Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
File:                     qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft (raw, json)
Hash identifier:          f3bJx8BZgG1jAmjK73PeCahmny8yyOi/8O9xWktqOVM=
Subject key identifier:   02:AC:2F:ED:3E:5B:59:FC:CA:85:10:F2:BA:27:4C:70:18:BD:52:5E
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Certificate issuer:       /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial:       01935689CF7845CFFABE8934FA8E8FADBB13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
Manifest number:          0D41
Signing time:             Sat 23 Nov 2024 01:01:32 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:32 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:32 +0000
Files and hashes:         1: 6YT4HTz7ECbe-0eGL_tXbPe3XFQ.roa (hash: NSHe6a7U/DchcS3u+gul922cYTgw3+z7D8bqByVBJrA=)
                          2: qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl (hash: trUcM1cWEegV/l5uB5//iV+5aTZUM2WgaCeVzXVO2zg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:cf:78:45:cf:fa:be:89:34:fa:8e:8f:ad:bb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
        Validity
            Not Before: Nov 23 01:01:32 2024 GMT
            Not After : Nov 24 01:01:32 2024 GMT
        Subject: CN=02ac2fed3e5b59fcca8510f2ba274c7018bd525e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:b3:55:e0:8d:1b:a3:ae:7a:d6:58:3a:63:
                    62:77:70:50:59:19:a2:54:44:ae:25:2e:91:59:b9:
                    d1:d2:0c:ee:46:8f:9e:42:af:70:35:31:16:2d:fd:
                    fd:fb:89:dd:e0:36:b2:99:fd:14:3a:24:38:a3:ce:
                    3a:70:a2:be:f9:39:bb:0c:ed:70:da:6d:62:37:65:
                    ad:cf:a1:a9:ae:bc:99:66:45:b3:49:4a:9a:fd:34:
                    64:27:f9:5c:d1:75:46:52:2a:24:9d:a0:7d:ba:48:
                    c3:6c:9b:50:e8:45:65:07:2e:57:71:2c:9d:35:90:
                    d2:d1:77:e3:6d:3d:67:db:c7:c7:ce:2a:94:57:f0:
                    a7:f7:ba:b2:f9:46:c9:81:ea:d7:5c:23:96:31:18:
                    fb:21:a5:0a:58:c7:6d:00:a6:d1:09:97:8b:ab:69:
                    53:a5:f2:95:c9:b8:58:f6:a0:2c:9b:67:99:20:ff:
                    07:dd:ac:61:e3:b0:08:74:4c:9d:c8:da:c5:0f:b0:
                    5b:6e:d8:fe:d5:20:3e:b2:44:8e:11:83:17:6a:21:
                    1d:9d:e4:f2:3a:13:6a:f0:8e:6c:53:06:53:dc:b0:
                    32:74:67:f1:08:ca:04:df:21:27:d0:a8:b3:19:c6:
                    72:e2:4f:08:67:f0:2c:6c:92:d1:88:3c:cf:46:ad:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AC:2F:ED:3E:5B:59:FC:CA:85:10:F2:BA:27:4C:70:18:BD:52:5E
            X509v3 Authority Key Identifier:
                keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f4:a6:ca:be:8c:99:14:78:0e:96:25:a5:26:70:bb:d5:48:
         d7:3e:7a:83:01:28:c9:45:77:b6:bc:a6:8f:41:fb:0f:c2:4e:
         f9:e7:c5:79:5d:c6:c5:45:d0:54:1f:bb:3f:4a:f0:94:a1:22:
         5e:11:4d:a4:e6:ae:59:92:e6:10:f3:81:5e:31:9d:f7:9a:45:
         a3:c1:41:09:8b:a4:7e:e6:a4:b9:02:99:89:12:81:19:11:aa:
         8b:86:48:a8:82:53:2e:b8:a4:ce:84:65:20:2f:63:09:94:40:
         46:98:89:d0:ae:e1:75:2f:10:56:36:1e:a9:df:72:c8:76:b5:
         5a:8f:dc:6e:5e:4c:75:e1:86:81:44:0d:4b:07:d1:57:ba:ed:
         a5:07:96:94:a8:d0:ff:57:49:77:b4:54:6a:a7:90:f7:40:a2:
         70:c8:0c:a8:d8:77:64:2b:91:b1:bd:fa:91:2a:91:dc:97:3a:
         5e:1c:6c:00:dc:7f:9d:66:81:43:3d:e1:6f:8d:31:96:11:59:
         9a:ba:82:5a:c8:4f:8b:a1:30:e6:76:08:f7:a4:69:1e:4d:fc:
         e5:f5:30:d4:15:27:58:8f:ea:c5:e4:31:b6:b2:4a:47:b3:46:
         ce:8e:3a:6c:70:92:d8:95:61:b9:88:09:7c:09:45:50:09:bf:
         28:2d:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:07 2024 by rpki-client on console-ams.rpki-client.org