Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File:                     QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier:          l7rE8xJCVBoWVhX3SxYqBGfrcRJjPot+T+awwL1i3oU=
Subject key identifier:   F7:5D:14:27:71:ED:12:33:79:C1:CB:9C:11:3B:FD:35:38:1E:E0:30
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer:       /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial:       018F874ACC7F457ADD599B099F0FFFF213CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:57 +0000
Manifest this update:     Fri 17 May 2024 16:02:57 +0000
Manifest next update:     Sat 18 May 2024 16:02:57 +0000
Files and hashes:         1: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: ygnsOnhbSj/cUys0yo2nOptTrZkoA9gL/F+7bPWLV6k=)
                          2: iblfuSt1iwYEJjrIfY_0cO__l6o.roa (hash: OhQpZxYHk+5ZlO3P8Vt06qMH1TxKufMfUgw6N7+eVdc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:cc:7f:45:7a:dd:59:9b:09:9f:0f:ff:f2:13:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
        Validity
            Not Before: May 17 16:02:57 2024 GMT
            Not After : May 18 16:02:57 2024 GMT
        Subject: CN=f75d142771ed123379c1cb9c113bfd35381ee030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:45:5c:34:80:76:e9:27:e2:8d:2a:1e:f4:
                    46:bb:f9:7b:b2:2b:f5:1f:1a:de:d2:17:5e:dc:68:
                    89:69:7c:57:2d:d5:dd:b2:2e:59:37:4c:bf:2b:02:
                    15:b4:46:6a:a8:3a:27:ee:31:66:eb:f8:3a:a8:e7:
                    df:31:be:56:6b:6d:c6:3c:ef:4d:34:1e:a9:4f:db:
                    23:65:9c:3a:b9:8f:3d:9e:4c:a5:c6:1e:f4:b1:a1:
                    57:0d:3f:36:8d:3d:75:02:96:42:22:7d:5b:53:1b:
                    ed:58:9c:51:28:78:56:92:67:0c:1e:2c:8b:51:7e:
                    0d:48:cf:25:ba:4b:1e:a0:78:53:c9:28:b9:2a:06:
                    e7:07:a0:58:29:a0:c0:26:59:16:11:7d:55:d7:03:
                    b4:a6:42:f5:42:b6:33:4f:0f:67:fb:33:65:12:cf:
                    ae:f7:4d:f3:8f:45:fd:22:20:e1:67:b6:35:d7:38:
                    9b:7a:ef:a2:b5:16:09:78:f5:e8:f3:bf:7e:ec:06:
                    ea:5d:d0:b2:ad:ad:9d:73:a3:70:35:d2:46:10:a8:
                    ea:c1:5d:0f:fc:73:d4:3d:85:e0:89:5d:c7:5e:4f:
                    5e:45:e5:59:8c:b0:b3:4f:05:7a:24:a3:2a:17:25:
                    12:88:b5:4b:bc:ee:32:9e:28:71:d1:6e:c9:08:8b:
                    c1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5D:14:27:71:ED:12:33:79:C1:CB:9C:11:3B:FD:35:38:1E:E0:30
            X509v3 Authority Key Identifier:
                keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:87:b0:20:2d:2d:d1:81:be:17:e6:2d:5f:56:50:cc:12:71:
         eb:6a:f0:a1:56:68:94:a2:68:a7:31:88:d7:23:6f:77:e0:44:
         c2:02:06:0c:89:f0:2f:41:f9:69:1c:24:49:44:ac:15:fc:d0:
         34:2a:8e:0b:de:3d:4e:56:08:f4:69:23:08:28:c8:f3:ae:ae:
         bd:a0:66:fc:73:9f:25:fd:5a:ec:41:a7:e2:1e:e9:41:57:2e:
         25:7a:09:0e:85:c0:57:9d:0f:c7:07:8d:fb:01:9d:4c:df:29:
         b2:52:00:8d:12:80:6e:05:5b:a7:77:f5:0d:ba:91:2c:54:68:
         d4:be:ca:e2:ed:da:2d:57:ea:a1:89:bd:5b:48:65:5a:98:58:
         2c:e0:b4:47:87:3e:07:51:47:13:6a:bd:e6:a4:bc:54:87:b3:
         75:95:fa:60:38:7b:fa:70:01:6a:ea:91:70:6f:e4:29:82:20:
         f7:ae:29:36:09:d3:44:88:a5:0d:20:7b:00:28:03:23:94:a2:
         36:ce:94:e3:63:9f:55:17:c5:61:ef:34:c7:0a:c7:88:d3:b6:
         c3:c2:c9:a7:f6:b8:3f:05:37:6b:93:be:4c:cb:99:1c:e4:f1:
         61:36:42:ed:3a:16:79:07:06:0c:e7:f3:1a:01:2d:cf:a7:fe:
         ae:97:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:39 2024 by rpki-client on console-fra.rpki-client.org