Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
File:                     q53IX5TKZH3g22TXTTE5lHzESbo.mft (raw, json)
Hash identifier:          GThaJCVobiNdOBTayUKzaDmLVc/LOHKs0DYDzPrBZK0=
Subject key identifier:   D3:72:9F:E0:BD:59:36:67:D3:AB:87:9F:62:C7:00:36:AB:CB:52:C0
Authority key identifier: AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA
Certificate issuer:       /CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
Certificate serial:       018F8891FAC7253B2355A9C3AB86C05D0384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
Manifest number:          0E65
Signing time:             Fri 17 May 2024 22:00:19 +0000
Manifest this update:     Fri 17 May 2024 22:00:19 +0000
Manifest next update:     Sat 18 May 2024 22:00:19 +0000
Files and hashes:         1: q53IX5TKZH3g22TXTTE5lHzESbo.crl (hash: h2vYsf8LIV/1TWQnE0BZOhdhW8gYRpIVZkWAMndYqk4=)
                          2: x4AGbOsuSsJOPv6SVmo5yfJnkD0.roa (hash: u2LdNXLpGDZyC7JhH6H1icYUs4b5nxWM5Ydv2EKdipU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:fa:c7:25:3b:23:55:a9:c3:ab:86:c0:5d:03:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
        Validity
            Not Before: May 17 22:00:19 2024 GMT
            Not After : May 18 22:00:19 2024 GMT
        Subject: CN=d3729fe0bd593667d3ab879f62c70036abcb52c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:07:43:f8:9e:1e:52:11:56:04:14:d0:e6:
                    71:e8:63:11:0d:0c:71:ce:34:7c:89:30:57:ba:26:
                    0c:6e:d1:1f:c7:11:d3:02:15:11:63:f8:c6:42:9a:
                    b8:c2:a3:6c:37:58:aa:93:da:75:ce:65:de:17:fb:
                    6a:ef:c1:bf:73:c1:c2:c3:11:68:c0:cf:23:f0:6c:
                    ea:2a:c9:38:d8:e7:5b:50:b6:6d:e4:76:bf:7a:6f:
                    3f:23:be:02:8f:d9:b4:96:4b:83:8c:b1:77:ee:ff:
                    6a:03:9a:24:ec:7a:61:e9:1d:28:e5:f8:45:e7:3c:
                    77:bc:be:a2:bd:ba:da:27:62:95:07:4f:dc:5e:91:
                    50:03:8e:9f:e2:37:86:61:bc:c7:67:d7:b6:c8:0b:
                    df:f5:e6:d2:44:47:db:71:d8:2e:71:21:cc:94:bd:
                    07:f4:05:42:fb:68:bb:ab:bf:6a:7f:6a:db:cb:b0:
                    b4:6c:82:b6:6e:86:86:39:31:7f:52:3a:3e:76:1c:
                    e5:ed:20:43:ad:9f:f2:7e:ca:ea:d0:81:04:79:04:
                    f5:d9:4e:fc:7b:7f:1b:66:b8:06:d8:d3:7e:27:fa:
                    b8:1b:f0:09:56:b8:8a:3c:60:df:84:28:ce:98:06:
                    ad:49:eb:47:40:77:73:dc:db:9f:0b:23:81:72:e8:
                    18:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:72:9F:E0:BD:59:36:67:D3:AB:87:9F:62:C7:00:36:AB:CB:52:C0
            X509v3 Authority Key Identifier:
                keyid:AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:2a:e0:01:e9:3c:ff:3f:fb:b8:9d:4b:f6:15:d5:91:d2:
         a8:5c:dd:93:35:fa:aa:26:e0:7d:a3:c0:fb:d8:47:bf:04:4b:
         59:ae:86:52:20:e2:41:fa:48:ab:e9:ea:00:d4:21:6a:90:49:
         50:15:be:8e:7a:64:99:5c:4e:c0:6f:18:96:1d:b5:94:e4:ea:
         ac:d9:a0:6b:4e:8a:36:1b:85:8d:8e:c4:10:e6:0c:13:a3:ba:
         bf:cb:c1:13:9a:9e:da:07:6c:19:41:1d:b2:0e:99:c4:15:e3:
         da:a3:f4:2f:ff:c8:41:69:9b:de:99:b9:94:35:2d:7e:65:79:
         79:2c:08:6a:63:3c:a1:9e:ed:39:a6:04:5c:96:1a:e1:34:06:
         dd:94:2a:a0:d2:af:85:6a:e1:be:ee:41:53:f2:34:52:57:b1:
         c5:0b:96:7e:1c:b4:5e:3e:34:80:8d:bd:39:68:96:24:77:27:
         7a:40:31:76:00:73:c1:30:48:08:31:71:2d:3b:86:68:bc:ff:
         47:47:1a:c9:21:61:bf:5c:ce:10:94:f1:63:2b:04:53:15:48:
         39:5b:62:39:fd:86:79:96:e3:a0:07:8f:98:fc:ed:b9:0f:cb:
         2f:dd:e5:72:6f:94:d6:d5:43:5e:00:2a:2d:e7:f5:45:62:ec:
         4a:fe:a1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:21 2024 by rpki-client on console-ams.rpki-client.org