Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
File:                     Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft (raw, json)
Hash identifier:          4r+P5MGdpeJheupJBoBzhKNHXBoP86L8+vUCX5KeCew=
Subject key identifier:   53:C0:3B:21:DB:A1:84:22:FB:D8:74:98:B5:5C:CD:9F:27:1E:71:78
Authority key identifier: 43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
Certificate issuer:       /CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Certificate serial:       018F8749049F20ED96C10AD7AC9FEC5F0689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
Manifest number:          0EA3
Signing time:             Fri 17 May 2024 16:01:00 +0000
Manifest this update:     Fri 17 May 2024 16:01:00 +0000
Manifest next update:     Sat 18 May 2024 16:01:00 +0000
Files and hashes:         1: C1McBUoStX2C-f5AJnmtXiKXLvg.roa (hash: eBPGapOa9e7VrDtFQIb6zc0B6c0Gl9PTuWOQ6Q5hozk=)
                          2: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl (hash: WW6ShILnvO4tuIdEpiZbW9kXXYbEaGSFywGmvx3Y898=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:04:9f:20:ed:96:c1:0a:d7:ac:9f:ec:5f:06:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
        Validity
            Not Before: May 17 16:01:00 2024 GMT
            Not After : May 18 16:01:00 2024 GMT
        Subject: CN=53c03b21dba18422fbd87498b55ccd9f271e7178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:ab:57:1c:93:0e:bc:f7:47:1e:10:62:3d:
                    58:31:e3:af:f0:61:e3:e9:39:f0:d2:4b:7a:d1:a8:
                    00:df:69:1b:2a:df:5c:b7:20:7c:5d:ad:01:bf:95:
                    49:53:06:04:f3:f9:f8:a5:f0:a2:28:4c:70:3e:59:
                    6d:5b:21:21:88:f2:a9:c5:10:a6:ec:3e:d0:14:af:
                    1d:7e:80:70:57:73:cf:f9:30:9a:37:b1:09:3c:cf:
                    80:53:f3:cb:2a:b4:42:7b:fd:59:af:ba:a7:74:4f:
                    47:12:8c:0a:d0:dc:13:24:91:ec:7e:c9:68:b9:d9:
                    49:3e:1a:07:fe:02:df:a2:36:ec:e9:02:84:1c:6c:
                    40:d2:de:1f:84:5e:61:b5:7d:26:01:d6:c0:2e:df:
                    2a:c6:f3:9c:6f:61:27:32:b3:c9:e2:25:2c:60:ae:
                    69:36:e7:f9:ec:d9:fb:bd:5e:2c:ce:d4:c7:13:34:
                    99:17:e1:79:17:95:7a:7f:90:cf:eb:1b:93:3e:37:
                    05:e3:b2:96:5a:3c:c9:67:d8:5a:28:d7:1c:5a:e5:
                    4f:ac:c8:c3:03:95:fd:0f:20:a0:41:56:5e:e5:4b:
                    ff:aa:7a:e6:1f:f3:d2:00:49:40:ad:61:e7:18:7d:
                    49:5c:df:a2:32:61:c5:64:c8:03:c3:48:10:21:2a:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C0:3B:21:DB:A1:84:22:FB:D8:74:98:B5:5C:CD:9F:27:1E:71:78
            X509v3 Authority Key Identifier:
                keyid:43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:97:ea:a3:f3:f9:04:15:09:7e:77:68:75:9e:92:51:4f:7a:
         61:77:bc:dc:40:31:45:46:93:26:e4:60:48:52:f2:a4:1b:e4:
         e2:42:a7:42:2c:b0:18:e8:25:c6:32:ad:53:12:31:13:57:19:
         31:cf:8a:e3:0d:9c:d1:22:16:b4:9d:5f:a6:9f:6c:eb:23:ea:
         ad:0c:ea:12:be:a3:d3:1e:6a:2d:d4:27:38:22:65:7d:4a:b4:
         0c:d7:54:57:c3:d2:d2:ca:80:df:74:08:a9:85:57:51:ff:0f:
         a4:7e:76:eb:fb:cf:70:60:4b:84:29:39:de:56:18:45:f2:6a:
         57:b7:30:40:e4:d6:e3:e5:7f:8c:2a:9c:33:7a:6c:5f:b6:74:
         c3:34:ba:29:99:c9:e0:9f:23:8e:93:19:dc:1f:b3:70:f7:55:
         c3:39:37:0c:bd:ed:70:31:b4:63:e3:54:75:d7:24:e2:ce:0e:
         3f:1b:36:cb:60:91:62:46:08:4d:69:df:5f:f1:a9:c6:a9:f2:
         04:fa:fe:f2:91:ce:c4:30:58:cf:8c:2f:2f:c9:f8:0c:62:fd:
         c4:7c:1a:ee:3a:60:67:98:0c:09:d6:a4:40:23:66:58:ef:7f:
         17:d8:11:d7:75:fc:38:44:19:16:97:7a:9c:ba:02:88:be:51:
         d0:a3:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:10 2024 by rpki-client on console-fra.rpki-client.org