Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File:                     QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier:          Tl0TbcBwdoixCADGPa+XDjE9fbDstBSSbBdXhwiNMF4=
Subject key identifier:   D6:AE:D2:77:F3:30:7B:D8:39:67:74:54:E7:FE:D2:EE:80:15:68:1D
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer:       /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial:       018F87ED3BA84E2D04374B8E04A62522C857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number:          0585
Signing time:             Fri 17 May 2024 19:00:22 +0000
Manifest this update:     Fri 17 May 2024 19:00:22 +0000
Manifest next update:     Sat 18 May 2024 19:00:22 +0000
Files and hashes:         1: DNtgZodMjrvyOPIZIw8eyc8trYs.roa (hash: hP9R3Xo8GE/Ns8/Fyj6YST/LhbU8TyZGNkw0AaRaOns=)
                          2: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: pzxSYi7dPUMpjBLfn6neo5FQ6qJq37IK0C+cOXRG4Jk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3b:a8:4e:2d:04:37:4b:8e:04:a6:25:22:c8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
        Validity
            Not Before: May 17 19:00:22 2024 GMT
            Not After : May 18 19:00:22 2024 GMT
        Subject: CN=d6aed277f3307bd839677454e7fed2ee8015681d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:28:4b:68:6e:9f:5f:12:a8:29:30:d9:62:
                    37:41:19:55:6d:03:b4:81:70:c2:05:b3:39:16:c6:
                    2d:bb:be:f4:a8:0e:2d:52:16:51:3f:24:a0:41:dd:
                    ba:70:0a:d6:fc:99:ca:7e:c4:0f:62:31:cd:e9:f4:
                    1d:29:b9:06:a8:be:3a:ed:b6:d4:40:c6:dd:47:4f:
                    ab:02:37:47:7b:aa:8d:85:b3:74:fb:90:d6:18:19:
                    2e:f8:92:89:53:e1:3b:b2:cf:ec:b2:b1:a2:a1:20:
                    e9:5e:e6:b0:6d:6c:90:5f:ba:40:09:61:2c:4a:49:
                    7c:df:33:17:e2:3d:a4:86:b7:68:3c:03:c1:80:eb:
                    50:46:31:f9:ac:11:a6:bc:a5:26:a9:38:e1:86:1a:
                    28:0a:6a:8b:d6:7a:57:6a:8c:b1:ce:aa:66:45:12:
                    b7:b8:13:66:39:0b:f9:bb:90:9e:29:44:23:df:c1:
                    f4:6a:3f:10:c7:17:a3:ce:0b:ae:42:ab:c7:80:e7:
                    65:43:64:ad:5a:5f:53:97:2c:f5:a2:0b:d6:cb:83:
                    79:f0:d1:a9:02:39:a4:22:d7:06:95:10:23:42:47:
                    0b:f7:ec:8b:9d:8f:0f:b4:c9:91:e2:d5:d3:52:22:
                    d1:53:79:f2:78:86:82:b3:b2:51:f8:63:58:d1:5e:
                    d2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AE:D2:77:F3:30:7B:D8:39:67:74:54:E7:FE:D2:EE:80:15:68:1D
            X509v3 Authority Key Identifier:
                keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1c:fc:39:94:bc:9c:7b:b5:28:79:68:4f:3f:28:cc:d8:8f:
         be:12:0c:79:65:68:10:5b:e4:81:1f:56:07:80:3f:30:48:62:
         f1:33:50:58:df:1b:50:90:52:91:43:55:e0:d1:fc:0b:79:3d:
         50:77:45:87:82:85:77:2c:26:3c:8b:c2:f3:28:db:ed:90:b3:
         79:db:23:1c:cb:1f:f2:4f:5d:33:ed:78:a8:ba:64:4d:94:0c:
         34:2e:71:5a:95:30:20:0e:37:e3:c6:eb:94:57:e0:66:5c:ee:
         d0:d9:ee:3a:6f:6c:bb:c9:40:97:ee:d2:21:1d:da:94:28:d3:
         cf:16:7a:1b:f1:1f:af:65:a6:da:3a:b1:05:7c:ca:1f:bc:52:
         fd:27:79:29:2b:4a:66:6d:5b:c8:32:48:cc:f9:55:aa:63:51:
         1c:07:84:fc:ce:be:5f:0b:8a:89:c2:84:04:88:24:10:36:1f:
         21:66:2d:22:29:9c:96:36:12:21:64:a4:84:6b:b4:e3:5a:ad:
         a6:be:2c:ff:8c:f0:55:49:8e:cf:4c:f5:c9:ed:f3:23:8f:68:
         e3:8d:77:97:be:3a:f9:93:e2:84:39:33:ec:ab:48:a5:38:59:
         48:5e:74:c6:90:4e:38:76:ed:67:ae:38:62:5b:52:c3:dc:0b:
         9e:0a:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:46 2024 by rpki-client on console-fra.rpki-client.org