Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File:                     qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier:          JrxlHaMv6UDVGVKm5r6CO0wW8pvazP6kAfGaG9UGqO4=
Subject key identifier:   85:1E:A3:9A:88:0D:01:62:75:86:07:3E:38:2A:53:8A:86:56:7B:E1
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer:       /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial:       0193549BB935000D6DDF1D0220E0FFFD4920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 16:01:51 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:51 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:51 +0000
Files and hashes:         1: ovpN7DAzetUAEvUUc_oJ58-ZvVI.roa (hash: aX6lubQ4bnoYOPmwT0h9E+HHOuDlrRQrE3iqiMz/gv0=)
                          2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: GFaBLwr34LXBWXHBFVlRmivsHhrqElB25Jv5x7WuYmU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:b9:35:00:0d:6d:df:1d:02:20:e0:ff:fd:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
        Validity
            Not Before: Nov 22 16:01:51 2024 GMT
            Not After : Nov 23 16:01:51 2024 GMT
        Subject: CN=851ea39a880d01627586073e382a538a86567be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:ea:c1:49:09:a5:45:94:3f:6f:bf:2a:4a:
                    62:a9:4e:10:73:46:26:cb:86:5e:95:75:b6:2f:ae:
                    18:3e:ee:87:a4:75:cf:35:86:fd:ef:23:11:e1:6f:
                    05:b3:a1:dd:ff:fe:bc:06:ad:71:26:7d:21:e8:7a:
                    d8:89:8f:7b:a6:ef:d3:68:d9:ba:5f:fe:cc:6c:c9:
                    4c:34:c6:35:51:0a:e7:79:5b:49:7d:78:ad:93:09:
                    09:86:35:05:be:9c:e9:86:e9:03:1b:fb:cb:36:33:
                    f2:09:df:e9:42:23:0b:34:2d:8b:7c:4d:c7:83:95:
                    14:90:5a:61:9c:03:12:5b:61:46:65:a9:8b:0e:2a:
                    ec:39:7a:d5:7a:8d:6d:9b:37:ac:b5:ec:f9:99:c4:
                    dc:33:60:71:2f:13:d6:81:ac:5d:6c:d4:07:ae:8b:
                    11:a8:af:aa:4e:24:8d:2a:95:e9:0c:8a:d1:3e:89:
                    4f:25:fe:3c:5c:1e:42:11:b2:2b:b1:b4:5a:a6:6f:
                    bb:95:3e:07:03:c9:4e:83:44:97:04:27:8f:45:2b:
                    d1:d2:57:4f:b6:e3:14:6e:31:88:83:5b:b3:a1:93:
                    f7:1a:a5:bb:6f:86:58:15:22:ed:af:5a:d2:ec:d6:
                    06:3a:63:2c:ac:05:8c:2a:d4:1c:e9:fe:52:30:90:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1E:A3:9A:88:0D:01:62:75:86:07:3E:38:2A:53:8A:86:56:7B:E1
            X509v3 Authority Key Identifier:
                keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0a:a4:5b:04:a7:f7:f5:8f:e6:38:3a:4c:23:5d:f4:28:2b:
         77:fb:ff:6b:6c:ec:0c:09:dc:69:8e:16:8e:4b:86:8d:54:6e:
         d8:58:c1:bd:8d:5a:fc:4d:ef:07:29:cc:e8:8b:fc:d2:37:f9:
         ec:c0:b9:0d:aa:86:c1:cb:49:0d:79:e6:c9:66:a5:b2:47:6a:
         57:57:48:4a:02:58:5a:d1:a2:03:f8:11:de:16:48:16:89:14:
         db:01:b7:93:33:72:07:2f:fb:e1:41:c8:29:d1:c5:d5:45:a6:
         06:26:ad:2d:3c:c4:17:c3:99:4f:ba:dd:5a:3b:cd:a5:34:45:
         4f:54:e3:d1:00:60:0b:1a:00:2a:e4:4e:8b:16:52:37:04:01:
         7a:ab:13:9f:cb:ce:09:0c:b5:56:26:24:56:7c:74:b6:ac:69:
         f6:03:db:4f:b5:0e:e3:37:48:98:84:3a:e4:8e:09:17:e1:33:
         f8:de:db:03:30:f4:e0:da:94:2e:9f:1b:7e:c5:44:0d:5c:1b:
         ce:9b:13:11:08:3d:80:38:1c:a7:08:8a:cf:8c:f1:fd:7e:eb:
         e8:d2:1a:26:fa:90:d8:15:86:56:e1:56:bb:62:2e:e2:f0:81:
         71:c9:00:75:69:ef:71:39:a0:1d:d0:09:ec:71:6d:a9:3c:99:
         a5:0c:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:27 2024 by rpki-client on console-fra.rpki-client.org