Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File:                     Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier:          4lEemPW9L5xD1ufSPmipR4IsnRzJ0XSuRNqb0diG59Y=
Subject key identifier:   62:5F:B2:FE:89:27:C4:FF:B7:C2:DA:88:0A:04:21:8E:EB:73:7B:D5
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer:       /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial:       0193568A5429A133F0B32696190148566601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number:          1043
Signing time:             Sat 23 Nov 2024 01:02:06 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:06 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:06 +0000
Files and hashes:         1: 1-foSTjDGW_NgrNEibvuEOBGoK90.roa (hash: J0Hdq0yWcCOVybxDLGg8pt0fP9xsyoyLm0B0tSEBQt0=)
                          2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: DFjJjMhz803J1bLm8MDn1Ol1ZiejrftZcDzmoJswb8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:54:29:a1:33:f0:b3:26:96:19:01:48:56:66:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
        Validity
            Not Before: Nov 23 01:02:06 2024 GMT
            Not After : Nov 24 01:02:06 2024 GMT
        Subject: CN=625fb2fe8927c4ffb7c2da880a04218eeb737bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:25:08:3d:1b:19:bd:4d:e4:c7:35:ae:40:
                    7e:a2:a0:d1:be:20:6d:60:69:b6:ec:73:ff:d2:9d:
                    d6:27:a1:60:91:f7:1e:2a:59:23:9e:d8:be:c4:5c:
                    bc:ec:77:4b:44:f1:6a:b3:6a:e9:4a:2e:d2:62:02:
                    20:15:da:c9:4d:40:fd:a8:20:0a:4c:d4:cf:64:fd:
                    3a:b3:77:93:49:95:4d:aa:5e:10:f3:9c:c5:64:b7:
                    87:f4:82:21:d7:70:e1:8a:7e:11:9a:ae:38:39:33:
                    0b:d7:dc:3c:a2:60:de:fb:43:d0:b6:92:de:89:72:
                    95:59:f1:1c:6b:2d:90:e1:1f:ab:61:33:04:2d:c2:
                    ba:fe:cb:31:21:3f:22:3c:45:fc:53:59:da:a1:38:
                    49:8d:d3:da:b4:1e:eb:53:1b:f5:c9:30:f7:51:8d:
                    4c:22:a1:ca:90:b6:eb:6c:57:21:05:e7:ae:f5:09:
                    cf:b3:0a:34:2f:3e:77:db:7e:58:51:01:bc:54:c3:
                    a1:27:72:0d:d3:d1:5a:26:01:0d:d6:76:40:ed:2d:
                    9d:51:cd:d8:b0:30:1c:ff:a9:92:38:e6:e5:74:a5:
                    88:03:56:d7:94:a9:40:51:93:64:a1:14:66:5e:85:
                    7c:6f:21:d6:31:4d:01:89:46:2d:fe:d3:9b:d8:bb:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5F:B2:FE:89:27:C4:FF:B7:C2:DA:88:0A:04:21:8E:EB:73:7B:D5
            X509v3 Authority Key Identifier:
                keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:84:ad:14:f2:44:f4:d2:32:07:b9:8b:1b:65:02:6b:cf:bf:
         6b:ad:35:26:d1:66:7b:35:51:04:d2:4c:7d:77:6b:a8:78:5e:
         5f:c7:a4:73:23:9c:da:c8:1c:88:5b:6e:9e:f0:3b:00:c7:1b:
         a0:7a:61:9d:1e:a9:07:99:37:9b:99:0e:36:41:e1:99:bd:ef:
         d6:f2:a1:4c:4c:d7:09:45:6f:13:94:37:91:84:da:b8:c3:91:
         d5:bc:31:2d:c6:3e:8c:00:db:78:1e:8a:74:a6:54:e3:f6:15:
         17:38:35:ae:64:b1:8a:bf:12:34:da:13:78:78:99:ec:c7:d8:
         bb:f9:14:8b:63:16:8a:bc:48:83:a3:ed:5f:a4:22:c4:16:7b:
         ef:d5:2f:ee:98:ba:76:4c:b0:54:e5:76:a2:0d:ad:58:4c:3a:
         15:72:7f:d5:80:f4:e7:85:23:1e:cc:d7:75:bb:3d:a2:8a:ca:
         58:d6:ca:ab:b7:68:f4:2d:f6:74:c9:27:2c:c5:2b:50:60:05:
         8c:78:bb:5e:f1:ae:8b:8a:0a:66:f9:75:7e:ad:7f:07:26:ac:
         53:82:4d:0f:13:dd:14:72:b1:08:e3:b9:5a:7c:f0:18:ee:ac:
         db:70:5f:b5:2d:c0:af:c2:2b:d9:32:b5:74:4c:26:9c:b5:d1:
         c8:8a:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:42 2024 by rpki-client on console-ams.rpki-client.org