Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft
File:                     QG8BSivHauBObTBNBqrL_I6F1RQ.mft (raw, json)
Hash identifier:          vi/JFxPl8riydIgCoqRnZxb1L/UbT7DUhe7+T8+z7vA=
Subject key identifier:   0D:C0:DD:D9:9B:40:AB:5A:D6:49:97:62:30:97:B4:66:19:51:1C:B1
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Certificate issuer:       /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial:       019365FBF69984F5E78EA83DF371D27FC06F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft
Manifest number:          116D
Signing time:             Tue 26 Nov 2024 01:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 01:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 01:00:31 +0000
Files and hashes:         1: 6rEstb-qApzigvsFg3UbJOJcFlY.roa (hash: GX7UssVR/Tg/KdsWzWnKsERUbKToyzgNF2BsWoKeqKA=)
                          2: 9_LsePrRnG3kWS66LWp7tDq-FQs.roa (hash: caDvpkAIRw4WyP3h0qsJjj4oImK0ugTxWGGPqvkEvJU=)
                          3: Mxd-3hzbMgrofSbAlf1PCLAOx9E.roa (hash: +UNe16m3v6kAWsTmo+BSfNubz54T8NoWKFzGOYyBRD4=)
                          4: QG8BSivHauBObTBNBqrL_I6F1RQ.crl (hash: aXxj55L6Jva0Shl2E9oy5BBrq822KKLcx0pc1AB4d4U=)
                          5: lipYy7_Qkl0X6_DIpmw5w0iMk9g.roa (hash: aI1iTWCogAd5UYBTD2Z81sFjpXHsTB6VnJ2YAZsgqho=)
                          6: mj96qHKA5MOHG5Eh77KoCDPC2Ts.roa (hash: gT53mnUVfnbnP/Y8k2IbSkYM3CdIBHspM4X6skC/9iE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fb:f6:99:84:f5:e7:8e:a8:3d:f3:71:d2:7f:c0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
        Validity
            Not Before: Nov 26 01:00:31 2024 GMT
            Not After : Nov 27 01:00:31 2024 GMT
        Subject: CN=0dc0ddd99b40ab5ad64997623097b46619511cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:78:ac:0a:7b:d7:c3:c0:93:65:23:9c:78:bf:
                    ea:5e:30:00:97:b9:e1:31:ee:e8:c5:af:26:86:96:
                    d2:1f:27:af:ce:1c:d1:cc:54:b2:51:db:68:34:66:
                    0e:fc:65:cb:f7:f9:9f:08:71:24:1a:ac:eb:cb:f3:
                    96:7e:52:9a:dd:33:30:00:55:31:30:57:e6:d0:81:
                    9f:71:35:84:ff:78:ba:f7:90:7c:24:42:b3:fc:0b:
                    22:88:46:26:1e:1d:63:ed:ea:c4:5d:64:b2:39:fb:
                    b5:bd:0e:71:15:e4:35:31:b1:2b:0f:2b:da:50:52:
                    40:d1:15:68:92:e2:ee:91:31:2c:12:a9:d2:f1:84:
                    11:17:34:aa:f5:3c:5c:24:fd:5c:cd:38:e3:dd:df:
                    d5:84:a8:3f:91:32:cf:8b:61:9b:7a:9b:b4:20:28:
                    19:13:cb:c5:91:04:67:a9:2d:b7:ae:ba:69:55:70:
                    a1:19:fa:95:f7:93:b9:cb:0a:a8:70:c1:fc:86:d6:
                    3f:8b:52:c0:27:aa:cb:8c:7b:1e:15:9b:08:a1:cf:
                    94:16:3e:b2:2b:92:ec:11:be:f8:e3:f7:f0:aa:b3:
                    61:a0:f3:6c:45:00:a9:67:20:31:77:0f:92:90:e4:
                    f2:9b:15:66:27:03:15:c8:07:17:03:27:54:4f:e2:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C0:DD:D9:9B:40:AB:5A:D6:49:97:62:30:97:B4:66:19:51:1C:B1
            X509v3 Authority Key Identifier:
                keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f2:bd:f9:84:72:18:4f:04:65:47:de:4f:ca:f7:12:ac:5f:
         9d:a8:f6:6f:06:41:80:c7:6c:f8:16:d4:36:ca:c8:f8:ad:89:
         f7:06:36:b6:53:cd:64:80:f1:96:4d:b8:0d:d9:c9:90:bf:ff:
         d3:d0:66:a0:3f:30:b2:8f:74:78:40:76:8f:06:d8:e4:52:01:
         0e:c6:60:8c:c1:22:1e:01:6b:d4:c2:88:c0:9e:d2:89:e3:94:
         78:65:0f:a5:e9:3c:ab:4f:37:78:53:b0:fd:80:bd:7b:44:38:
         a1:7f:81:1c:dd:9e:2a:73:d8:2c:f1:4e:39:19:85:a5:bc:cc:
         d8:ad:42:9f:1b:e1:85:5a:95:e1:f3:44:71:18:9b:cc:64:35:
         f2:62:b4:7b:04:99:51:c7:07:8d:19:b7:fe:8f:80:58:26:e0:
         62:12:88:ba:eb:21:6d:1c:ae:03:83:5e:2e:81:56:c0:1f:60:
         66:8c:44:3f:8c:28:19:ae:c5:00:b3:0b:f7:4e:da:2d:86:25:
         4c:e0:bd:f2:da:6a:13:25:34:76:94:66:0c:8c:88:b2:06:fe:
         2c:3c:af:05:cb:98:bb:d6:23:9b:d8:96:c7:69:c6:14:ce:23:
         f3:ef:15:a3:ed:4c:8f:7d:19:f1:a8:a6:0c:69:6a:40:0e:e3:
         fc:e3:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:01:15 2024 by rpki-client on console-fra.rpki-client.org