Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
File:                     QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft (raw, json)
Hash identifier:          Cvxm1/Gf3qHVWKOU3LcP+5Ad+fVZHGL+yF+bUd0HAxU=
Subject key identifier:   A7:E4:31:D7:05:14:19:C8:3A:BD:5E:C7:7D:01:34:74:A0:24:2D:12
Authority key identifier: 40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A
Certificate issuer:       /CN=40aa949d31c66888cb4758f23dd5f312141dec4a
Certificate serial:       018F882462D8AF058B13E8E93103E0E15EE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
Manifest number:          0899
Signing time:             Fri 17 May 2024 20:00:36 +0000
Manifest this update:     Fri 17 May 2024 20:00:36 +0000
Manifest next update:     Sat 18 May 2024 20:00:36 +0000
Files and hashes:         1: 1ZhmspxQ0hCYHC-2RehzS7MzsqU.roa (hash: G+YHEZuj9RASSJqo4txIOYmHL/REh7P0wux/XyKrVQg=)
                          2: QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl (hash: nC0EoBwa+nbw/elx9Qek5ZBHt5QED3HcJ6ERgwK9WsM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:62:d8:af:05:8b:13:e8:e9:31:03:e0:e1:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40aa949d31c66888cb4758f23dd5f312141dec4a
        Validity
            Not Before: May 17 20:00:36 2024 GMT
            Not After : May 18 20:00:36 2024 GMT
        Subject: CN=a7e431d7051419c83abd5ec77d013474a0242d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:3c:4b:43:06:b0:05:d8:5e:b6:4f:39:01:
                    66:7d:c1:1e:96:c4:10:98:04:09:b4:f0:e0:34:18:
                    e7:64:2c:2c:ab:ae:b1:39:ed:b7:b6:d1:0b:21:12:
                    fd:0d:09:84:40:97:3e:f2:c5:01:cf:a4:4d:47:1d:
                    92:95:4e:4e:4a:b8:69:e6:f5:f0:c2:06:3e:d1:14:
                    ea:4d:d9:17:a4:95:49:60:61:64:df:84:db:cd:ba:
                    33:14:6d:00:96:e2:b9:7c:0f:ee:fd:bb:c6:ac:ee:
                    b9:c9:4f:f4:5c:b1:c0:99:33:fc:61:6c:d7:e9:cb:
                    6f:b7:b6:58:54:b8:57:c1:a2:00:7f:db:fd:cc:ef:
                    60:e9:b8:db:14:f4:1c:66:2e:72:92:5a:33:eb:70:
                    1c:81:f5:d7:e9:b5:e7:0b:64:c3:97:b5:79:d3:3e:
                    eb:4c:53:6c:f0:17:06:24:19:99:be:e5:96:ef:9a:
                    4b:f2:a1:ea:21:d7:6b:f8:13:5b:a1:13:63:4e:6b:
                    7d:6d:c8:05:6a:31:de:fd:f8:0b:51:73:ff:31:cd:
                    b2:46:89:82:79:d4:a9:93:ce:7c:e2:6a:0e:5a:a2:
                    3c:2d:e9:0b:2c:c7:25:ca:f8:33:25:90:ec:7a:48:
                    6f:cf:fa:07:f8:d2:c5:53:9d:56:2b:10:1a:4b:24:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E4:31:D7:05:14:19:C8:3A:BD:5E:C7:7D:01:34:74:A0:24:2D:12
            X509v3 Authority Key Identifier:
                keyid:40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:00:cd:b4:0e:ae:dc:ca:ef:fb:6d:81:a8:7f:f2:93:fa:f2:
         1a:bb:59:a2:03:de:b4:93:e5:2e:df:3f:67:56:00:e4:6a:55:
         0a:17:67:45:2d:a4:da:65:f3:42:0e:ee:8c:47:64:d0:fc:5e:
         a8:3d:8f:53:cb:b6:2d:45:f7:d9:e5:83:4a:66:8d:84:4f:15:
         31:85:3b:e4:79:a4:bd:1e:94:83:86:1b:06:e5:59:71:89:0a:
         2a:83:d7:ba:eb:90:44:2d:d9:a4:5c:ca:e2:57:5a:28:5a:e4:
         a8:2b:77:fd:c8:f3:c3:21:b7:92:ac:c9:69:32:b0:c5:d7:df:
         40:1d:82:64:23:c2:0b:fe:fd:ad:d0:a0:bb:f5:60:8e:d7:98:
         5a:d3:b6:b8:06:87:90:e3:c2:6d:b4:10:dd:64:06:2c:de:48:
         a6:c1:ba:79:df:fa:29:e7:ab:82:74:00:2d:51:4e:ba:5d:e8:
         56:15:5c:ca:7b:df:61:34:70:57:65:3b:81:a6:33:2f:a1:32:
         5c:d7:18:1d:4c:33:e0:45:41:3b:22:1a:41:52:18:55:fc:0a:
         83:19:d0:8e:0c:1b:cd:c6:00:07:f9:14:13:6f:04:ed:cc:ec:
         91:58:c7:75:45:6b:75:97:5f:23:0e:35:40:96:67:67:63:59:
         fc:bc:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:59:24 2024 by rpki-client on console-fra.rpki-client.org