Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File:                     q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier:          zjLiltyw8rQjPmSIM21NA5wC8pg5E0IVGniR/JEfWXE=
Subject key identifier:   08:0D:2D:49:03:CC:8D:E6:3C:7A:08:D8:AB:B2:AF:05:C5:58:2E:16
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer:       /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial:       019355AD7A0ACCEBC1489A6338F2F736771B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number:          137B
Signing time:             Fri 22 Nov 2024 21:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:52 +0000
Files and hashes:         1: YV88VvN7c0ZPqThFhXysYkvYcuI.roa (hash: 057VOgnDcfz1hYayJOQssT6CWdBcmeewIOxFR3Ik33g=)
                          2: pwdllQWHjcQt7IU8Lq3dm3J93Q4.roa (hash: 4IlfVh3e/0yfD3hbSXJxk8hX9ErfK/p6acPqi/G57Ek=)
                          3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: 09AzU/STN0ulLjJTc1pB6vuc386A6UU0oT2Me7xCRN8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:7a:0a:cc:eb:c1:48:9a:63:38:f2:f7:36:77:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
        Validity
            Not Before: Nov 22 21:00:52 2024 GMT
            Not After : Nov 23 21:00:52 2024 GMT
        Subject: CN=080d2d4903cc8de63c7a08d8abb2af05c5582e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:c4:a4:39:fa:85:be:c6:5e:ce:22:a4:f0:
                    e2:07:e2:3c:85:12:da:a7:ee:99:07:1e:59:05:4b:
                    6b:fb:ac:3f:28:73:08:48:8a:0f:97:10:71:d7:14:
                    ce:00:85:34:4e:03:04:df:56:54:b1:3d:49:ef:0a:
                    c3:e1:f1:08:4d:5b:a7:93:f5:5f:3f:ca:97:1d:37:
                    8b:f3:66:b5:63:3b:c3:fd:fa:59:c0:ac:4c:a6:57:
                    d1:91:e6:0e:ad:46:79:a2:11:6c:86:9a:8c:54:ea:
                    47:b2:62:37:1c:7d:73:61:be:7d:dc:fb:1c:2c:2f:
                    69:47:d6:64:f3:bc:ed:9c:89:86:37:86:51:41:92:
                    7a:a8:3b:a7:8f:db:86:6f:cd:db:db:ea:fd:a9:fe:
                    e2:42:f3:c5:0b:20:7b:ae:0e:8d:ec:68:a4:71:9d:
                    23:3e:0c:b9:e5:d0:5e:27:ec:65:2d:c0:84:7f:e1:
                    ed:bd:3c:0c:e8:2a:bc:0d:84:92:51:05:a5:d8:1b:
                    5a:ac:25:ac:16:7a:29:1d:83:18:6f:53:46:a2:18:
                    d1:91:39:92:2d:6f:15:38:71:10:1d:31:dc:c5:5f:
                    e3:e7:da:d0:8e:4e:a8:e5:41:75:a2:ea:b7:67:6d:
                    16:92:55:b4:2a:68:ba:a5:40:77:b7:5d:e5:bf:af:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0D:2D:49:03:CC:8D:E6:3C:7A:08:D8:AB:B2:AF:05:C5:58:2E:16
            X509v3 Authority Key Identifier:
                keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:dd:a6:aa:9c:11:c9:df:3a:5e:4c:fd:f5:96:bc:ad:17:72:
         e5:ec:51:ff:fc:6a:b1:1a:6f:99:60:5d:f2:d7:62:14:66:d7:
         81:52:77:f2:f0:1f:51:fe:32:83:93:7f:35:46:d6:b2:51:ea:
         99:87:e9:aa:77:69:54:3d:b7:54:e3:43:81:e5:73:93:72:de:
         43:81:e0:0f:4c:a2:ae:93:b3:a4:67:59:f6:95:5f:91:ed:2e:
         85:a4:e0:6c:9e:60:57:47:18:ec:86:6b:14:19:22:e2:56:ae:
         67:77:17:34:0a:ca:3f:53:28:11:83:d1:3f:e7:cf:55:fa:d2:
         5b:f4:ad:fd:70:6c:14:1d:3e:64:50:17:b1:25:c8:be:b5:d8:
         55:b6:7d:a7:c1:e4:00:98:72:2b:3e:b3:58:ee:cf:8e:fa:0f:
         92:30:c1:71:91:60:18:94:57:b5:ac:6e:c0:46:1f:68:7c:d7:
         81:56:59:3e:35:44:d0:3d:4b:53:e9:31:28:17:6c:d9:40:34:
         9b:da:60:1d:b4:8c:ec:ce:8d:4e:14:a7:8c:33:fe:02:da:17:
         41:c7:25:ae:fb:11:2c:69:5d:7c:30:ab:89:da:c3:79:e8:02:
         f1:26:76:d9:a8:8a:39:c7:13:6f:b5:49:86:1a:95:e6:84:6d:
         79:4b:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:29:20 2024 by rpki-client on console-ams.rpki-client.org