Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
File:                     pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json)
Hash identifier:          tjZICtWdlnHNT5G4O3jZ/ojacmz+/ywPjwC3B8ZqC54=
Subject key identifier:   59:80:7E:21:20:C9:8C:91:E0:AD:AD:2B:B5:06:45:35:50:A1:6D:30
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Certificate issuer:       /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial:       018F874928656FE442F1CAA8628F597A7679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
Manifest number:          062A
Signing time:             Fri 17 May 2024 16:01:09 +0000
Manifest this update:     Fri 17 May 2024 16:01:09 +0000
Manifest next update:     Sat 18 May 2024 16:01:09 +0000
Files and hashes:         1: Mjdja9ksmfxmY_Zc2t6SojliwGY.roa (hash: z1dCAi5jOpW2BDvG5Nz5MFEu64JarEe2HvGIIfeO+OA=)
                          2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: pXMmu7pY7Csdp/xU3Z6QoRoOF88V/gNLoELm/HNgM0w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:28:65:6f:e4:42:f1:ca:a8:62:8f:59:7a:76:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
        Validity
            Not Before: May 17 16:01:09 2024 GMT
            Not After : May 18 16:01:09 2024 GMT
        Subject: CN=59807e2120c98c91e0adad2bb506453550a16d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:16:3d:59:84:c7:92:ec:d3:f5:79:51:bf:
                    01:4a:67:5f:d8:b9:37:46:fc:9d:d2:d6:e8:14:2c:
                    79:20:0c:2c:46:df:55:09:09:0c:d3:b3:df:91:fc:
                    21:b0:a0:74:d9:c1:6c:fa:f1:28:33:0a:8a:44:9c:
                    fa:97:3f:a6:af:ec:28:72:13:bd:e5:27:32:91:72:
                    86:c9:4d:5f:d0:2f:a6:12:7d:7a:d7:cc:e7:5a:f1:
                    07:9f:9c:bc:d1:c1:49:02:25:9d:0f:b4:b6:36:19:
                    2f:98:0d:9e:59:a1:8c:70:ba:65:2c:25:83:33:43:
                    2d:21:d7:45:8f:88:09:d2:95:ac:db:b6:22:f1:f5:
                    a3:44:2d:1b:10:00:d7:4a:2a:54:1e:bf:30:01:73:
                    2a:82:ca:dd:c3:ba:e6:f0:52:1a:8e:72:3c:18:f3:
                    ee:96:ac:ec:9d:d6:99:04:a2:59:5c:c5:89:cb:1d:
                    77:03:d6:7b:96:e2:dd:90:a5:5f:79:6c:54:00:57:
                    3e:da:49:98:c4:d6:36:1a:c4:7c:0c:0d:a2:fa:2c:
                    15:10:f9:71:ac:d0:20:d7:c9:fa:68:4c:8c:0a:f8:
                    21:de:f2:0c:5d:6a:26:15:9e:23:8b:1c:aa:29:6b:
                    b9:e8:ad:dc:fc:57:fc:61:1f:9f:3e:d7:58:b8:9f:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:80:7E:21:20:C9:8C:91:E0:AD:AD:2B:B5:06:45:35:50:A1:6D:30
            X509v3 Authority Key Identifier:
                keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3e:83:07:05:6f:30:be:b9:ad:85:de:9c:c0:60:dc:72:d9:
         c5:cc:56:42:73:8f:2a:54:e2:93:65:6a:ac:fb:c4:63:b6:9a:
         84:79:a9:bc:e2:44:a6:9d:aa:a9:4c:ea:6e:bd:75:b2:e6:36:
         fc:91:01:21:d0:2e:34:26:55:a4:1d:53:43:f5:a4:e5:20:62:
         a5:1d:fe:43:65:ea:bd:3d:1a:23:67:dd:93:51:5e:37:88:85:
         74:99:1d:43:1c:fa:29:dc:bd:36:ee:80:c6:93:5f:ec:39:8a:
         a3:77:fd:f7:ff:0a:d1:e0:1f:f8:70:93:7b:7f:89:bc:d2:2e:
         4d:05:2b:9f:71:fe:32:20:05:5a:0b:df:03:2e:89:93:f9:2c:
         55:44:35:ef:12:e6:53:af:62:d5:4e:a2:82:c8:ab:3b:79:38:
         2d:cd:25:02:7d:97:b1:b7:e2:b2:3d:10:cf:0c:03:bf:6f:16:
         ef:13:5f:ff:32:12:61:c9:b0:da:b8:68:73:57:a5:9e:47:75:
         04:c8:ff:f1:52:84:a0:fd:e3:9f:3d:db:ec:40:ad:80:a3:0f:
         da:31:f7:81:6e:5e:08:c3:be:4e:33:9b:41:87:23:af:6b:70:
         95:c6:90:32:88:43:78:90:ed:62:bc:1f:8e:46:df:3b:9a:49:
         9a:62:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:53 2024 by rpki-client on console-ams.rpki-client.org