Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File:                     qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier:          0FDSB7wjbFXrxnJTO0a8p9azHqi+9OzRF4qvzhfh0Yc=
Subject key identifier:   F4:4F:0F:71:E0:2E:B9:1C:5B:5E:E2:1C:7A:81:C4:4F:A7:9B:38:80
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer:       /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial:       0191FA10632F2F79E93084A1B6A7894020A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number:          EA
Signing time:             Mon 16 Sep 2024 09:01:03 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:03 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:03 +0000
Files and hashes:         1: kuBjWSrGZKTHjUTJwZCf1FqQUo8.roa (hash: XOi9pbA/w1hBDXi6IgfFCKNZ1t9CS5fRRnA0Z6a3ktk=)
                          2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: 0cIZZ5HjYbi9ZSbA9m+uJdo2tkbzNWfzBzeDzDnEZgs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:63:2f:2f:79:e9:30:84:a1:b6:a7:89:40:20:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
        Validity
            Not Before: Sep 16 09:01:03 2024 GMT
            Not After : Sep 17 09:01:03 2024 GMT
        Subject: CN=f44f0f71e02eb91c5b5ee21c7a81c44fa79b3880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:8e:d4:6e:df:07:2a:88:49:39:c6:f7:37:
                    20:d6:29:43:c1:2d:fe:2b:33:7e:be:57:9f:0a:c3:
                    c6:e2:96:97:f2:68:e6:08:1c:b9:73:92:a8:b3:c8:
                    c7:be:45:e0:55:85:ba:16:1d:60:8d:e9:f9:a8:46:
                    61:14:0d:e2:32:82:48:da:89:eb:da:51:de:1f:ea:
                    1f:35:5f:34:3f:87:dd:47:f9:bd:c9:77:4f:ef:26:
                    6c:70:dc:67:c5:4a:2a:b2:8e:d9:05:80:61:1a:aa:
                    98:0c:1b:a4:47:11:ae:dd:ca:31:dc:b0:98:4a:ac:
                    dd:cf:f6:41:96:cd:e1:f0:57:2c:a6:ac:55:cb:99:
                    27:ea:cf:63:af:73:22:1b:3f:a5:4f:43:1c:e8:77:
                    74:48:47:82:a1:db:87:8a:8a:2b:2f:13:2f:0a:bf:
                    13:b1:82:7d:a9:f0:6a:0a:03:27:22:a5:a7:54:e6:
                    9e:c7:87:86:b6:9e:06:c7:b6:e3:cf:b5:1b:5a:ef:
                    89:35:92:34:00:f9:7c:7f:99:04:5e:f3:1f:8b:05:
                    48:50:79:03:87:d6:dd:66:01:e9:17:27:7a:2d:fa:
                    08:71:1c:36:e7:51:ca:50:34:70:09:b0:b7:f4:f2:
                    ea:c1:6e:76:a6:ec:49:16:fd:f9:50:3a:cb:e3:d1:
                    bc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4F:0F:71:E0:2E:B9:1C:5B:5E:E2:1C:7A:81:C4:4F:A7:9B:38:80
            X509v3 Authority Key Identifier:
                keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1f:d0:59:e5:2a:cc:6a:ee:4c:31:93:aa:01:45:22:de:db:
         61:6f:c3:ae:3d:c7:be:05:b4:fa:70:61:bf:57:5c:c8:12:ed:
         0e:68:4f:77:57:22:4d:dc:81:44:15:e6:a0:4a:e3:eb:40:f1:
         07:d1:15:20:95:af:77:cf:c0:6f:cc:7a:d7:85:5c:d7:ba:78:
         bb:4a:43:95:b7:01:65:9e:f1:df:d1:5b:63:48:f3:31:88:fe:
         7b:b4:76:ec:da:7c:2b:49:9b:ec:9a:22:d7:32:ff:25:d9:50:
         8d:af:7d:d3:89:7a:51:39:3e:43:77:e4:a5:f9:0f:24:e9:45:
         f7:74:78:a6:da:a0:66:9b:0a:22:ec:45:14:72:8c:c7:2e:e2:
         bd:78:c2:0c:4e:17:96:80:f5:95:1f:c9:63:d1:a9:41:5b:54:
         17:ac:23:ff:20:e4:77:4b:c6:ec:18:ae:5b:a7:a9:e8:22:ac:
         97:c2:e8:eb:fd:a3:b3:6b:50:ae:bc:2b:de:92:9f:6f:7c:91:
         10:2b:f5:c2:61:0b:83:dd:a2:2f:3f:d4:b2:83:d8:7d:6f:d7:
         1c:12:e2:6c:19:16:ce:4b:c7:00:1a:cc:aa:a5:44:af:5f:3e:
         ae:1d:df:74:32:45:fd:53:61:05:c9:a6:8b:84:be:d8:14:e7:
         c5:bd:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:15:48 2024 by rpki-client on console-ams.rpki-client.org