Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          H7RUtWcDJ1C6D2/6J+OeYN3UtyS6BWQeUsnhdY6y14Y=
Subject key identifier:   9E:A4:55:12:37:C4:10:58:D7:A8:BF:04:18:F6:16:79:96:A2:37:10
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       018F874AB93351A8978B092B56B4F9904E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          0560
Signing time:             Fri 17 May 2024 16:02:52 +0000
Manifest this update:     Fri 17 May 2024 16:02:52 +0000
Manifest next update:     Sat 18 May 2024 16:02:52 +0000
Files and hashes:         1: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: 2O9abhLQntz3/D1xst9SBVJM8B7PPK+widusU4BNYzA=)
                          2: nrEZ70NKdba_Z739H3IX4760ZEo.roa (hash: EfT5Xe+/Y9eYb4JRUxMcfn6g8ArS0r9u+1Pxe60KFHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b9:33:51:a8:97:8b:09:2b:56:b4:f9:90:4e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: May 17 16:02:52 2024 GMT
            Not After : May 18 16:02:52 2024 GMT
        Subject: CN=9ea4551237c41058d7a8bf0418f6167996a23710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:96:4f:ac:62:f6:89:a5:5f:91:ea:7a:ac:
                    a6:72:3c:8a:c0:89:28:ea:1e:b7:f0:8c:9b:2a:aa:
                    54:84:9d:e2:79:b8:1a:6a:9d:7b:8d:be:99:6b:90:
                    38:f1:7a:a8:c0:08:cb:f7:6d:2c:61:24:8a:d8:dd:
                    9b:69:ac:6d:34:66:b7:3b:0c:66:ae:2b:b6:c9:18:
                    a7:79:38:86:4f:c8:a6:43:54:6a:d5:42:c5:0a:f6:
                    3b:b7:05:b4:fc:a2:d4:90:59:26:46:99:ad:c7:97:
                    2b:87:20:0f:ed:62:58:cc:c1:45:cb:30:fd:85:44:
                    06:1a:81:5f:ba:15:0c:00:4c:f4:b3:68:68:7a:f7:
                    9e:e2:7c:bf:e7:d2:1a:af:83:de:4f:18:86:de:54:
                    58:27:98:40:a3:23:5e:7b:13:3b:38:9f:16:07:15:
                    ad:50:c1:46:fb:99:00:6d:50:29:40:4a:83:40:30:
                    65:f9:da:77:56:1b:18:d7:de:d8:93:b4:b9:75:e2:
                    41:77:2e:a3:5e:d9:01:58:2d:7a:e1:bd:41:f9:48:
                    7d:9a:e1:98:6f:d0:6c:16:f1:ae:af:d0:76:84:82:
                    1a:f4:f5:ac:6a:c4:f0:ac:10:d6:ba:29:c7:26:45:
                    25:8d:87:21:04:4e:98:ee:3c:81:04:e9:75:65:3a:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A4:55:12:37:C4:10:58:D7:A8:BF:04:18:F6:16:79:96:A2:37:10
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:28:a5:08:18:32:b8:62:ad:ce:74:a4:1d:a5:46:d7:bb:
         e1:98:53:b9:81:a7:cf:67:26:a9:20:82:e0:f6:aa:4a:c2:e0:
         d5:9e:91:15:c7:bc:0b:06:a1:08:2b:03:37:55:98:75:9f:dd:
         ff:c4:74:b9:c3:35:cd:0b:0b:be:b7:14:48:0f:ec:d0:7c:f1:
         28:c5:14:38:a9:52:9c:15:ea:f1:eb:90:61:83:1f:05:6c:15:
         7c:12:d2:18:c2:f8:b8:d1:af:92:f0:bd:2f:1e:61:78:57:14:
         c2:5d:57:19:bb:33:5c:ab:37:1f:a2:e4:f4:09:1b:96:f5:70:
         2e:e3:4d:5a:51:bf:3e:d7:28:77:17:71:67:73:f2:59:90:95:
         0a:0e:3c:49:f9:45:ec:76:a9:79:ef:d8:95:ec:05:ae:53:a2:
         d9:5f:16:3a:43:c0:5f:49:33:8e:d6:bd:e6:2d:fb:06:55:ab:
         a3:61:fa:82:99:b0:51:cb:30:b2:18:4b:de:36:96:f0:37:b2:
         e7:e2:c9:b2:38:99:c4:ce:19:06:83:f9:23:3f:91:43:1a:ed:
         8f:cb:3e:c0:2d:6f:7a:6a:a3:c1:f2:79:4d:a1:32:ca:1a:4c:
         e4:82:69:e5:ea:0a:0e:3c:96:c1:47:bf:07:e7:ad:ed:6a:47:
         1c:cc:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:06 2024 by rpki-client on console-ams.rpki-client.org