Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File:                     qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier:          sF+fcK7iPqTrUynKU/8be3OiP2Q0wfyFv/hKN2gJxR8=
Subject key identifier:   C9:F6:90:F1:24:97:B1:31:0E:58:A6:DB:A0:4B:87:23:8E:9F:29:DE
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer:       /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial:       018FB3B64AD7EAE0CFB2B50F80EA892BF92B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number:          03EF
Signing time:             Sun 26 May 2024 07:03:39 +0000
Manifest this update:     Sun 26 May 2024 07:03:39 +0000
Manifest next update:     Mon 27 May 2024 07:03:39 +0000
Files and hashes:         1: 9maIrwOXceiTm0YJeCALyXkjYHA.roa (hash: L2LhFbRyQjgejqWIpJNG2jDOaGAasCF4P0jFmqZg05s=)
                          2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: Nr1c1Gn260JAV7deCf+E6WlFAIFQqWnH8J+jPPLC9u4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b6:4a:d7:ea:e0:cf:b2:b5:0f:80:ea:89:2b:f9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
        Validity
            Not Before: May 26 07:03:39 2024 GMT
            Not After : May 27 07:03:39 2024 GMT
        Subject: CN=c9f690f12497b1310e58a6dba04b87238e9f29de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:27:1a:68:2b:b9:96:f4:f9:b9:ed:9d:47:
                    a8:95:91:cf:07:9c:6d:4c:be:d1:e2:03:cc:c7:e3:
                    2b:8d:09:9e:89:16:2c:00:55:12:fb:dc:e9:ef:0c:
                    3d:d8:92:76:ab:5d:85:e8:dc:d1:a8:a2:0e:a0:c9:
                    7e:a5:f8:e7:81:9c:b3:db:8d:87:11:eb:59:01:94:
                    81:2f:f5:94:ca:9f:2f:39:51:69:0f:03:a5:4a:60:
                    58:09:64:55:62:63:1c:5a:28:9e:6e:82:5d:fa:fc:
                    ff:7c:8a:af:67:9a:f5:dd:9a:19:b0:86:ba:05:47:
                    d6:cf:6e:09:9b:de:2d:44:ce:e8:fc:21:f2:72:59:
                    6d:5d:5e:e9:f7:c9:83:4c:c0:64:eb:aa:61:40:da:
                    c8:e7:6d:9f:03:3b:d4:6a:4a:6a:93:2d:9b:08:f9:
                    63:14:7b:44:38:97:b2:69:1f:06:71:ce:15:dd:e1:
                    45:c7:66:63:8d:ed:0c:3f:c8:76:c1:46:39:11:12:
                    7f:d1:10:c0:1f:f2:63:ff:05:ef:4a:60:ef:04:63:
                    d5:e2:41:5c:53:ba:5c:99:08:93:7c:53:84:6c:38:
                    2c:3e:91:d9:9c:41:b1:ff:37:e4:08:8d:d9:55:24:
                    57:52:61:1c:9c:12:ca:be:12:b9:db:61:58:90:b8:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F6:90:F1:24:97:B1:31:0E:58:A6:DB:A0:4B:87:23:8E:9F:29:DE
            X509v3 Authority Key Identifier:
                keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:d1:ee:44:e7:4e:88:d6:94:c0:c5:83:63:e6:7e:17:cd:
         0b:0a:1c:f4:a6:8b:06:a5:65:ee:23:5d:62:6b:54:98:6f:ac:
         ab:89:2b:b8:93:a2:fe:0e:03:1a:53:e5:36:f2:cf:2f:7f:d1:
         86:04:b4:90:09:04:a5:36:5c:9e:7a:bd:9c:d6:d1:e3:d3:17:
         f1:55:2e:e8:b0:25:81:84:fa:c1:f6:dd:c7:77:3d:4b:02:37:
         f8:89:85:f5:b2:58:4e:6a:c2:d2:34:d8:be:19:25:c1:08:d1:
         3c:fa:61:cb:94:24:a3:2e:37:bb:39:7a:99:08:d0:f7:13:df:
         7a:d6:9b:c6:78:b6:13:67:1c:8a:f4:3f:01:09:f1:21:b5:08:
         de:40:75:5e:c9:04:ca:11:a4:e2:e6:29:63:1c:21:db:6e:89:
         28:fa:f6:b2:3a:1a:3a:45:ae:4c:9f:b9:7e:f1:aa:fb:92:2b:
         5d:00:89:5c:50:6d:54:8e:a9:35:19:0a:2a:83:18:b9:5a:f7:
         cf:bc:59:a5:fd:e9:77:a8:89:06:ea:4d:a2:a3:3d:97:ea:c5:
         42:f0:69:7e:fb:79:b9:be:61:eb:dd:96:f5:76:6f:54:37:0d:
         34:f3:a0:3c:35:64:a8:6a:ae:ca:e2:cd:03:db:1c:d8:82:e5:
         ce:1d:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 15:54:23 2024 by rpki-client on console-ams.rpki-client.org