Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File:                     QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier:          Nmu25V3HNJtVLca4hVRf1TEZW1Cd4mrsChHtKI2XuVg=
Subject key identifier:   0A:89:F6:CB:AC:92:2B:94:05:13:88:3F:5F:D6:EA:B5:D4:84:9D:1B
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer:       /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial:       018F8749B77BD3ADE21B50FC33CE28513D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:01:46 +0000
Manifest this update:     Fri 17 May 2024 16:01:46 +0000
Manifest next update:     Sat 18 May 2024 16:01:46 +0000
Files and hashes:         1: 6S8g1_5jqS_TU4H2Ino-MUn-R2A.roa (hash: 9HBzOhJvgomkKH617igMzzGzUfqv/pRoFRu9EumAHu4=)
                          2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: BdIX5faqapYp8Fxul379/MpeZdzo/6Djid1nahgMnvw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b7:7b:d3:ad:e2:1b:50:fc:33:ce:28:51:3d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
        Validity
            Not Before: May 17 16:01:46 2024 GMT
            Not After : May 18 16:01:46 2024 GMT
        Subject: CN=0a89f6cbac922b940513883f5fd6eab5d4849d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:0a:3a:29:b3:ec:41:d1:23:90:50:47:96:
                    fd:f0:89:de:3a:b8:87:c0:44:eb:12:89:da:b0:b7:
                    d3:76:8e:0a:ad:d6:7f:fa:0d:b0:2f:bd:d3:04:fd:
                    65:00:46:12:13:53:0e:2e:5d:52:a7:4b:c3:54:e0:
                    a0:6f:03:91:c4:87:4c:96:db:b4:ac:35:bd:c7:b5:
                    c1:db:c3:56:4a:a1:c1:10:47:eb:f6:7c:5f:e3:1d:
                    7f:21:10:e9:18:df:e7:5a:0e:ec:0b:c5:49:bd:24:
                    b4:c1:f4:8b:79:cc:01:ac:2e:a7:18:55:b3:5e:95:
                    b5:be:6f:96:c0:bb:eb:a6:88:88:af:8f:3b:cf:7b:
                    cf:78:2a:fa:7b:3a:ad:e3:2e:2d:a5:fb:d1:be:60:
                    1f:cb:af:32:aa:36:9f:d8:61:87:c7:82:c1:9e:98:
                    ea:0f:f0:93:75:b1:b2:ce:7a:e7:15:b6:4f:59:a0:
                    71:fc:fb:a9:88:00:d2:04:d6:c9:f0:c8:4f:00:41:
                    42:ac:0b:74:ac:38:66:c7:b4:06:77:4a:4a:17:87:
                    1d:4f:26:1d:31:a9:1c:f1:6d:5c:4e:4a:82:39:37:
                    e8:b8:e5:af:3c:c0:62:4a:0b:f4:44:df:aa:9c:b1:
                    39:eb:79:c1:2a:be:75:fa:4d:f5:a5:7a:1b:5f:95:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:89:F6:CB:AC:92:2B:94:05:13:88:3F:5F:D6:EA:B5:D4:84:9D:1B
            X509v3 Authority Key Identifier:
                keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:54:bc:9d:2f:54:84:7c:a9:ed:b5:b8:9a:69:c4:01:35:fc:
         7d:1b:d6:45:ef:70:d6:05:6d:44:09:0a:4a:15:45:a3:ea:ef:
         09:e9:ba:1d:06:b6:4b:f8:45:4b:97:5d:a7:a2:0a:70:c0:35:
         9f:5a:ba:cd:a0:3d:0d:2c:f6:2c:8f:9e:7a:44:ea:7f:15:86:
         ce:17:92:22:03:13:f6:d9:77:21:02:26:38:85:3e:a6:7a:1d:
         4a:fa:6d:42:17:3e:1c:ba:24:ca:e5:3b:91:ca:d1:c3:fc:0e:
         4f:af:cd:a0:fc:61:5d:be:3c:99:58:83:4a:b9:a5:a2:17:2f:
         95:e4:f2:1c:f1:ff:86:1c:41:77:64:69:66:a8:ed:94:af:ae:
         83:21:91:b3:d4:db:04:b6:2a:26:75:ba:c2:4a:0f:2c:c5:5e:
         af:b1:d2:6e:fd:91:4e:04:9b:a7:4d:7d:e9:4c:df:91:65:66:
         bf:a9:d2:08:f3:4b:31:3a:72:63:35:c8:00:07:e3:a1:e1:65:
         21:68:80:e8:16:6c:12:4d:e8:65:18:67:6a:20:c1:8f:c7:13:
         7e:d5:43:f2:86:41:e1:07:14:f9:af:4f:29:8d:09:1a:39:f8:
         a7:7a:9f:df:15:77:c4:fa:ec:f7:96:c2:0d:b3:eb:5c:fb:5c:
         c8:25:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:41 2024 by rpki-client on console-ams.rpki-client.org