Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
File:                     q9G6riGifK2umCjVKOHXVXoWiXQ.mft (raw, json)
Hash identifier:          uEl27b73Sv+uGh/WVbzdjZAtHDPYhm9LpdOpa/UBric=
Subject key identifier:   40:E8:58:CD:86:B9:9E:0D:DD:14:C7:F6:C5:76:65:88:FA:37:47:20
Authority key identifier: AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
Certificate issuer:       /CN=abd1baae21a27cadae9828d528e1d7557a168974
Certificate serial:       0193568A333C7D9682F5E732A978900190A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
Manifest number:          070E
Signing time:             Sat 23 Nov 2024 01:01:57 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:57 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:57 +0000
Files and hashes:         1: DTEyeA1vyY-iNUbPzzlKrrJThrs.roa (hash: yz1K7thTWUMgyFxGBIuS7TeQvWaNUaEVH8aOAvIyZFM=)
                          2: q9G6riGifK2umCjVKOHXVXoWiXQ.crl (hash: ftPBvHi4bENauDpTnPvpP1cf6XY0fg2q+ae00u5//+8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:33:3c:7d:96:82:f5:e7:32:a9:78:90:01:90:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd1baae21a27cadae9828d528e1d7557a168974
        Validity
            Not Before: Nov 23 01:01:57 2024 GMT
            Not After : Nov 24 01:01:57 2024 GMT
        Subject: CN=40e858cd86b99e0ddd14c7f6c5766588fa374720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:62:b0:0d:93:bc:69:e6:78:8c:12:71:4a:
                    ea:32:fb:00:f7:1b:3c:3b:9e:6a:cd:94:d8:7b:11:
                    8d:33:ca:41:84:1f:96:04:14:88:9b:c3:f7:65:3b:
                    00:a1:1b:c5:21:23:37:1b:91:bc:1e:96:fe:06:a6:
                    56:5c:c6:94:16:af:8c:83:b3:ce:0f:74:8a:45:f4:
                    42:a4:e8:1e:4e:2d:ef:7e:fe:4b:39:76:2d:6d:4c:
                    1e:25:fa:6e:93:08:fc:11:50:da:f5:b5:e1:5a:1c:
                    3a:4e:60:e4:bc:11:1d:b4:f3:cf:7f:88:f4:c8:80:
                    94:52:71:0f:00:d1:42:b4:50:05:b6:3a:bb:d4:e7:
                    bf:2a:b7:74:31:34:89:40:b0:7f:ec:29:15:24:ab:
                    6a:96:b4:41:1e:d1:6d:4c:4d:ae:82:eb:ad:ec:69:
                    8b:2c:e3:37:a6:8c:ea:13:19:73:07:e6:68:3f:91:
                    db:be:f5:fb:44:4b:5e:51:5a:ca:40:0d:a0:5e:7a:
                    1b:6e:e1:d2:07:8f:d6:ec:09:62:2b:bb:3a:6f:00:
                    01:4b:b8:37:53:47:f0:31:25:d4:6c:50:12:1d:ab:
                    ea:d6:09:0f:f7:b8:ed:69:0f:14:3a:34:8f:b9:8e:
                    46:f1:6a:df:dd:b2:ae:67:3c:76:54:63:67:d4:84:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E8:58:CD:86:B9:9E:0D:DD:14:C7:F6:C5:76:65:88:FA:37:47:20
            X509v3 Authority Key Identifier:
                keyid:AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:85:bc:03:2e:8f:0c:37:f3:16:1c:08:7b:ee:95:8e:67:e7:
         77:8d:d5:87:0f:6d:5b:08:4a:52:4b:76:6d:53:23:8b:fb:4d:
         de:e8:64:93:d7:28:24:c3:18:40:46:8e:24:04:7c:01:c5:00:
         28:4e:66:54:39:13:8e:9a:73:67:78:a6:a6:1e:8d:47:3b:bf:
         55:1c:5e:35:b4:4d:18:29:b8:b6:ea:af:ae:8e:e6:db:be:4a:
         56:1b:47:ef:40:62:4f:ea:b4:08:42:da:54:8e:be:b6:f7:e8:
         8e:39:b6:f6:fc:6e:f0:d9:01:60:34:8f:2c:81:b2:26:d9:f9:
         96:46:e3:cd:eb:a2:57:ef:95:bc:59:37:2e:57:1a:60:21:9f:
         dd:7e:fe:5e:22:64:2b:28:25:aa:09:d3:cb:2d:4f:ea:8f:c3:
         2a:60:91:c0:5b:d5:c7:69:9e:47:05:cf:68:c5:77:75:9d:38:
         78:88:e6:c6:6a:5c:41:de:06:57:58:40:37:80:cd:82:4b:d3:
         2c:d7:02:3c:8b:9b:e4:3a:36:90:83:84:63:2c:3c:f8:e1:ac:
         0b:ac:f4:8b:c7:2d:05:1b:3b:89:65:a3:0c:5f:d1:19:9c:9d:
         78:bd:97:a1:61:a9:58:0b:17:30:83:3f:09:ae:7c:6b:53:42:
         09:41:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:08 2024 by rpki-client on console-fra.rpki-client.org