Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File:                     QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier:          XbFoQBm+M0/Qa4fN5BCVSJeCVG3PjHzbYVXCgFB9J4E=
Subject key identifier:   51:BA:32:6E:7A:AD:14:7B:E2:E3:A3:11:AE:BA:4D:2A:39:F0:57:F4
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer:       /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial:       018F87497FAB99C9A0F2CF03A008C2CE0A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number:          0336
Signing time:             Fri 17 May 2024 16:01:31 +0000
Manifest this update:     Fri 17 May 2024 16:01:31 +0000
Manifest next update:     Sat 18 May 2024 16:01:31 +0000
Files and hashes:         1: FBYuzNABNIISKIbWuGy0n6f73c0.roa (hash: C1qXJqPyBfyq+ZjURSAxfLc5JG62I6PWusSF08WZ8Cg=)
                          2: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: oYqPRHneDjH7Kd7H/C1dxN8OUD11pWTGeBNX7g0CgnM=)
                          3: jpXabWjOOXfOEWEJvhaXaZdb2mI.roa (hash: bGeS3nnwnLp0nLIlmZMWjnvEpETrzZF2dfHfQgMQmg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:7f:ab:99:c9:a0:f2:cf:03:a0:08:c2:ce:0a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
        Validity
            Not Before: May 17 16:01:31 2024 GMT
            Not After : May 18 16:01:31 2024 GMT
        Subject: CN=51ba326e7aad147be2e3a311aeba4d2a39f057f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:f0:4d:b6:41:6d:17:e4:83:1f:7c:91:51:
                    ba:f5:c2:4e:b0:d0:86:1d:e7:07:77:03:6a:f1:cf:
                    3f:5d:51:19:4c:d5:f5:25:5e:99:53:16:27:e5:6a:
                    ac:c8:0e:bc:30:6d:26:6c:c8:15:6c:09:ba:17:6c:
                    84:e9:dc:5a:7d:50:b9:e8:af:db:bc:09:54:e4:26:
                    b3:e4:9c:b9:bf:5b:55:16:d7:ef:ae:42:d0:83:a1:
                    d7:ac:9f:d0:9a:35:fe:eb:81:2c:7d:c7:2f:b4:fc:
                    15:7c:56:62:3d:f4:2f:66:cc:0d:4d:ee:41:a5:83:
                    80:db:94:a2:36:66:23:23:69:a9:4f:9a:63:3c:43:
                    7e:fc:c6:ab:72:45:87:70:93:2e:bc:be:19:a8:c3:
                    df:17:f5:d8:73:9e:8a:16:fc:ad:25:ce:0f:31:fd:
                    80:1b:9e:e9:25:5f:b2:c4:e3:b5:19:60:2d:e5:b2:
                    86:43:6e:2e:01:60:a9:1b:b5:d0:6f:50:da:12:a8:
                    d7:d8:24:17:27:9c:bf:16:87:33:80:b5:ac:d2:ff:
                    f9:e0:1e:af:40:44:b7:71:9e:c1:d7:84:63:ef:47:
                    b0:d4:65:cf:24:41:1a:9d:71:95:c3:1a:20:ae:20:
                    da:1f:03:b6:b7:7d:b6:ba:2e:94:ca:e1:60:94:50:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BA:32:6E:7A:AD:14:7B:E2:E3:A3:11:AE:BA:4D:2A:39:F0:57:F4
            X509v3 Authority Key Identifier:
                keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fd:c2:9e:c1:a8:80:88:e2:85:31:68:6c:6b:0a:19:5f:57:
         7a:1d:c8:9d:56:7c:31:eb:c3:5d:ce:c6:50:3f:5d:f8:8a:27:
         86:ef:a4:e5:09:fe:e4:30:b6:fd:c2:70:aa:aa:38:01:74:2a:
         1e:3b:4a:f5:91:e6:89:6c:c5:95:f7:a2:f1:3f:80:e1:10:cf:
         a6:e5:49:25:43:d9:55:77:95:33:59:e5:e0:fe:4d:56:45:c8:
         eb:27:7e:1f:c7:69:fb:e7:3d:5d:66:14:77:b6:f1:49:7a:cc:
         dd:e6:a5:84:43:89:c2:93:29:35:10:c1:59:b5:83:d5:0c:0c:
         6a:27:ac:a0:ab:ac:d7:c0:34:5b:6d:d1:b2:b2:bd:a2:71:c0:
         18:8a:02:8e:db:54:ca:4a:27:b0:8a:e4:06:c1:2a:ca:ec:1e:
         2e:a0:f5:70:8d:ce:ff:98:5b:e1:15:5b:91:81:d4:0a:ee:82:
         6a:13:24:19:df:54:ed:ba:4d:24:9b:d9:3d:68:7f:f0:7c:b2:
         0a:2c:bd:50:69:61:17:6d:a9:fa:79:e7:ed:8e:d8:80:45:f8:
         41:52:4c:a7:ef:34:6d:f1:d6:ba:29:d2:5f:7d:95:a4:ae:a0:
         be:9d:29:d9:11:ff:b8:4d:52:32:81:84:1a:25:a8:8a:45:48:
         35:7d:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:07 2024 by rpki-client on console-fra.rpki-client.org