Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File:                     qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier:          mIkmVSOu9Vg9FKgug9FopTWKBlFyBWG7odJ/swd9vK0=
Subject key identifier:   59:3A:20:7A:EF:FE:C7:11:2F:8B:EB:1E:CD:6E:66:CA:D0:62:5E:6B
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer:       /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial:       019356F71EEB644859B56F9394E7B46B45A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number:          0F59
Signing time:             Sat 23 Nov 2024 03:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:55 +0000
Files and hashes:         1: 656nYURxY3eIKKADyW7vtfz2QvE.roa (hash: WBUvRjg+A6FKpkAnfu2lffuT8cUZiY6w2S0wGvI5L/g=)
                          2: hHmErcH__x5E9mcORvdogMmdR_w.roa (hash: 0umHWRSP+ZBCxm9D15dqF4xRqK2KsVhu/THCSrFk+8w=)
                          3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: XlyxqVBbBiR2Co8LljjAsNXfynmke13jdiuRy/9d5B4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:1e:eb:64:48:59:b5:6f:93:94:e7:b4:6b:45:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
        Validity
            Not Before: Nov 23 03:00:55 2024 GMT
            Not After : Nov 24 03:00:55 2024 GMT
        Subject: CN=593a207aeffec7112f8beb1ecd6e66cad0625e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:7e:32:26:b3:a3:03:1f:b5:eb:c2:c1:55:
                    16:7d:6e:94:02:70:20:c5:57:99:43:87:13:24:ab:
                    11:01:ce:fb:b5:77:a5:38:3c:03:a5:19:d6:ce:ab:
                    32:2a:db:bb:87:b6:49:3d:03:01:58:d2:59:bd:70:
                    e5:62:1f:76:c3:fe:77:45:8c:d6:43:1e:89:6b:75:
                    27:98:1b:1c:f3:de:03:c7:35:57:2e:3f:f7:3b:6c:
                    53:3c:66:9a:f4:de:e4:a2:99:0e:3f:6d:4e:0b:d3:
                    78:5a:a4:be:d1:30:27:37:4d:ac:21:b1:bb:bc:11:
                    cf:9b:52:f2:3f:59:a9:73:d5:5a:54:81:a5:77:18:
                    60:d7:01:28:68:23:22:db:ac:b1:8d:32:52:d6:d5:
                    79:5d:f1:32:e1:dc:89:dd:52:a5:ed:e8:a3:68:52:
                    41:06:cd:96:e7:38:5c:47:b5:04:e3:e0:6e:18:dd:
                    5d:e0:be:93:28:8a:ad:69:26:c1:73:8e:80:3c:ba:
                    08:56:b6:7a:b6:cc:e0:d6:4e:0f:e0:5e:ed:5d:3e:
                    53:17:bc:f9:5a:5f:6b:60:9f:1f:1f:27:87:12:98:
                    8c:6b:7d:4e:a2:6a:5b:3b:40:e7:98:37:44:3e:56:
                    aa:6a:b8:58:76:4f:ad:c9:8a:ce:b6:c0:17:67:54:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3A:20:7A:EF:FE:C7:11:2F:8B:EB:1E:CD:6E:66:CA:D0:62:5E:6B
            X509v3 Authority Key Identifier:
                keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b0:cb:d8:92:2d:74:13:8c:e5:e4:f7:e4:12:83:f3:ce:ab:
         20:8b:fd:1a:48:c2:aa:a5:66:99:83:5e:bb:30:3c:83:cb:6d:
         44:b9:c0:d4:4f:8b:77:e2:4a:dc:91:e0:51:f8:f4:be:85:b6:
         8b:ef:1b:a9:c4:84:04:82:46:86:c3:ce:32:bd:a5:10:a3:86:
         32:7e:ab:92:60:61:15:c7:95:99:d0:43:d5:ac:e1:37:a1:ac:
         9e:12:74:31:d4:a3:bb:0b:ba:32:60:1d:9d:6d:33:26:94:f5:
         34:d8:5a:f2:1c:db:ce:8a:b0:0b:42:23:be:c6:d8:31:d2:e8:
         6a:a2:fe:b1:0e:89:20:76:1e:a4:6c:1e:69:e4:6d:62:c2:82:
         fb:11:2e:27:6d:11:02:dd:f4:af:95:05:a9:4c:1e:9e:dc:1a:
         6b:20:48:37:d3:76:dd:82:13:4f:fd:7c:b6:1a:5f:43:9f:dd:
         7a:9e:56:84:08:71:0d:2c:4b:91:da:b7:6d:ee:b3:aa:ba:e1:
         cb:c5:53:65:c7:b7:91:d3:c5:d3:ab:7c:89:47:e2:fb:22:6a:
         5b:eb:f4:d2:f6:30:b1:22:13:70:d9:c1:71:01:50:78:e7:92:
         50:78:e3:56:2f:2f:bf:ce:d7:50:5f:79:66:24:e9:ac:ee:b4:
         a9:b6:02:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9x7rZEhZtW+TlOe0a0WpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWM5Yzk1YTU4YzM4MTFiZGE5NWRjODNjMmU0ODdhMjAw
YzRjMjUwHhcNMjQxMTIzMDMwMDU1WhcNMjQxMTI0MDMwMDU1WjAzMTEwLwYDVQQD
Eyg1OTNhMjA3YWVmZmVjNzExMmY4YmViMWVjZDZlNjZjYWQwNjI1ZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWN+MiazowMftevCwVUWfW6UAnAg
xVeZQ4cTJKsRAc77tXelODwDpRnWzqsyKtu7h7ZJPQMBWNJZvXDlYh92w/53RYzW
Qx6Ja3UnmBsc894DxzVXLj/3O2xTPGaa9N7kopkOP21OC9N4WqS+0TAnN02sIbG7
vBHPm1LyP1mpc9VaVIGldxhg1wEoaCMi26yxjTJS1tV5XfEy4dyJ3VKl7eijaFJB
Bs2W5zhcR7UE4+BuGN1d4L6TKIqtaSbBc46APLoIVrZ6tszg1k4P4F7tXT5TF7z5
Wl9rYJ8fHyeHEpiMa31OompbO0DnmDdEPlaqarhYdk+tyYrOtsAXZ1TzMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFk6IHrv/scRL4vrHs1uZsrQYl5rMB8GA1UdIwQY
MBaAFKqcnJWljDgRvaldyDwuSHogDEwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2Et
NDFhMDY3NmVkZDYxLzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2EtNDFhMDY3NmVkZDYx
LzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrDL2JIt
dBOM5eT35BKD886rIIv9GkjCqqVmmYNeuzA8g8ttRLnA1E+Ld+JK3JHgUfj0voW2
i+8bqcSEBIJGhsPOMr2lEKOGMn6rkmBhFceVmdBD1azhN6GsnhJ0MdSjuwu6MmAd
nW0zJpT1NNha8hzbzoqwC0IjvsbYMdLoaqL+sQ6JIHYepGweaeRtYsKC+xEuJ20R
At30r5UFqUwentwaayBIN9N23YITT/18thpfQ5/dep5WhAhxDSxLkdq3be6zqrrh
y8VTZce3kdPF06t8iUfi+yJqW+v00vYwsSITcNnBcQFQeOeSUHjjVi8vv87XUF95
ZiTprO60qbYCrA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:50 2024 by rpki-client on console-ams.rpki-client.org