Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File:                     QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier:          oP4Tf8zRBvusF6E9oM7b49XuJl0Il/eIW3r9vcjMNRk=
Subject key identifier:   7C:51:4E:CF:5A:4B:17:16:F1:82:87:1D:2B:18:06:A4:F3:36:11:B1
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer:       /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial:       019352751CE206A503E6EC407E2777508606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number:          137C
Signing time:             Fri 22 Nov 2024 06:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:26 +0000
Files and hashes:         1: 5f6i0RCvMcf8hk-BbFNFq9_3Fsg.roa (hash: tzxCZZ4nguCPSKoTQYXaKVmTyR/NuNVBAaYpCWV5HFM=)
                          2: FqbcMzBYWZNmGqQ08xZqZVtC3Hk.roa (hash: BEDFxwczGmGSkgoi5ZLuwXylyr1LAwQ2Wvt3tn1TiBI=)
                          3: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: xzolFelDXQlmreXDC09DkXcCAq8kN/EmrZDNUi1vlHg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:1c:e2:06:a5:03:e6:ec:40:7e:27:77:50:86:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
        Validity
            Not Before: Nov 22 06:00:26 2024 GMT
            Not After : Nov 23 06:00:26 2024 GMT
        Subject: CN=7c514ecf5a4b1716f182871d2b1806a4f33611b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:e4:88:c0:35:56:1a:86:d6:8a:45:23:99:
                    ac:5f:76:f5:b5:e8:0f:88:3b:b9:0e:82:95:f5:1a:
                    8b:a7:d2:13:2c:2a:2a:01:10:b8:84:3c:26:b6:be:
                    0e:93:fc:cd:30:5b:41:c3:ce:39:cb:1e:71:f6:b8:
                    d3:9b:14:07:73:e8:2e:91:b0:8b:04:34:a6:be:f4:
                    25:12:ff:26:ec:bc:f3:a1:04:1f:2d:6f:8b:56:9f:
                    9d:ae:76:49:cd:2f:a8:64:97:a5:dd:d0:82:a5:de:
                    e7:b4:48:7b:86:16:01:18:40:80:4b:70:4f:46:be:
                    13:9d:fe:56:84:5b:e5:05:5f:0a:b8:bb:19:db:09:
                    a0:b0:84:ff:d8:2e:87:cf:4c:03:67:1c:cf:df:e6:
                    f1:5b:a7:1e:62:22:46:83:66:eb:04:22:80:4d:3a:
                    7f:27:36:21:1b:78:07:13:d2:e1:16:03:b1:9d:e2:
                    8d:f4:8e:0b:60:e5:49:8d:8f:d2:f0:be:bf:15:2d:
                    4d:0e:07:5e:4b:8a:fd:ca:5f:f2:ff:81:bf:04:db:
                    fa:03:b6:60:2d:86:63:79:43:9d:bd:24:7b:ba:04:
                    82:3f:97:98:24:06:45:bc:00:b7:3b:8a:22:c9:df:
                    d6:75:f2:fa:1c:1f:1c:01:b9:d5:b5:91:aa:70:8a:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:51:4E:CF:5A:4B:17:16:F1:82:87:1D:2B:18:06:A4:F3:36:11:B1
            X509v3 Authority Key Identifier:
                keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9a:eb:49:03:3c:1b:7f:c3:70:1a:ef:33:d6:b5:dc:04:69:
         12:b3:c6:f2:de:7c:e1:3e:08:e0:b3:33:74:10:b1:7c:3c:58:
         10:02:49:ee:bd:64:66:e1:2f:51:e1:4b:9e:ce:8e:bf:c6:41:
         41:e1:13:a5:ca:d4:f3:dd:92:36:b2:47:e8:22:eb:ed:36:5c:
         b0:1b:f9:82:ff:65:01:48:4a:f4:ac:26:8c:3d:86:82:c8:a3:
         7c:1c:db:49:72:d1:75:c6:29:31:5e:eb:45:b7:b1:73:bb:34:
         a5:6d:3c:19:05:73:66:46:60:ed:b2:66:17:12:3b:91:bb:2f:
         06:ab:e0:fa:37:b6:56:19:5e:f8:01:c5:6d:0d:dd:73:d6:15:
         9c:5e:11:42:3b:c1:0a:54:ca:a3:43:ba:1e:29:63:a9:c5:bb:
         e1:e8:64:aa:30:e5:dc:4e:0f:c0:d8:84:d6:1a:17:71:7e:06:
         9b:05:9b:40:ac:df:be:36:a1:6d:bb:9d:09:89:db:96:f0:5a:
         07:29:4c:c6:8a:26:9c:17:ab:b0:04:0a:d6:d2:a3:ce:20:91:
         e6:b7:c6:85:e4:db:72:89:fc:31:23:36:5f:80:88:3f:ed:97:
         dc:0e:58:35:bf:c6:c2:04:5d:30:bc:b5:76:59:a8:95:c8:52:
         01:ae:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:16 2024 by rpki-client on console-ams.rpki-client.org