Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File:                     qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier:          IGFmRLj89nisB7jLdTgUi+/+c/ypCdLLf+PB/+Y5N+c=
Subject key identifier:   89:07:FB:F0:17:E5:1A:8E:D5:51:35:69:28:B5:6E:F2:4D:7C:14:7C
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer:       /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial:       0193568A062B172C0A25766B06510E7E40A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number:          094D
Signing time:             Sat 23 Nov 2024 01:01:46 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:46 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:46 +0000
Files and hashes:         1: Ql_-ljmC8zAbttHPRY_6ljyXr4Y.roa (hash: Yznp7kUQrS0X/vB3Y0V7vhomhnf4boFVPdj9oT7gYBY=)
                          2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: K7roj5BVn7hfTUpwqx7hp6b2C50of+pT1osYDr/CURk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:06:2b:17:2c:0a:25:76:6b:06:51:0e:7e:40:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
        Validity
            Not Before: Nov 23 01:01:46 2024 GMT
            Not After : Nov 24 01:01:46 2024 GMT
        Subject: CN=8907fbf017e51a8ed551356928b56ef24d7c147c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:7d:96:e5:39:70:08:c2:77:48:24:e0:7e:
                    0c:c6:53:3c:a8:5f:c3:ac:1a:3b:0f:b5:37:95:3f:
                    98:55:dc:56:72:ec:df:32:ef:4a:e2:14:dd:1a:ee:
                    94:5c:7d:74:60:75:a3:33:fe:26:cc:6e:23:9c:2d:
                    c8:16:27:c8:c2:f3:ed:2c:b8:bb:25:7b:d2:4d:14:
                    88:ff:17:4b:df:f5:b5:d7:6b:f5:4a:80:a1:ab:21:
                    af:8a:a9:eb:33:aa:39:7d:cc:8f:f9:0e:45:b4:c0:
                    ce:57:c5:cf:4e:0d:32:ef:36:c3:a7:fa:d4:96:c5:
                    77:85:e3:43:01:1e:36:3a:bb:ec:98:37:20:2e:cb:
                    f3:67:fc:d6:6a:44:b0:1a:8a:2f:31:50:63:8b:26:
                    f3:a9:1e:fc:bf:43:2c:ed:2d:af:4e:93:33:3b:13:
                    85:8d:8b:13:31:e9:a7:4d:f7:e6:75:c6:c4:6d:e1:
                    c1:3e:54:04:29:cc:aa:56:3b:45:1b:6f:25:70:31:
                    d0:42:7f:3f:18:ee:3f:90:b0:69:c9:6b:74:b9:a3:
                    15:7a:cb:40:1f:45:c0:ef:d8:c8:c9:fb:4a:b7:07:
                    b1:84:65:9d:92:c4:ec:2e:56:ae:92:e6:52:db:13:
                    ef:70:ca:82:5e:7f:d2:5f:9e:5a:5a:55:57:b2:5a:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:07:FB:F0:17:E5:1A:8E:D5:51:35:69:28:B5:6E:F2:4D:7C:14:7C
            X509v3 Authority Key Identifier:
                keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e7:70:28:2c:4a:58:ae:7a:c5:32:91:5f:15:2e:4d:e4:fe:
         e8:53:0b:f0:2a:8e:5c:4e:c3:f6:2a:c8:ca:a1:d3:70:73:32:
         96:63:02:fa:6e:70:c7:dc:5b:26:54:60:f1:ec:6a:01:46:94:
         28:07:08:9e:27:02:a8:8f:0b:e7:f5:15:2b:49:81:07:cf:6b:
         a7:7c:20:b1:c8:34:39:05:97:bc:72:38:be:1a:d8:77:8c:eb:
         b4:c0:59:6a:79:61:2b:0e:f0:c5:88:30:dd:62:c6:c7:c2:04:
         be:ac:cd:50:88:23:de:4c:32:90:7f:4c:ad:0a:5a:26:e4:27:
         aa:3c:7b:36:12:ad:73:40:0a:da:20:cb:7a:01:46:5f:07:7c:
         97:a8:ff:f6:8a:04:70:72:54:a5:72:e8:15:e1:85:2b:58:94:
         a9:93:e6:b3:0a:18:4d:f7:0e:74:3a:5e:5d:3b:6b:ba:07:cf:
         5a:5a:9a:71:ac:1b:fb:ff:a5:70:af:50:5b:bd:b8:53:3b:ba:
         a7:87:84:53:b2:20:65:04:ce:7c:ba:18:d5:8b:45:2a:da:4c:
         16:4d:c8:94:45:4d:bd:b4:75:55:4f:40:d1:35:f6:54:83:91:
         ca:36:b1:e4:7d:b1:92:65:6e:3a:a2:29:d5:d8:95:d6:00:19:
         66:bb:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:35 2024 by rpki-client on console-ams.rpki-client.org