Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File:                     QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier:          BHH9EeyFc/Jx+bI/8+VuRrSH/r5AmVc1ilqeog1Y/vA=
Subject key identifier:   20:FA:26:DC:ED:B2:85:F4:A2:4C:C0:50:82:C8:9D:CF:C8:9C:FE:D6
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer:       /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial:       018F5DA86C5CCD43B2BD4FE1078563D091FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number:          0E52
Signing time:             Thu 09 May 2024 14:01:09 +0000
Manifest this update:     Thu 09 May 2024 14:01:09 +0000
Manifest next update:     Fri 10 May 2024 14:01:09 +0000
Files and hashes:         1: 294Q1xAZx-8i9AIz4EXQkmB-MxQ.roa (hash: Ti5U8c8kdCWAHPRpyYCMAjHbGo2ssgQ6ZuBNONr3+LU=)
                          2: MnaUkxH7xvziy5s5EAgmfsu6IgI.roa (hash: W8wwBQ/OwYIZPy8lkItjLMQt8Gq8yMtLREcyqOvOFuQ=)
                          3: QF3EyusI_k8mrwYCXqKRH9751tA.roa (hash: PZFkbpSNmM2N/AJzNI0KmNIajGQ9lc7V/9T6i3l/mJE=)
                          4: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: Nx4c1jqC7etnFMHaFfuNUiJNEDOHbCtXgY4UjjNKl3Q=)
                          5: Usx3zOIIZ-azrRU-NmaoSl0TB0g.roa (hash: Ngxx+oynCGzW8PJPWi8MCdFvcczyJCwtxMhOIsVJZnE=)
                          6: m-JU1RwWRB1DBTjnz5LefUtNwDs.roa (hash: xC78iJcSOnwPXs2FZ5+Ow/TaIy2jUipp4r08S9BprUI=)
                          7: mE_KA_jdB4_skqw-gHcsKxBJ__k.roa (hash: aVDfF4QyvH7VRxVvAebgWj8xqPRpJ2gNOlHcl1ocO/M=)
                          8: yiuXhwZ69kDUqaHpZTCCt1ghyiI.roa (hash: XL0ITo62kEmuKh+f5QJhazDe/syA0mtl0h3SuESpm6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5d:a8:6c:5c:cd:43:b2:bd:4f:e1:07:85:63:d0:91:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
        Validity
            Not Before: May  9 14:01:09 2024 GMT
            Not After : May 10 14:01:09 2024 GMT
        Subject: CN=20fa26dcedb285f4a24cc05082c89dcfc89cfed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:93:9d:d4:f3:af:af:2c:b9:96:21:54:65:
                    2c:14:bb:80:59:e6:1d:00:06:05:a6:4c:06:c6:0b:
                    61:54:fe:f0:12:57:89:66:68:bb:04:6e:30:ef:14:
                    71:49:2e:55:4b:cc:c4:03:03:12:51:32:79:bb:c0:
                    1c:9a:18:a9:9a:d1:36:09:1c:09:8b:3f:a3:03:15:
                    b7:fc:03:ef:5a:83:95:09:f4:92:58:37:4d:fe:52:
                    8a:3b:25:41:d9:20:1b:e9:31:0a:15:b2:ee:cd:0d:
                    1b:d3:2b:bd:0a:ba:35:54:4c:1b:87:ea:b5:b1:7f:
                    de:8a:7d:93:07:8a:19:99:b4:4f:46:8a:0a:66:28:
                    d4:db:40:6f:a8:cd:08:a6:c4:46:f0:21:46:7c:1e:
                    af:0d:24:b0:5a:21:ac:d9:3d:e9:db:39:54:90:b0:
                    da:25:6c:cd:b4:11:83:df:ed:5c:05:71:3f:12:8b:
                    20:78:b2:5a:09:f3:40:b7:00:73:b7:8c:11:24:0e:
                    dc:3d:e9:20:aa:f7:0a:03:fb:41:91:e3:71:2c:41:
                    8b:0d:e9:cf:db:b6:ef:fb:77:4a:05:49:0a:a9:e9:
                    50:dc:bb:3b:72:e4:9d:72:14:82:a7:1b:27:16:be:
                    d2:9f:1b:04:7b:8f:59:f5:59:19:2e:69:a8:c9:b8:
                    8e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FA:26:DC:ED:B2:85:F4:A2:4C:C0:50:82:C8:9D:CF:C8:9C:FE:D6
            X509v3 Authority Key Identifier:
                keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:ba:43:1d:e9:d7:3e:96:c9:96:34:8d:46:94:cd:77:d8:
         49:3c:9a:1c:ae:bb:b7:8b:62:31:36:27:73:67:48:09:72:e5:
         34:69:c5:92:89:23:f2:40:f6:d9:4f:5d:03:00:59:40:59:66:
         27:03:20:bf:cd:03:91:0b:25:0e:8a:3e:29:92:f4:72:06:02:
         f1:6d:4d:32:a4:03:17:6e:b0:65:91:9e:7e:49:cb:06:f5:e3:
         c2:a0:38:fb:7b:a9:9b:d6:f7:76:26:aa:f8:31:46:e6:ea:68:
         40:0e:1c:df:4b:d8:a5:8a:b2:a4:03:42:ec:66:0e:23:4e:57:
         9f:ba:18:46:61:0b:91:9a:d6:ec:e5:74:93:78:9a:a3:d8:d5:
         de:99:5d:50:64:11:11:21:e2:db:f6:3d:b4:6e:8b:dd:cc:7b:
         e4:5c:aa:12:4b:3e:b0:41:22:9a:9c:23:6a:1f:9a:bb:33:1d:
         8b:dd:92:0e:85:0e:1f:0c:f8:30:24:05:c7:57:2b:af:1b:72:
         c5:8e:aa:6c:08:29:60:b7:44:11:bf:4d:a7:9b:54:29:0e:42:
         55:e7:a8:bd:ea:8f:83:26:03:31:78:09:ac:29:40:b6:97:1f:
         e6:f9:db:85:95:b1:df:d9:01:30:76:7a:80:97:a1:66:15:77:
         51:7c:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 16:02:17 2024 by rpki-client on console-fra.rpki-client.org