Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File:                     qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier:          hdKA+yiC3PmMJclB9Y+Sd1ehnHH9L5LtX4iEoIDujcA=
Subject key identifier:   A1:E7:3C:77:17:84:75:A0:25:B3:51:43:FC:FB:B2:F9:27:9A:65:2F
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer:       /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial:       018F88246E9E7BF5B6FD79E3C1AD1A2042B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number:          110C
Signing time:             Fri 17 May 2024 20:00:39 +0000
Manifest this update:     Fri 17 May 2024 20:00:39 +0000
Manifest next update:     Sat 18 May 2024 20:00:39 +0000
Files and hashes:         1: YhX2CrB5Nz7z7jLLa3hFvLZDdzU.roa (hash: lvInM5p7mVP/Sy0AaI8vR+7+SNoAUzSiZUOULxm36rs=)
                          2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: ByhgW6JXwJ3thjbF9oSnT+n+kRVlzODTsa0oSXQyP2Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:6e:9e:7b:f5:b6:fd:79:e3:c1:ad:1a:20:42:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
        Validity
            Not Before: May 17 20:00:39 2024 GMT
            Not After : May 18 20:00:39 2024 GMT
        Subject: CN=a1e73c77178475a025b35143fcfbb2f9279a652f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:0b:25:15:75:ce:b8:66:20:ed:04:40:b3:
                    be:ad:ed:14:94:00:ed:85:29:05:1d:ae:2b:fa:15:
                    3a:fb:bb:47:45:53:5f:df:34:53:fe:b6:aa:71:5e:
                    6b:fa:12:68:ff:4a:31:f7:e5:48:34:06:49:41:23:
                    2d:b9:18:1e:4b:94:a7:6f:fd:d4:04:d6:3d:0c:f1:
                    6a:e1:55:24:39:61:b1:0c:71:a3:73:cb:36:7a:f8:
                    13:da:68:e9:13:12:33:49:13:0d:45:99:f0:9d:15:
                    17:f8:e3:3c:4e:c8:d3:f2:ac:aa:1a:2d:1d:84:ed:
                    3c:dd:45:77:b9:fd:a6:16:f6:f3:76:51:fb:2b:47:
                    f2:b0:d3:65:6f:5c:93:d6:33:4b:a7:df:d8:56:c9:
                    d1:8c:e4:a7:02:1d:45:de:8b:bf:e1:41:b9:d2:b4:
                    a6:09:6e:4f:33:60:85:b9:db:9f:cf:24:9b:36:c9:
                    ac:35:dc:e0:b0:9c:57:0c:84:06:b7:9a:a6:75:8a:
                    3f:4f:14:06:cb:56:71:f2:0a:2b:ed:78:41:8b:3a:
                    38:1a:ce:1e:1a:3a:2d:b6:77:c1:9a:84:bc:96:46:
                    01:60:83:26:72:ed:98:62:5c:e7:12:0b:16:d8:3a:
                    e2:8c:3d:be:cd:39:5b:c1:b7:40:98:ba:cc:f3:b6:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E7:3C:77:17:84:75:A0:25:B3:51:43:FC:FB:B2:F9:27:9A:65:2F
            X509v3 Authority Key Identifier:
                keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:83:b9:3a:79:20:fd:73:f3:67:76:a8:f3:0b:b8:db:d5:84:
         e8:fe:01:39:82:48:67:01:70:92:7a:e1:c3:b1:a8:94:b5:39:
         a8:0b:6d:10:80:67:8a:30:aa:76:f5:e0:e2:71:fd:60:5a:83:
         11:1d:a8:27:3d:10:34:7b:f8:1d:e3:27:be:98:6c:c5:85:f4:
         d5:21:97:e1:ea:7f:de:29:f6:f5:08:07:94:38:1a:13:f5:ea:
         b3:c0:0b:29:25:d3:e4:01:c1:b5:2d:be:ea:ab:2c:92:a3:81:
         d0:57:e6:aa:2b:c7:66:c8:7e:d5:27:99:3f:8f:92:c9:83:09:
         a1:d4:fd:6d:ba:22:a6:13:da:b7:38:45:e3:03:b0:03:fb:06:
         4b:72:41:e6:0c:28:7b:a3:3b:67:be:8a:bf:f4:f3:1f:0c:b0:
         d4:a3:ce:32:fd:dd:10:01:18:cd:9b:7b:41:1c:d6:3f:45:ae:
         cb:28:92:98:4e:f0:a7:65:8c:12:51:7a:12:27:aa:97:75:6a:
         4e:15:8f:db:90:28:62:5b:e2:2f:2c:88:21:68:cb:8e:10:50:
         f5:bc:67:11:92:bc:67:b5:5b:88:4b:fd:c2:88:36:f1:62:05:
         17:a3:53:cd:2c:39:d3:e4:5c:c7:d9:7d:d9:eb:39:72:d0:af:
         11:e4:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:11 2024 by rpki-client on console-ams.rpki-client.org