Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File:                     qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier:          6N0Xe2sU6V5jdTPrwZzCOO4Qq6rJ/wUsYw+8PUfDJ+I=
Subject key identifier:   4D:3A:38:0D:71:A8:2D:39:39:03:7A:24:4F:3B:F3:9C:D4:D2:D6:B8
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer:       /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial:       018F88249EB2F1B04B425C7C3ABD0788007D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 20:00:52 +0000
Manifest this update:     Fri 17 May 2024 20:00:52 +0000
Manifest next update:     Sat 18 May 2024 20:00:52 +0000
Files and hashes:         1: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: qk0GdrFQExEMcm1tj+cGsHbh0ar4BAnFWOT+aTNKDg8=)
                          2: x9mJhNPhABZF_opf-agz7gsnwp0.roa (hash: WDm5LxZqvYs7GjiDVlmkjt411Y5mjCisA93cVWCvy/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9e:b2:f1:b0:4b:42:5c:7c:3a:bd:07:88:00:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
        Validity
            Not Before: May 17 20:00:52 2024 GMT
            Not After : May 18 20:00:52 2024 GMT
        Subject: CN=4d3a380d71a82d3939037a244f3bf39cd4d2d6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:f5:0d:e9:d6:b9:7e:61:87:4e:d9:bf:29:
                    52:34:5f:48:07:15:dc:90:a2:57:63:ed:f0:ad:1f:
                    98:c6:fb:16:b0:c5:c4:ae:5f:4a:1e:10:4a:f9:09:
                    6c:e1:76:03:8f:cc:59:c9:b1:c5:10:54:f7:24:93:
                    b8:c4:eb:c4:74:fd:83:06:92:05:93:fd:50:bc:24:
                    11:5c:3b:3f:a6:0d:90:94:56:85:09:01:34:71:eb:
                    f5:43:47:f2:b6:1e:67:a3:bd:75:cf:4e:e3:d3:8b:
                    cf:ff:05:1c:c9:5d:35:75:40:ef:40:f3:e9:64:0b:
                    24:2a:05:0c:9e:eb:b0:37:09:73:c1:c6:45:ef:73:
                    d7:d4:12:77:1b:0b:cb:99:2d:d6:c5:7a:7f:ab:2b:
                    c6:41:23:15:62:79:76:86:c2:2b:e2:39:3f:e3:96:
                    ad:1a:34:53:89:85:a2:5d:35:86:79:51:d4:52:84:
                    6f:83:89:73:56:2d:a0:b5:0a:f6:ee:1e:63:de:0c:
                    f2:95:d9:30:15:02:4f:59:f5:a3:2a:36:43:39:a4:
                    b6:33:a5:54:b5:09:dc:f8:34:1d:fe:a3:3e:75:d2:
                    97:85:0c:cc:85:e2:d1:14:f7:2e:d0:2e:92:ed:48:
                    49:57:91:5a:a4:52:e5:59:36:b4:b1:83:b6:06:ec:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3A:38:0D:71:A8:2D:39:39:03:7A:24:4F:3B:F3:9C:D4:D2:D6:B8
            X509v3 Authority Key Identifier:
                keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:9e:04:66:6b:20:ff:8a:39:16:33:72:9e:36:b1:44:9f:
         93:af:25:74:ff:cf:e4:54:82:ec:46:da:3e:73:51:d6:74:1a:
         31:db:46:5e:97:f7:38:82:ca:62:62:e2:da:7e:2d:6e:5f:0e:
         c6:ba:2b:95:7a:62:1f:ac:1f:ee:c6:4b:b3:97:b0:a1:5e:81:
         97:c9:c7:69:08:5e:f4:61:48:36:82:36:2a:ca:38:cb:d4:52:
         a7:78:47:07:47:e9:d0:cb:f8:e4:2e:f6:2e:3f:ab:ae:db:16:
         8f:31:9e:40:16:9c:c2:b8:8b:66:6f:d4:85:f2:20:a2:7a:1d:
         69:fe:94:5c:df:4d:3b:12:50:02:80:6a:3d:b7:6a:26:67:0b:
         5c:11:da:35:b5:82:9f:a2:be:e0:3a:f1:60:33:b5:2d:2a:02:
         c7:04:4c:b9:2b:f9:2d:13:30:0d:4f:8f:99:36:8a:05:0c:05:
         91:c2:a3:fc:6a:3a:d1:e5:0d:f0:e4:93:ad:bd:bf:26:13:45:
         01:ae:35:b5:2b:64:b3:de:65:83:dd:30:2f:c1:45:44:63:ed:
         d8:bf:ba:47:3f:0d:ba:36:28:cf:43:46:b9:71:31:0b:98:cc:
         08:29:ef:64:09:96:7d:f8:00:b3:dc:71:34:7d:7c:e1:fe:b1:
         2c:f2:dd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:41 2024 by rpki-client on console-fra.rpki-client.org