Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File:                     qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier:          cHBrn9DSFS49oCjoZosPBlZyp7obm2/HKXl29yJ48DQ=
Subject key identifier:   92:44:71:FE:67:81:86:E4:86:F6:FE:D9:38:2E:72:EA:5F:4A:68:EE
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer:       /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial:       018F86A3837E14519E302942404BAA7EBD93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number:          04C1
Signing time:             Fri 17 May 2024 13:00:14 +0000
Manifest this update:     Fri 17 May 2024 13:00:14 +0000
Manifest next update:     Sat 18 May 2024 13:00:14 +0000
Files and hashes:         1: Uq1BLdY_T6UaGJVb-MVOZ_hNgK8.roa (hash: 3G1iYdJHLTwYZBzBEeSuO8Nm49IMTpecEy9u7o58DzU=)
                          2: bdjqD6vAFVxAN_UKN9gJKAh-iw8.roa (hash: dDtMof7EfH5y5QmTJqjCObg0UO8Q1JH6y5AlO0G6lWM=)
                          3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: ZM8UqRWsyiA0srFVADCs+JTtWledetAqM/Ku+A/IMFI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:83:7e:14:51:9e:30:29:42:40:4b:aa:7e:bd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
        Validity
            Not Before: May 17 13:00:14 2024 GMT
            Not After : May 18 13:00:14 2024 GMT
        Subject: CN=924471fe678186e486f6fed9382e72ea5f4a68ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:e1:0e:95:8f:c3:ee:f8:18:b2:a1:01:e6:
                    af:a3:34:5e:9b:d1:44:9a:60:d4:cd:3c:70:3f:8f:
                    0e:c9:0d:49:14:93:23:ed:7a:54:57:5d:24:89:7a:
                    b9:a1:f6:e3:de:1e:20:cf:29:a2:6a:61:90:ab:56:
                    60:5e:b4:7c:e5:13:fe:f4:8d:71:86:ce:8f:ce:e9:
                    9d:af:5d:10:6b:16:7a:6d:ea:bb:0f:e6:a4:b5:05:
                    07:cb:58:61:1f:c6:6a:b6:d1:11:b9:b7:12:a4:9c:
                    3e:28:3b:94:aa:ca:a6:54:24:bc:18:72:bd:55:3b:
                    01:6e:9f:8c:3a:fa:8c:47:bb:6f:67:ff:51:18:51:
                    5f:31:ce:f1:24:d1:cc:cf:f6:25:ff:8f:93:35:2e:
                    73:44:cc:7f:6c:cc:f2:2c:75:a5:4c:e9:ea:e0:c2:
                    ed:87:f0:41:39:54:fb:d9:cb:35:0c:4c:49:0b:31:
                    7d:89:15:4f:0d:1d:1a:d1:26:d6:bd:4f:a1:93:a0:
                    fa:36:07:04:c1:70:74:d1:e2:b9:43:7c:97:57:6e:
                    df:b8:61:73:44:c5:2f:d6:cf:51:0a:8f:91:61:41:
                    d9:ca:08:0f:69:7a:80:fe:29:09:8d:a8:de:26:82:
                    e0:cc:68:ec:14:63:20:40:9c:6d:19:2e:71:80:8a:
                    f6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:44:71:FE:67:81:86:E4:86:F6:FE:D9:38:2E:72:EA:5F:4A:68:EE
            X509v3 Authority Key Identifier:
                keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2b:91:47:5c:03:06:d2:42:d8:71:1b:28:85:d5:27:34:1d:
         a0:b8:d3:a4:57:32:15:37:7c:4c:ed:2a:22:a6:e4:c5:de:46:
         72:3b:93:05:39:73:cc:ec:ac:91:c5:f5:ab:5a:da:ad:2d:ae:
         c5:70:a3:de:00:df:ee:7e:31:ba:1b:c9:7b:87:c6:57:7e:97:
         21:9d:e5:80:1d:70:ad:76:4a:60:a3:69:18:5d:5f:8b:b7:25:
         e5:34:34:d4:f8:1c:eb:0f:d2:a2:66:f3:a1:ea:8b:f7:6c:57:
         e6:23:49:1a:f8:6e:c9:c5:7f:3c:5a:e9:c2:b4:f5:58:ea:76:
         67:ec:e3:7f:b1:8b:44:1b:4f:9b:29:04:01:10:cd:95:ba:80:
         67:03:a8:32:6e:73:44:63:42:63:7d:5f:be:24:25:4b:d4:66:
         fa:ae:7c:ad:96:e3:21:5a:9b:67:eb:ae:7c:9a:0f:d8:f7:e9:
         a5:6a:58:0e:9a:aa:26:a3:f7:ab:e6:53:a8:78:6a:1c:75:b7:
         e6:78:e9:01:a9:b5:ae:ff:fe:d5:83:2a:94:ef:0f:04:6e:61:
         fc:f1:85:5e:f5:91:ab:0f:79:05:3d:f7:4d:46:8b:19:20:92:
         83:ef:21:bd:2c:de:f2:bc:f6:2b:a3:cd:46:d2:b4:12:f9:9e:
         e5:14:8e:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go4N+FFGeMClCQEuqfr2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy
YzA2ZjQwHhcNMjQwNTE3MTMwMDE0WhcNMjQwNTE4MTMwMDE0WjAzMTEwLwYDVQQD
Eyg5MjQ0NzFmZTY3ODE4NmU0ODZmNmZlZDkzODJlNzJlYTVmNGE2OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3/hDpWPw+74GLKhAeavozRem9FE
mmDUzTxwP48OyQ1JFJMj7XpUV10kiXq5ofbj3h4gzymiamGQq1ZgXrR85RP+9I1x
hs6Pzumdr10QaxZ6beq7D+aktQUHy1hhH8ZqttERubcSpJw+KDuUqsqmVCS8GHK9
VTsBbp+MOvqMR7tvZ/9RGFFfMc7xJNHMz/Yl/4+TNS5zRMx/bMzyLHWlTOnq4MLt
h/BBOVT72cs1DExJCzF9iRVPDR0a0SbWvU+hk6D6NgcEwXB00eK5Q3yXV27fuGFz
RMUv1s9RCo+RYUHZyggPaXqA/ikJjajeJoLgzGjsFGMgQJxtGS5xgIr26QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJEcf5ngYbkhvb+2TgucupfSmjuMB8GA1UdIwQY
MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt
ZDZhMzA1Y2JmNDZjLzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj
LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiuRR1wD
BtJC2HEbKIXVJzQdoLjTpFcyFTd8TO0qIqbkxd5GcjuTBTlzzOyskcX1q1rarS2u
xXCj3gDf7n4xuhvJe4fGV36XIZ3lgB1wrXZKYKNpGF1fi7cl5TQ01Pgc6w/Sombz
oeqL92xX5iNJGvhuycV/PFrpwrT1WOp2Z+zjf7GLRBtPmykEARDNlbqAZwOoMm5z
RGNCY31fviQlS9Rm+q58rZbjIVqbZ+uufJoP2PfppWpYDpqqJqP3q+ZTqHhqHHW3
5njpAam1rv/+1YMqlO8PBG5h/PGFXvWRqw95BT33TUaLGSCSg+8hvSze8rz2K6PN
RtK0Evme5RSOSg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:05:19 2024 by rpki-client on console-ams.rpki-client.org