Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
File:                     q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json)
Hash identifier:          ZXmZUsgsbbvGpTO7U+phaCFJvrsNIG72omwO1LpbgDo=
Subject key identifier:   6E:1A:AE:34:2C:87:DB:DE:51:DE:20:67:44:C0:C8:1C:60:54:F3:3F
Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
Certificate issuer:       /CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Certificate serial:       018F8936B42B0FF5D70510C31F1F8FB97E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
Manifest number:          03DC
Signing time:             Sat 18 May 2024 01:00:14 +0000
Manifest this update:     Sat 18 May 2024 01:00:14 +0000
Manifest next update:     Sun 19 May 2024 01:00:14 +0000
Files and hashes:         1: NNYWLyRpZTeDWtVDyLJ3rTIgkoI.roa (hash: g5h6UVdapFGQj5Ui9if7ATpNCpDIzagMCrE5p6N3w7Y=)
                          2: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: ZWBVpLBG115SDvBhNudxew/jbv2bVifGMGwY4f8U1E4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:b4:2b:0f:f5:d7:05:10:c3:1f:1f:8f:b9:7e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d
        Validity
            Not Before: May 18 01:00:14 2024 GMT
            Not After : May 19 01:00:14 2024 GMT
        Subject: CN=6e1aae342c87dbde51de206744c0c81c6054f33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:c9:07:02:df:a5:b5:53:cb:bb:c7:46:05:
                    67:9e:08:c4:9b:ca:f9:00:8b:69:19:2e:6d:75:01:
                    94:0b:a6:d4:07:4d:59:b8:c0:5c:28:a4:72:c5:66:
                    e6:cf:71:79:e4:84:d5:a7:37:11:0e:15:63:1b:01:
                    4f:9f:fd:79:37:ab:bd:c9:88:87:32:7d:9f:fe:af:
                    13:62:6e:1b:45:96:7f:31:89:ee:15:3f:96:82:32:
                    0e:42:08:be:ea:a7:cc:ed:fc:55:c9:e5:80:01:62:
                    7c:19:2b:fb:17:bd:b3:a6:c1:87:09:47:db:49:4d:
                    45:8b:45:75:fe:8d:5b:5e:a2:34:99:55:d6:a6:c8:
                    3a:d7:d6:11:ec:80:32:e9:30:11:df:74:0e:b5:52:
                    d8:e4:b8:e0:62:86:54:e1:aa:36:d9:c1:fb:76:57:
                    dd:f6:0a:4d:ab:59:26:86:95:fe:09:29:87:7d:06:
                    d2:64:47:e1:9e:00:87:9c:91:c2:42:0a:28:3e:04:
                    5c:ea:6f:a9:2a:9b:e5:b1:20:5d:85:71:5d:e1:b5:
                    5e:76:8c:cd:c2:c9:4b:db:81:e4:8b:8b:d3:c0:3e:
                    8a:fe:ba:7a:49:d0:20:d9:d8:3d:1b:9e:f7:8a:26:
                    cc:1c:2d:b6:d0:78:95:29:ec:a2:b8:db:9b:5b:1e:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1A:AE:34:2C:87:DB:DE:51:DE:20:67:44:C0:C8:1C:60:54:F3:3F
            X509v3 Authority Key Identifier:
                keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:02:9a:d1:ba:46:51:20:98:9b:72:10:15:02:88:ca:bc:
         55:30:d6:2b:95:49:31:ac:6a:af:53:ad:8e:35:5a:22:ea:b9:
         d7:09:ec:a2:7a:f6:90:eb:fa:e1:54:f4:f2:71:36:f8:a1:3a:
         05:94:b2:03:c1:fe:07:99:60:b8:c7:90:f8:50:8c:a4:8c:bd:
         4b:8a:1c:28:e3:4b:72:3e:7d:3b:e7:70:6e:69:8d:93:9f:b6:
         0d:a4:29:c2:63:7d:dc:55:fc:98:87:d7:08:53:14:61:7f:e6:
         d1:c7:42:dc:27:e3:fe:3b:3c:71:08:0e:71:61:c3:04:75:27:
         e6:95:0b:26:63:9c:4a:e7:46:a9:62:0d:3b:64:d5:10:14:06:
         c9:da:3d:09:57:b1:72:20:b0:66:28:b5:67:7f:d2:ca:2a:90:
         08:db:e2:86:99:07:5b:fc:a8:cd:ac:5d:b0:de:2f:c9:b6:f3:
         85:62:6e:91:b7:95:d4:4b:13:5c:a5:a0:c2:f5:2d:86:19:d3:
         42:e8:cf:82:66:d5:ee:15:80:40:7e:42:33:5c:0d:5a:df:7f:
         06:24:2a:ef:10:f4:f9:f0:f1:00:2f:04:6b:2e:fb:17:5d:ee:
         60:9e:af:85:f7:fa:17:84:d2:4e:7d:d1:76:0b:11:ab:8d:57:
         1e:9f:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:15:39 2024 by rpki-client on console-ams.rpki-client.org