Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File:                     Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier:          xcDeXswCfWioTZGg5ZKjKGG5IGu3egrDdJq8MCl/WrA=
Subject key identifier:   D0:81:80:DF:64:02:92:DF:8D:E1:BB:31:B0:98:05:2B:9D:2D:DA:41
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer:       /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial:       018F934C77905BA13B6DE1F8E233FC9C0675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number:          6D
Signing time:             Mon 20 May 2024 00:00:13 +0000
Manifest this update:     Mon 20 May 2024 00:00:13 +0000
Manifest next update:     Tue 21 May 2024 00:00:13 +0000
Files and hashes:         1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: Byuz8xazB0oiqhKF7KqjlCQMOLjy73KvLPJz/k7CfjM=)
                          2: ccXgisxDCluUSlDGzIlHYvAKCI8.roa (hash: nawAK33fPVJDaEpspuqzaMnkLm1B9BqqdBCnPxd09Oo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:4c:77:90:5b:a1:3b:6d:e1:f8:e2:33:fc:9c:06:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
        Validity
            Not Before: May 20 00:00:13 2024 GMT
            Not After : May 21 00:00:13 2024 GMT
        Subject: CN=d08180df640292df8de1bb31b098052b9d2dda41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:19:9b:56:bd:0d:d5:e1:ba:52:5a:52:9f:
                    62:29:86:7c:ea:c8:ea:a3:18:97:3e:7c:5f:de:4f:
                    7e:53:f1:2d:95:80:37:ee:fa:2c:6f:17:d0:1e:d7:
                    10:3d:2c:57:01:4c:53:70:a3:3a:5c:b4:01:ea:0b:
                    9a:45:37:ad:c6:67:ca:90:db:52:3c:a6:50:fc:c6:
                    38:7e:37:db:23:d7:a4:44:4c:c1:1d:50:b2:06:89:
                    ba:28:0b:9d:6e:f5:ed:26:27:5d:71:16:6d:92:33:
                    eb:63:7a:40:c6:bf:a6:66:22:c4:8a:5e:fd:a7:86:
                    6f:05:72:4d:6d:7e:d7:70:7c:3d:31:04:a7:b1:8e:
                    bc:c2:d8:60:cf:61:9d:e5:8c:49:13:87:a9:08:92:
                    57:63:4d:c9:3e:b6:d0:8b:f6:82:07:34:9a:8d:9a:
                    35:b3:c8:2b:1f:e6:7e:04:1f:0b:74:85:81:3d:9c:
                    f0:5f:8f:8d:00:1d:9e:45:78:93:65:f8:32:3d:33:
                    66:57:27:c3:f0:48:bd:3e:58:f6:a7:28:67:6f:fb:
                    68:54:42:84:0e:76:2a:4c:c5:fe:0f:ed:5f:b6:02:
                    fd:7c:d2:5f:1c:3a:db:ea:29:a1:14:05:72:f5:a1:
                    e8:bb:0b:60:3a:d7:06:f2:c0:66:ec:75:47:05:ab:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:81:80:DF:64:02:92:DF:8D:E1:BB:31:B0:98:05:2B:9D:2D:DA:41
            X509v3 Authority Key Identifier:
                keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:d9:fb:bf:e4:0c:55:fc:77:7f:06:48:00:15:67:43:db:
         ba:e0:ad:b3:dd:42:45:ef:3f:5b:1d:c8:2c:7e:bf:b8:f9:c2:
         69:66:d2:04:b8:aa:4f:bf:9e:e4:11:ea:b5:aa:54:c7:5c:f5:
         7d:2e:f1:ab:97:ef:34:87:15:d6:40:59:c9:68:4f:e0:cb:71:
         31:95:c6:f3:47:9f:03:94:01:9b:91:98:ee:82:16:14:d4:ba:
         4f:43:26:16:2e:c5:78:75:6a:6d:fc:17:fd:43:6c:05:90:d3:
         e1:35:23:8e:e0:e6:f7:0a:ef:e4:c4:1c:a6:33:c9:31:5d:f4:
         69:0f:dd:5f:0f:97:5f:ef:fa:8d:58:e1:a7:85:57:7f:40:5e:
         41:12:9c:c5:a6:b0:49:23:b7:4a:ca:36:87:2d:a1:ab:9a:50:
         17:cb:de:e6:3f:93:cd:99:ea:e3:31:8f:a2:5e:80:6d:a7:6f:
         03:0d:0e:44:e7:0a:75:54:e4:e6:bf:f3:af:39:e3:b1:bb:2c:
         3a:ed:84:4d:65:82:1e:c4:54:d1:4b:6e:ce:08:27:4c:ac:25:
         55:7d:17:2a:25:10:83:0a:eb:e3:b2:7c:db:d4:d0:6c:f6:d5:
         cf:c7:5d:b6:0b:f5:96:d0:7e:16:67:b8:e3:66:28:a1:a9:ba:
         59:c5:9f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:50:07 2024 by rpki-client on console-fra.rpki-client.org