Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File:                     QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier:          3+eHT+q0VKFx06hP/WKSWZH+6YSEXktP8LeI59LGn3k=
Subject key identifier:   CD:48:F1:44:67:CE:58:63:B8:07:76:B8:8E:9A:5F:27:6A:22:9E:86
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer:       /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial:       019356896118EBD6886179117C7ED5845585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:01:04 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:04 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:04 +0000
Files and hashes:         1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: sB4CxQV7MseUtVEO8D0tcHjMFQrZKP8X74uq/Ohk3b0=)
                          2: yw_4sZfVVcGsg0c8xQlqbkWiv3w.roa (hash: qVoeVM5J72PxStltyQTSJrKUEbqG6dAAfjOoeKlsdjY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:61:18:eb:d6:88:61:79:11:7c:7e:d5:84:55:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
        Validity
            Not Before: Nov 23 01:01:04 2024 GMT
            Not After : Nov 24 01:01:04 2024 GMT
        Subject: CN=cd48f14467ce5863b80776b88e9a5f276a229e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:b4:6a:4d:06:51:9b:85:34:4f:c3:0c:59:
                    11:86:ba:4d:a6:a0:e4:3d:75:98:86:07:44:a6:d6:
                    9f:10:04:7a:50:47:3c:5a:04:5f:c2:17:aa:1b:4c:
                    35:48:c1:0d:df:18:8d:61:cd:8f:b6:e5:0e:3a:f7:
                    c7:b7:35:ca:f5:0f:03:b8:b6:e6:b9:8d:fa:a7:19:
                    ba:48:e2:b5:f5:3f:52:eb:fd:16:71:2a:58:61:b2:
                    25:a2:3b:34:ca:5c:9d:f7:9e:7a:6e:de:7b:ed:7f:
                    13:7b:66:f5:de:a0:92:86:b0:39:2c:2d:24:5a:f4:
                    87:bd:a4:c9:7c:a7:57:32:58:b8:1e:bb:f6:4d:3a:
                    9b:bc:e9:ea:ac:ed:0a:a3:37:58:9d:5c:a3:1f:2f:
                    dc:1c:8c:d6:00:37:28:e3:48:91:a1:14:87:29:3c:
                    46:2e:31:04:65:a0:c3:11:ff:69:91:76:b9:90:36:
                    a1:e3:27:6e:b6:ae:54:a0:b1:ee:71:53:65:44:d2:
                    7d:55:ba:ee:e1:34:15:8f:29:3d:d5:1b:b1:8b:9b:
                    b1:8e:bd:8f:4c:e4:66:46:6a:e9:c2:36:86:8d:98:
                    25:55:45:eb:12:f9:4b:00:bc:4d:f4:6b:d9:2d:29:
                    ce:7d:25:4b:94:b2:b9:01:db:d6:60:a4:c5:89:4f:
                    93:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:48:F1:44:67:CE:58:63:B8:07:76:B8:8E:9A:5F:27:6A:22:9E:86
            X509v3 Authority Key Identifier:
                keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:12:4c:f3:d5:a0:bd:26:5b:fa:bd:29:63:30:f6:7e:2b:
         eb:46:a6:ec:ce:ad:e0:a0:dd:ee:83:4b:42:b4:fc:c0:5d:28:
         1b:6b:7b:01:ed:8d:ee:72:d5:ae:22:e0:27:f6:f2:e4:06:b4:
         ca:ca:89:e0:02:eb:3d:bb:1c:44:bf:75:06:ea:4a:fa:05:34:
         5b:b9:d1:e9:2d:e7:0f:3b:a6:c8:68:ed:ab:a9:17:03:37:20:
         c8:ad:68:10:44:9b:e1:a0:f6:aa:41:e3:e0:a5:29:ad:43:26:
         c0:41:af:73:0f:26:77:94:78:16:56:55:8c:19:c8:5c:fc:39:
         84:ca:47:25:59:5a:50:28:6d:65:58:a5:eb:18:0c:e2:ab:78:
         1e:00:0a:0e:94:a9:9c:a9:02:c2:34:20:7e:ec:93:dc:29:18:
         08:65:f7:05:54:66:e5:1d:58:88:d5:ac:76:73:6c:8c:2e:69:
         23:7b:c6:ce:1f:58:1e:61:0a:c4:56:1e:e2:61:c5:ea:f7:3f:
         42:b1:05:5d:8a:6f:7d:22:70:ba:db:18:03:db:72:41:2a:57:
         77:63:b7:42:61:04:b7:06:28:f4:05:3a:0a:81:15:03:e6:49:
         7a:33:0a:94:90:51:68:22:ff:ca:f1:92:b0:b8:06:0d:cb:4f:
         2d:e5:b4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:56 2024 by rpki-client on console-ams.rpki-client.org