest number:          0248
Signing time:             Fri 17 May 2024 20:00:25 +0000
Manifest this update:     Fri 17 May 2024 20:00:25 +0000
Manifest next update:     Sat 18 May 2024 20:00:25 +0000
Files and hashes:         1: IBbirbpOGoUiTxOjy0j0bJFw3CU.roa (hash: ALuUfHJ0Z0Bo53PhoC7FdaxFbgno9klR0mdgEvR6RWw=)
                          2: QhUNRjwyZnxqkpbI0luzg89BnGE.crl (hash: uZrh3NJipjI75BvCsGHiDrgttkzLJ3KnBqNJlljQiZ0=)
                          3: ZstQ5_JfDxTVbTxaJ5S87P8JJJY.roa (hash: 0nqLkTNSInALsky5B1De0zOZjT0liE6G5sEhf/ZJjOw=)
                          4: nBVpZm4FeptOQg3RDdc7Nngnl9s.roa (hash: 34dD9Y67eaPZ1NBv6k0hbGmZQFH3fvPjxbxBPxsn46I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:35:70:3a:31:8a:25:1b:dd:85:3a:9c:cc:3f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
        Validity
            Not Before: May 17 20:00:25 2024 GMT
            Not After : May 18 20:00:25 2024 GMT
        Subject: CN=a013d0bc81c063705a4d5ea55d9f0566d9f15990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:1b:2a:80:89:3f:29:89:47:46:81:78:6d:
                    8e:b6:90:b9:83:44:17:f3:d5:00:30:7a:24:c2:74:
                    b4:98:12:86:80:79:b7:b0:52:7e:d0:de:2b:55:0a:
                    e2:bb:dc:cd:3c:2a:b2:aa:0a:2b:6c:a2:dc:f5:81:
                    42:05:1c:99:83:04:61:be:73:ac:76:76:95:da:30:
                    dc:38:05:cf:a6:7f:33:3e:ef:76:eb:dd:e7:7a:e5:
                    aa:60:49:4a:c1:d4:01:58:b5:7b:24:8a:bd:7b:1d:
                    25:d8:08:14:ed:91:47:b9:da:c7:7e:4a:15:27:90:
                    7b:08:19:aa:71:08:a8:57:b9:d2:ad:af:dd:f2:e6:
                    81:37:5f:4f:9f:44:41:5e:b8:9e:82:f3:74:a8:02:
                    cb:7b:1d:65:6c:3d:58:bd:9d:fa:69:9d:0c:11:a2:
                    df:7f:83:60:49:5d:f5:2e:e0:db:f9:63:64:d2:79:
                    63:ba:c4:54:84:cd:33:d7:92:55:b8:c5:70:98:48:
                    52:af:36:f3:f1:70:2c:5f:25:1e:c9:a5:86:f0:fd:
                    be:36:37:d1:76:24:c1:a9:29:f7:16:41:14:a0:27:
                    3c:ed:eb:02:6c:01:96:74:4a:32:2c:06:15:cc:ce:
                    e1:8d:6b:d4:01:07:86:5a:5d:c9:52:05:7e:f5:cf:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:13:D0:BC:81:C0:63:70:5A:4D:5E:A5:5D:9F:05:66:D9:F1:59:90
            X509v3 Authority Key Identifier:
                keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b9:7d:3d:d2:95:f1:cc:b4:5e:71:1f:8f:c7:21:70:4a:1f:
         b7:91:61:04:94:6d:c1:d7:4d:3c:0c:8e:a9:7c:0d:35:27:2a:
         d6:f1:5c:9a:90:56:99:08:85:14:86:a3:92:78:33:c2:2d:25:
         9e:cf:b2:20:f3:11:19:73:5a:d4:ce:41:08:d9:61:f7:d3:1c:
         d5:6f:5b:34:1f:bc:f9:79:07:d1:69:4b:8b:f1:5e:7f:ac:1b:
         a6:85:ac:a2:14:42:93:72:4b:f8:27:bd:65:02:fb:91:7c:bf:
         3a:9c:33:fa:74:76:00:05:65:d6:8b:e3:db:83:1a:e7:29:df:
         3c:5d:31:c1:ea:90:fa:83:55:ac:e1:50:ed:da:6c:6f:de:47:
         a3:7e:48:eb:3b:17:45:cc:b1:77:b1:3f:8c:67:c2:19:d1:3f:
         4b:18:21:d5:b3:63:ba:8e:2b:0f:4c:8e:b5:52:1d:95:39:20:
         44:0a:2b:31:71:e6:25:77:a0:58:2f:40:fa:ac:85:6e:47:5f:
         69:3e:93:58:60:1d:5a:0b:f1:b1:04:38:7f:33:1a:d1:b9:8d:
         2d:71:73:66:36:2f:25:fb:c4:b1:23:21:a5:32:d1:d3:d6:ca:
         5f:e5:08:4b:d3:f6:fe:46:09:8b:84:df:a4:81:56:a2:c0:3d:
         c6:cc:92:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJDVwOjGKJRvdhTqczD+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTUwZDQ2M2MzMjY2N2M2YTkyOTZjOGQyNWJiMzgzY2Y0
MTljNjEwHhcNMjQwNTE3MjAwMDI1WhcNMjQwNTE4MjAwMDI1WjAzMTEwLwYDVQQD
EyhhMDEzZDBiYzgxYzA2MzcwNWE0ZDVlYTU1ZDlmMDU2NmQ5ZjE1OTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5wbKoCJPymJR0aBeG2OtpC5g0QX
89UAMHokwnS0mBKGgHm3sFJ+0N4rVQriu9zNPCqyqgorbKLc9YFCBRyZgwRhvnOs
dnaV2jDcOAXPpn8zPu92693neuWqYElKwdQBWLV7JIq9ex0l2AgU7ZFHudrHfkoV
J5B7CBmqcQioV7nSra/d8uaBN19Pn0RBXriegvN0qALLex1lbD1YvZ36aZ0MEaLf
f4NgSV31LuDb+WNk0nljusRUhM0z15JVuMVwmEhSrzbz8XAsXyUeyaWG8P2+NjfR
diTBqSn3FkEUoCc87esCbAGWdEoyLAYVzM7hjWvUAQeGWl3JUgV+9c+zgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAT0LyBwGNwWk1epV2fBWbZ8VmQMB8GA1UdIwQY
MBaAFEIVDUY8MmZ8apKWyNJbs4PPQZxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhVTlJqd3labnhxa3BiSTBsdXpnODlCbkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wNzlmNjctNThmNy00YmQ4LWI3ZGIt
YmUyNjdlNmExNmQ4LzEvUWhVTlJqd3labnhxa3BiSTBsdXpnODlCbkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wNzlmNjctNThmNy00YmQ4LWI3ZGItYmUyNjdlNmExNmQ4
LzEvUWhVTlJqd3labnhxa3BiSTBsdXpnODlCbkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALl9PdKV
8cy0XnEfj8chcEoft5FhBJRtwddNPAyOqXwNNScq1vFcmpBWmQiFFIajkngzwi0l
ns+yIPMRGXNa1M5BCNlh99Mc1W9bNB+8+XkH0WlLi/Fef6wbpoWsohRCk3JL+Ce9
ZQL7kXy/Opwz+nR2AAVl1ovj24Ma5ynfPF0xweqQ+oNVrOFQ7dpsb95Ho35I6zsX
Rcyxd7E/jGfCGdE/Sxgh1bNjuo4rD0yOtVIdlTkgRAorMXHmJXegWC9A+qyFbkdf
aT6TWGAdWgvxsQQ4fzMa0bmNLXFzZjYvJfvEsSMhpTLR09bKX+UIS9P2/kYJi4Tf
pIFWosA9xsySqg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:59:22 2024 by rpki-client on console-fra.rpki-client.org