Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File:                     QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier:          xN+InvNNeelsAhUaO5pNlgf5BNiO9v9AzsJpQMa0sJM=
Subject key identifier:   DD:AB:88:2F:41:0C:F2:7A:A5:90:0A:9B:2C:82:B4:BB:17:9F:F6:5E
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer:       /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial:       019355AD56F4D712266622679DB6C7B07679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number:          1379
Signing time:             Fri 22 Nov 2024 21:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:43 +0000
Files and hashes:         1: 5ZrHKq_emjY0DN_HCxxxwzi5GZ0.roa (hash: 0/XBHhbDCH8XKIpuFct3gJL2Il9ngqrERiB17LyeUOc=)
                          2: EX44NIcEjAD6PZ12OCDPpP-Jiv4.roa (hash: 6W4hzLcVlAUjZ6M6SljKI+zlwB7g4pOMiRImC5/V+Tw=)
                          3: Q4Qrx1lY6u0J4PiNMw4U2fr_So0.roa (hash: W3gKTD/mHARhaxz1PjRkFgpz96KBtCOx16uPIa0UPls=)
                          4: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: zbkwnxH7DFMxBYbmwfQSulyppFIqQOCYOuhJVkryIpQ=)
                          5: aSD-04cdpeZA5G_ag72kkiS6SOY.roa (hash: AhdmABb0h6X8dKRHqiJsq+GfIzZ6Vtz/fYSMrp8vs5s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:56:f4:d7:12:26:66:22:67:9d:b6:c7:b0:76:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
        Validity
            Not Before: Nov 22 21:00:43 2024 GMT
            Not After : Nov 23 21:00:43 2024 GMT
        Subject: CN=ddab882f410cf27aa5900a9b2c82b4bb179ff65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:c4:37:0f:83:98:49:f5:a3:24:77:c6:b8:
                    77:07:b9:3a:c9:9b:d6:9f:e1:21:4e:13:74:44:65:
                    89:f0:d5:ef:de:81:8e:1d:1b:df:70:e5:d0:16:53:
                    22:d9:c3:a9:85:b1:fd:fb:67:77:b4:5e:96:c8:b5:
                    a5:61:3d:5d:32:1e:1d:6f:21:40:f0:e8:92:21:a4:
                    a0:ac:da:5f:72:fe:44:c8:e3:77:1d:81:a2:7e:8c:
                    e0:0e:b0:40:ba:e5:f0:46:60:4f:c1:bd:c1:d7:62:
                    3f:bc:75:b5:34:38:b1:71:dd:af:50:7a:d8:46:17:
                    66:b3:d8:4b:2f:b2:90:99:c2:25:b6:70:a9:d7:fd:
                    c2:16:ae:d1:f5:52:d1:19:d4:22:52:bf:15:b7:45:
                    b7:77:65:39:6b:74:35:6d:73:81:dc:4f:18:12:b7:
                    6d:ff:36:c2:54:d3:23:bd:fc:52:00:87:f5:f3:03:
                    6e:89:9d:80:dd:bc:29:a0:9f:1d:23:82:f3:fb:34:
                    47:fd:32:f6:7d:26:9e:21:b6:52:42:6f:ed:5e:2b:
                    94:d7:48:85:e2:db:ea:b4:f3:2b:51:c5:ef:50:12:
                    cd:37:0f:d3:4e:75:11:16:e4:49:30:f5:1a:02:ae:
                    fb:d1:a8:2a:5f:89:10:5b:6c:21:78:b8:17:c9:9f:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AB:88:2F:41:0C:F2:7A:A5:90:0A:9B:2C:82:B4:BB:17:9F:F6:5E
            X509v3 Authority Key Identifier:
                keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c3:fc:9b:04:66:55:64:3e:43:e5:89:17:95:40:a7:53:cd:
         bb:b0:2d:54:f2:df:cc:cc:bc:f8:b4:14:bc:0d:20:76:01:e7:
         8e:6f:0c:1b:a2:ca:d0:92:ec:3d:92:f9:5f:00:96:cc:ed:c3:
         69:ab:a1:e6:10:9f:fd:3a:ba:1f:60:fc:99:f6:09:61:86:b4:
         09:ba:f2:a1:37:0c:3d:e5:ae:0b:bf:a3:d2:d4:36:b8:e5:ee:
         b0:4b:39:51:48:cb:16:c7:db:ea:b4:9f:9b:36:55:de:1f:69:
         2d:24:d2:31:69:a8:e9:aa:9d:d2:7e:3d:56:55:39:27:15:d4:
         6e:08:1c:b2:d0:69:c0:22:7e:ec:91:f5:0d:d8:4d:ac:c5:d5:
         62:c6:7a:61:39:78:2d:67:cc:f5:d2:a1:ba:c7:17:8c:57:30:
         7f:4f:dd:08:54:56:d7:4a:04:01:3c:40:82:00:01:01:93:af:
         1e:55:bf:8d:a3:18:72:0e:97:79:9f:48:6a:7e:06:23:61:3d:
         19:25:cc:c3:5d:08:a7:af:29:d6:7f:b0:4d:70:cd:ad:b1:e2:
         fa:80:4c:44:83:d1:e4:68:af:77:63:4a:ed:31:d2:06:ec:42:
         d0:3d:f8:f7:b9:a7:25:e6:f3:37:33:e0:ed:2f:fb:ef:af:1f:
         18:01:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:20 2024 by rpki-client on console-fra.rpki-client.org