Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File:                     qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier:          qGcwaEW8/q3a5RX/TNDfS2C+ZVBexxcUnlseAjM4lIY=
Subject key identifier:   EB:B4:67:73:6F:B1:E9:58:9C:E7:8E:4F:4F:37:AE:12:3C:6F:07:77
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer:       /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial:       018F8748AD4BA5F2A03670DFFB844F3DCB37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:00:37 +0000
Manifest this update:     Fri 17 May 2024 16:00:37 +0000
Manifest next update:     Sat 18 May 2024 16:00:37 +0000
Files and hashes:         1: Lc0LaNsLJyd7pSn0vAVSo3IEhKE.roa (hash: v66aSHQl9HUdvmWktRDTwv2SudqsGJRUwDYLSL3Mqac=)
                          2: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: iNjGeWWMI8lvEpT4021WVmRngiUZhg+JkZ8C+qOx0L8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ad:4b:a5:f2:a0:36:70:df:fb:84:4f:3d:cb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
        Validity
            Not Before: May 17 16:00:37 2024 GMT
            Not After : May 18 16:00:37 2024 GMT
        Subject: CN=ebb467736fb1e9589ce78e4f4f37ae123c6f0777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:3f:8b:9d:d2:ed:7c:a6:1e:a4:b4:a5:2b:
                    ad:33:89:07:a6:e5:9d:a2:69:76:fe:e1:20:14:17:
                    16:f4:45:40:0f:ca:04:20:0f:0d:60:74:1b:6a:10:
                    cd:ce:28:79:91:e2:b4:f8:29:57:ee:64:d8:c7:62:
                    d7:b0:a6:3b:c2:8a:cd:27:65:73:cd:9c:16:e9:59:
                    65:18:c9:38:49:a4:1e:8f:2e:4d:b7:3f:1b:d3:b2:
                    1c:90:0c:00:f7:5b:75:e8:51:c0:52:2d:f2:9c:11:
                    32:8e:5a:85:85:3a:bb:7b:c3:b4:b3:e5:82:e4:b7:
                    ae:f2:6c:c7:49:1c:bb:84:cc:93:a7:9a:21:63:ad:
                    a9:d1:01:30:48:93:2a:11:c9:f9:07:6a:2b:1f:94:
                    fa:89:86:ec:34:13:90:f5:a5:87:45:ca:3e:61:41:
                    27:6e:8e:f3:3b:9a:26:ce:56:c9:a3:f9:2f:95:c9:
                    78:15:60:93:54:d8:9b:18:fe:7f:bf:7c:74:26:ce:
                    e7:15:39:a8:99:9f:4d:d4:e6:b7:b5:94:84:04:07:
                    95:3a:1e:93:8d:c2:ef:cb:48:c6:0b:3d:e0:3d:13:
                    94:3c:3e:91:fc:4f:99:2a:f7:cf:41:f7:ce:e5:c5:
                    cb:f6:21:1b:09:ca:25:ba:a0:d1:bf:99:51:f9:a4:
                    37:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B4:67:73:6F:B1:E9:58:9C:E7:8E:4F:4F:37:AE:12:3C:6F:07:77
            X509v3 Authority Key Identifier:
                keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:32:a2:06:2c:a9:e0:15:90:c4:0e:7e:51:8e:f6:d6:96:7c:
         a2:93:a4:4c:ff:3c:8f:cd:7f:f0:2b:32:62:80:57:2e:4f:c9:
         84:08:e8:e7:cb:5f:5a:fc:6a:e0:3f:54:49:91:b9:8d:0f:23:
         57:a8:c1:5b:76:b1:16:81:f6:c8:00:d9:a9:8c:87:fb:57:b8:
         0e:a5:4b:14:95:03:30:a9:14:48:87:c6:71:ec:74:a1:10:fa:
         cc:89:ec:4f:e4:24:1f:fe:8d:32:19:a6:6e:9c:64:fe:dd:ba:
         34:e8:87:e1:d1:4b:fa:e3:55:31:ab:df:86:a2:fa:06:ff:0e:
         64:bc:e7:53:74:cf:0c:69:89:7a:e4:28:25:96:fe:fd:51:a6:
         b6:6f:9d:ee:d4:7d:7c:d6:30:e1:05:0f:c0:df:c9:7b:07:18:
         aa:01:4e:10:5d:da:79:6d:e0:ba:c0:2e:57:f9:0a:06:6a:23:
         b6:a6:5b:77:a1:6e:2b:5f:80:de:18:27:58:de:25:d6:f9:2a:
         ff:b5:ad:6a:bb:69:94:08:4d:78:48:83:b1:5c:82:49:36:a7:
         72:51:c7:55:f0:cc:a8:3f:41:91:1a:f5:a7:c6:28:15:7e:28:
         cb:f0:c6:29:e7:97:ba:41:26:f2:b1:d0:45:18:23:ed:be:82:
         64:e6:ab:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:57:40 2024 by rpki-client on console-ams.rpki-client.org