Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File:                     Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier:          /0DY8Hki9/24U7jTazo1NkMtToTAN1p7Qu7iu0Smrzg=
Subject key identifier:   1D:2A:D4:18:8F:BD:F9:32:B2:03:ED:68:F5:74:75:AE:9F:37:D3:04
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer:       /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial:       0193572E10B50E7EE91742A2F3B8106B05CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number:          0E73
Signing time:             Sat 23 Nov 2024 04:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:56 +0000
Files and hashes:         1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: AC3fqEBDKJJPDNNxcQXibX47bjmeeHJSxwtMIhuS5pY=)
                          2: iU2b5zjrktG_VCdiJW23iWkZgpA.roa (hash: p67lZdIXi/gBMcGsALKb/Xwn0IigHfsXxQfXlI4vrhQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:10:b5:0e:7e:e9:17:42:a2:f3:b8:10:6b:05:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
        Validity
            Not Before: Nov 23 04:00:56 2024 GMT
            Not After : Nov 24 04:00:56 2024 GMT
        Subject: CN=1d2ad4188fbdf932b203ed68f57475ae9f37d304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:79:2f:f9:3e:86:9f:dd:29:36:cb:d4:8b:
                    ef:47:7c:7f:a2:ae:df:ce:6a:ca:59:06:5d:d7:a1:
                    0c:3c:fc:07:ee:af:00:dd:8a:19:69:da:a7:14:f1:
                    41:fd:7f:53:50:d2:b8:a8:a3:08:6f:c1:18:08:a3:
                    b8:cf:1f:23:6a:72:f3:59:0a:6a:11:3b:cd:4c:cb:
                    d5:47:0f:b4:63:9a:91:79:b4:e8:2d:30:f3:86:36:
                    c6:46:e1:66:22:8c:7e:67:56:56:dc:3a:f1:c9:b4:
                    3a:d7:40:db:1b:80:f3:03:55:d0:ea:e1:de:5f:5c:
                    55:24:59:7d:b3:27:7c:46:c1:6a:96:28:14:b7:ea:
                    7d:eb:a8:6b:b1:e4:8b:56:7a:0a:2e:98:6a:bd:8b:
                    d2:b1:87:06:18:d3:72:bb:bd:da:0b:e6:56:76:dd:
                    0d:b5:7d:27:9c:47:9c:9c:1b:92:46:36:df:d3:8a:
                    ae:3a:6c:8a:a5:24:4f:f3:cf:9f:49:5b:fe:b1:48:
                    d5:64:40:18:55:bf:41:79:a4:a6:cd:c4:b2:7a:10:
                    82:bf:89:5a:f9:98:ff:ba:68:a3:d7:81:87:71:22:
                    d2:0b:46:7b:99:88:ce:89:01:ea:a3:07:82:93:d9:
                    0a:a6:42:12:34:cd:8d:d3:7f:95:cb:c4:70:0c:50:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2A:D4:18:8F:BD:F9:32:B2:03:ED:68:F5:74:75:AE:9F:37:D3:04
            X509v3 Authority Key Identifier:
                keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:c1:4e:ad:9f:ad:69:c3:fc:2c:d2:54:05:16:0d:e4:ea:
         17:5d:dd:e1:02:27:15:0c:ab:18:dc:e8:2c:f1:a2:d6:84:6a:
         ea:de:4a:4b:8a:be:99:e0:3c:e9:b7:fa:2f:4f:cf:36:cb:67:
         cd:29:c0:8e:6c:25:42:40:28:9a:73:bf:22:a5:c7:d1:d5:60:
         26:8f:93:d3:f7:c1:6e:6c:51:cb:ac:82:93:c1:16:49:a8:a3:
         aa:e9:db:c5:92:28:61:62:93:84:1c:8e:e9:f5:6a:25:f5:a5:
         ad:c3:3b:7c:7a:28:e8:fd:de:07:3e:15:0d:b7:da:c8:4b:dc:
         37:7d:c0:17:be:db:ec:f1:ab:cd:da:da:b5:1a:98:3b:54:f3:
         61:9a:2b:1f:b9:b7:83:75:73:34:6e:00:21:e9:18:ad:0a:56:
         1a:d6:d5:9e:39:ce:e2:07:80:1a:f3:a7:8d:c3:8c:ec:d3:b7:
         f5:33:e4:04:56:35:4e:56:19:7e:9b:8b:9d:00:9d:79:2a:0c:
         a1:d2:31:ae:4b:42:5b:4d:3b:5b:97:59:b6:2e:d1:de:2f:e1:
         86:59:95:60:b8:16:55:27:4d:46:ae:01:18:7d:3d:66:c7:35:
         24:c9:43:2f:33:57:15:66:70:54:37:43:84:32:11:ad:a0:c6:
         7c:57:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:24 2024 by rpki-client on console-ams.rpki-client.org