Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File:                     qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier:          BFqYn3wUUZcKo7NLCeANuQJ7gy40urxLj9EDc1imJgU=
Subject key identifier:   C0:C4:53:3E:4D:E5:B6:BC:7E:B7:E5:AE:1F:25:06:40:75:1C:D6:A0
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer:       /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial:       018F882407FE9B38FF8CFE164F46BABD2773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:13 +0000
Manifest this update:     Fri 17 May 2024 20:00:13 +0000
Manifest next update:     Sat 18 May 2024 20:00:13 +0000
Files and hashes:         1: 6qQ3IStxm87jE8bCMDlCUF4KBRY.roa (hash: sYQNNf9sRQ2gKmZTiuUaNyBqO4ZTPPJidtlH0sPrfL4=)
                          2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: bqGSjY8sT6CDvikp9WiA5GtwzGElaUyrLW349QibmyQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:07:fe:9b:38:ff:8c:fe:16:4f:46:ba:bd:27:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
        Validity
            Not Before: May 17 20:00:13 2024 GMT
            Not After : May 18 20:00:13 2024 GMT
        Subject: CN=c0c4533e4de5b6bc7eb7e5ae1f250640751cd6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:c6:fc:20:45:fa:27:77:e5:19:ec:5f:75:
                    f4:e6:2c:ec:31:4e:1f:2d:ce:74:4f:ab:f5:f4:3c:
                    bc:25:ec:ec:f5:e6:ef:cf:86:28:8e:11:e5:58:0f:
                    64:19:c1:6e:db:d1:7b:da:87:04:6e:78:9f:ff:dc:
                    17:84:27:bf:f8:1c:2e:d9:5b:91:c0:b2:dd:0d:d7:
                    54:05:d3:b7:39:42:f6:86:fa:d0:81:41:2e:a5:a2:
                    98:29:eb:11:31:31:54:81:ce:3b:c4:ab:f4:92:dc:
                    2a:27:b3:ee:9f:5d:d8:de:90:e9:f7:1b:03:66:15:
                    09:8b:a8:5f:77:3c:fa:66:b9:e6:db:67:f0:5e:13:
                    f3:47:5d:64:9a:20:0f:a0:4b:e8:f7:85:87:e0:1f:
                    ec:08:97:99:15:28:6f:15:a2:99:f8:9d:6e:94:19:
                    e0:df:61:a6:e5:ff:4f:1c:4a:5e:4d:5e:c0:d9:11:
                    e9:d4:5d:ec:55:eb:cd:17:ba:49:04:97:7e:68:77:
                    6f:be:8c:f3:9e:5a:b6:70:67:38:7b:eb:1e:4f:db:
                    21:85:88:b6:cb:51:21:9e:60:59:02:49:5c:ba:a4:
                    7b:85:14:ba:40:12:d7:f7:ac:7f:e5:14:e3:a6:8f:
                    7d:84:b2:08:af:dd:21:3c:85:20:3a:de:eb:fd:35:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C4:53:3E:4D:E5:B6:BC:7E:B7:E5:AE:1F:25:06:40:75:1C:D6:A0
            X509v3 Authority Key Identifier:
                keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f3:77:35:07:26:d6:39:d2:51:23:24:ef:ba:c1:c5:20:53:
         3b:3e:57:4c:18:29:c4:93:f5:a2:ab:d0:88:cd:a4:26:8a:a6:
         21:3d:2d:bd:84:eb:8d:2d:1d:88:29:02:86:35:03:56:cf:a6:
         6f:d3:24:77:3c:9f:3b:96:24:a7:92:22:9d:0b:68:96:fe:5e:
         29:96:d9:f0:5b:a9:e3:79:7a:a5:d7:34:24:6e:79:e7:0e:51:
         f4:58:fe:4c:e8:7a:27:b3:f1:e2:76:9e:09:86:da:bb:7d:cd:
         b7:fb:f7:65:7b:d7:74:92:da:6a:ac:af:b7:aa:1c:43:21:ce:
         33:01:f2:d8:b4:a4:13:4e:e7:87:e8:92:45:a2:4b:73:92:d2:
         25:0f:25:d5:45:11:fa:d7:66:59:29:54:f8:a0:16:43:39:41:
         6b:77:77:0c:b9:7e:df:67:dc:cc:f8:84:db:9f:bb:64:88:49:
         ce:58:be:b7:1d:67:df:d1:41:f1:7f:37:b4:ac:b7:14:66:5c:
         32:31:c1:90:24:65:3c:20:28:f5:97:24:e5:6f:c4:58:3d:2f:
         a6:68:07:6e:97:ad:0b:1a:b8:0d:79:87:24:3b:39:93:d0:19:
         10:59:51:30:63:c0:ab:e4:04:62:48:3b:00:ef:28:15:e3:ae:
         fe:7e:3d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:47 2024 by rpki-client on console-fra.rpki-client.org