Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File:                     QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier:          M91m8MteMd7hKpY/xtFe9lhIYVk3oBlvw9Pdmku3+DU=
Subject key identifier:   3E:E2:FD:9E:B0:11:34:BA:E9:A5:13:EA:D8:F1:9B:AA:68:13:A7:32
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer:       /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial:       018F874A0A3EA56D1A70F483A1F572F696DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:07 +0000
Manifest this update:     Fri 17 May 2024 16:02:07 +0000
Manifest next update:     Sat 18 May 2024 16:02:07 +0000
Files and hashes:         1: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: Ce3yBBcqtXRJpf5/oHyH5mwl96zowHJ6v7YKiBta3/Q=)
                          2: R0lAwkw9UhOcgygqVkBj8V0WbZc.roa (hash: 8VNA7nIP7R7SjFCOcId72IEvPrdL12WGyuI8YqW59kU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:0a:3e:a5:6d:1a:70:f4:83:a1:f5:72:f6:96:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
        Validity
            Not Before: May 17 16:02:07 2024 GMT
            Not After : May 18 16:02:07 2024 GMT
        Subject: CN=3ee2fd9eb01134bae9a513ead8f19baa6813a732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:04:9c:ad:42:ea:d8:4b:e2:ea:4e:40:db:
                    e4:51:35:73:06:29:a7:87:cc:3b:bc:4f:5b:b0:6a:
                    ba:21:7a:68:e0:c6:3b:0c:f5:0e:e6:7e:cd:c6:19:
                    64:93:4d:cc:54:73:50:e4:41:80:0a:65:c6:8b:f2:
                    83:59:d7:d8:91:50:62:dd:02:d8:52:7a:8d:88:a0:
                    b8:5a:20:cf:9b:40:46:89:af:82:31:ef:03:20:9e:
                    e5:fa:9f:b5:6a:a2:03:0e:7e:9d:bc:44:e4:fa:03:
                    e6:43:4d:d9:d8:a4:19:34:f0:e6:36:a6:1e:37:7c:
                    7e:ad:14:62:fe:0f:d6:24:dc:1c:d7:1c:10:bf:c0:
                    6d:62:99:82:52:6e:67:9d:09:57:98:5f:8a:df:63:
                    4a:91:fa:fb:73:f1:8d:03:46:30:f0:58:27:54:88:
                    f6:d0:08:3c:b1:de:51:13:f4:bb:d4:53:29:e7:02:
                    b6:40:8c:43:c1:15:8b:93:84:3a:ca:bb:63:75:ee:
                    c6:da:a4:f3:e4:34:2c:2d:5e:5c:a7:f5:12:be:f2:
                    45:74:fc:cc:6b:7d:41:39:c3:a7:89:26:d1:36:7d:
                    ea:50:de:ff:49:c8:8e:35:48:32:a0:d0:42:7e:82:
                    7d:97:08:17:a1:a2:d3:4b:a4:42:d0:11:52:90:63:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E2:FD:9E:B0:11:34:BA:E9:A5:13:EA:D8:F1:9B:AA:68:13:A7:32
            X509v3 Authority Key Identifier:
                keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:25:e7:0f:8e:74:d8:0f:9a:05:e2:e4:14:0c:a3:4f:e9:96:
         c6:f3:70:6d:39:96:f9:8d:05:c0:47:c8:cf:c0:99:52:14:14:
         af:15:16:74:fc:88:3d:e5:82:48:49:70:a4:03:3b:b7:37:c5:
         c5:8f:2f:2c:b6:d9:ef:f3:fa:86:c1:4e:d9:e8:4a:ce:e5:06:
         2e:49:2f:83:83:0a:ae:d7:0e:88:79:68:ee:44:66:7b:a4:b6:
         53:36:44:57:4d:c5:05:b8:19:e0:b1:6b:1e:66:c2:f2:fb:5a:
         86:49:e7:71:2b:8e:32:7d:17:e2:f5:5d:42:05:c0:b4:48:bd:
         c8:b5:78:cb:b8:4b:ce:4f:ef:ea:96:f2:36:9f:f0:db:f8:a9:
         47:6f:2f:b3:2d:2d:46:c3:89:de:36:e3:ac:b1:3d:40:fe:6e:
         b8:c8:03:e8:af:bf:03:4e:22:b5:a4:95:85:26:bc:d8:8a:48:
         0a:9b:f9:64:fe:33:ee:74:e0:3b:10:9c:cd:84:fc:07:03:0b:
         9f:42:8e:c9:d6:c2:01:33:de:28:0b:d5:cc:80:a5:e1:b9:f3:
         e6:3c:8b:dc:3c:70:6e:c2:17:b4:b4:28:70:60:64:a1:6c:8c:
         25:c5:55:6b:f2:43:e7:de:54:e7:f2:0d:25:6a:73:05:1b:03:
         f0:82:a2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:24 2024 by rpki-client on console-fra.rpki-client.org