Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File:                     Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier:          QT8w9fokzI5cT9GCS7ngRvcccrYfOqhHDhDpfiuTqIk=
Subject key identifier:   78:95:5A:F5:46:3D:B9:E6:DC:B4:F7:41:79:BB:FA:4A:BD:70:69:B6
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer:       /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial:       0193538830DECF3AFA0B7D83489D6A6F0129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 11:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:54 +0000
Files and hashes:         1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: SuF1wqCz1+3eKYKCsbxsQlGNw38cm7Vn7FXvkWFPKIw=)
                          2: Y5O-iH2qCSBMHHZ3oIydR3IfwRY.roa (hash: bCAaRk74inDYImJBN7EyI6QyT8xTKdl269c6x0Gba3w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:88:30:de:cf:3a:fa:0b:7d:83:48:9d:6a:6f:01:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
        Validity
            Not Before: Nov 22 11:00:54 2024 GMT
            Not After : Nov 23 11:00:54 2024 GMT
        Subject: CN=78955af5463db9e6dcb4f74179bbfa4abd7069b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:5e:e7:ab:26:a0:00:d0:a3:3b:a9:59:37:
                    83:a5:33:cc:2d:1c:c8:72:7d:04:0d:43:96:72:f5:
                    64:47:40:fc:00:ad:52:18:7f:0b:05:30:2f:41:d8:
                    66:4e:c3:db:d7:8c:3a:c3:79:6e:19:f0:d4:c0:5e:
                    50:6c:31:ad:98:68:b3:49:3c:09:1a:03:f2:57:50:
                    41:b5:e2:54:a5:37:72:76:a6:59:86:a6:75:20:10:
                    5f:9c:ae:b2:41:a5:6d:63:59:47:b1:2c:4b:d4:66:
                    b5:c1:bf:ec:81:9e:ce:b9:9b:2a:58:2c:1b:ff:fa:
                    92:e9:d6:c4:22:f0:f0:72:70:dd:d2:b3:0c:44:83:
                    8f:8b:b3:41:f3:20:7b:7d:46:6b:6c:09:f4:fd:58:
                    b1:19:22:31:c1:c5:08:7e:8a:3f:9f:0f:98:ed:2b:
                    67:1b:1e:93:35:cd:54:d1:67:2a:dd:0c:9b:25:ec:
                    10:97:10:c2:c0:89:63:ae:fd:96:9e:0f:c1:dd:00:
                    51:24:5e:54:0c:05:df:6e:ee:b5:be:b7:c8:15:af:
                    54:f7:08:5f:1a:12:85:3d:55:70:fb:59:73:3d:45:
                    fe:d4:5e:9e:2b:e4:c4:d7:af:40:4e:9f:04:2a:d5:
                    4a:5c:22:07:7d:f9:cc:7e:0b:d0:10:44:f3:a1:1e:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:95:5A:F5:46:3D:B9:E6:DC:B4:F7:41:79:BB:FA:4A:BD:70:69:B6
            X509v3 Authority Key Identifier:
                keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:0d:b3:54:8e:86:6e:df:b1:78:56:8b:c2:7d:ac:f6:6e:
         5b:f0:57:fa:87:a9:75:23:53:88:80:f6:98:67:57:fe:68:c9:
         d3:43:8e:aa:ef:1d:8d:03:43:77:b3:8e:4e:95:f2:16:38:8f:
         d7:b4:44:f4:56:26:bf:89:67:b2:52:ef:95:4c:b3:8d:71:9f:
         30:a0:ca:69:80:bb:09:ca:b9:39:13:64:b9:19:ee:ee:98:ed:
         cc:bd:bb:63:28:1a:80:22:cc:cc:d4:d1:98:3b:3a:6a:8d:14:
         4f:fc:1d:90:88:34:a7:0b:8a:fc:34:9a:16:f0:b2:0c:38:f6:
         a8:83:91:dd:25:d3:c9:a9:06:53:63:de:95:bd:5e:0f:2f:3a:
         ba:8b:64:3a:d6:af:7f:18:c2:80:66:ab:11:01:17:34:31:3f:
         36:5b:f4:74:51:25:e0:8a:e8:6f:d0:47:62:88:ef:88:46:3a:
         8e:48:db:d7:95:36:d4:8c:68:81:04:81:a7:d5:ff:75:f6:8c:
         56:56:82:d6:c7:ee:f0:e4:c3:34:c4:1a:2a:83:5e:85:14:42:
         04:04:73:d0:b7:f7:ee:b2:99:fb:57:6a:0a:09:5e:6f:54:41:
         56:16:10:f4:f1:e3:ed:e5:52:8b:64:56:8b:19:f8:ce:17:7a:
         06:a6:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:20 2024 by rpki-client on console-ams.rpki-client.org