Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
File:                     QY1UtVsZKiSLhHI026US-XYMq_o.mft (raw, json)
Hash identifier:          XJAWet3rtQVFhvPOWU8pEXO1/l3LQBzQa5gXQ6mDmJc=
Subject key identifier:   AE:43:D2:B2:7B:1F:19:59:36:E6:F3:76:46:E2:86:E0:83:08:60:10
Authority key identifier: 41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
Certificate issuer:       /CN=418d54b55b192a248b847234dba512f9760cabfa
Certificate serial:       018F8F035289773ABF1CE080EFE6D4F40180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
Manifest number:          0500
Signing time:             Sun 19 May 2024 04:01:50 +0000
Manifest this update:     Sun 19 May 2024 04:01:50 +0000
Manifest next update:     Mon 20 May 2024 04:01:50 +0000
Files and hashes:         1: 9ST2-6cmLJeJkqI_tigXJQPop4U.roa (hash: ZHiU+U5tDdngrBS/baK4idplhbfRtb8E0gPkQQO4y5c=)
                          2: QY1UtVsZKiSLhHI026US-XYMq_o.crl (hash: XH2mn75UE92z4ew4y6tXbned4A4MgRbzHbXMC7YNgzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:03:52:89:77:3a:bf:1c:e0:80:ef:e6:d4:f4:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418d54b55b192a248b847234dba512f9760cabfa
        Validity
            Not Before: May 19 04:01:50 2024 GMT
            Not After : May 20 04:01:50 2024 GMT
        Subject: CN=ae43d2b27b1f195936e6f37646e286e083086010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:6a:49:e2:95:ce:59:3e:52:02:18:ae:08:
                    fa:6c:2c:3f:53:78:50:73:d5:86:6b:b1:28:4b:ca:
                    ce:8c:d8:81:7b:12:ec:fd:7b:b3:17:53:19:ad:b0:
                    13:40:7c:fc:09:7c:55:76:89:57:b7:05:f1:ef:0c:
                    b0:c9:03:90:fc:1e:a3:05:ce:ca:d3:dd:73:88:ec:
                    3b:82:1f:7e:fa:d1:d9:f7:05:c5:5f:9c:0e:96:05:
                    4d:f8:9e:8b:be:ec:6f:0f:d6:fe:f3:68:60:b6:a8:
                    16:b7:5d:33:22:85:ab:85:12:c4:a1:b2:b3:a8:ba:
                    1c:de:13:98:48:6f:9c:5b:98:b6:2e:a8:73:68:78:
                    7b:61:e0:4e:b7:a4:53:da:bf:87:93:b2:aa:65:95:
                    b6:a0:15:0b:90:92:13:34:9b:73:08:aa:95:e4:15:
                    ba:71:91:58:51:77:3a:bb:f4:05:0d:d6:d9:68:6a:
                    10:78:b9:5e:3c:93:55:1e:18:10:14:04:e5:92:61:
                    ff:03:87:1a:c4:00:75:58:d2:2e:29:4d:14:9d:b5:
                    62:54:43:01:00:9e:1f:3d:3e:4d:f5:7e:99:a9:7f:
                    ae:ff:8b:13:6d:9a:54:45:60:2f:99:56:dc:e0:99:
                    be:12:62:4d:c8:81:96:ec:d1:3f:66:2d:f1:30:fe:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:43:D2:B2:7B:1F:19:59:36:E6:F3:76:46:E2:86:E0:83:08:60:10
            X509v3 Authority Key Identifier:
                keyid:41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:43:6d:a9:05:6d:7d:5d:fc:74:7e:97:46:8d:f0:09:88:26:
         09:ef:c2:3e:47:33:e3:7f:25:36:fb:ad:1f:e3:bd:b9:d4:b1:
         23:6e:12:ed:b2:7b:02:6e:f0:12:6e:61:02:84:e1:73:98:b6:
         6b:27:a5:0b:8a:4d:f1:9c:e4:95:f8:49:63:cc:e5:b1:f3:68:
         c7:23:dc:2c:f3:f1:ad:e2:2f:3b:d7:50:ce:ad:aa:4c:3a:4e:
         0c:f2:b6:8c:0d:7d:cf:64:3d:c5:88:bb:00:b4:aa:5f:a8:22:
         14:76:41:c4:1d:ae:10:f7:bc:dc:af:96:6a:30:b2:f1:d5:8c:
         18:eb:3f:aa:bd:bc:43:82:1c:90:bd:a1:96:e4:d1:78:c7:f0:
         08:f7:d8:a1:ac:f7:ba:35:6c:f6:73:33:c4:a2:71:00:2a:40:
         1a:45:8f:41:c5:53:fd:1d:4b:a6:67:15:29:6e:0c:84:9a:bf:
         5a:90:08:9b:20:19:4b:e8:db:5c:0c:23:1b:28:a5:df:4c:99:
         1e:eb:19:da:5e:63:c6:84:96:29:08:ab:70:3a:9e:2d:fc:a4:
         ca:f3:e4:79:ca:10:ce:63:50:84:cd:f1:0b:d5:82:0b:44:c3:
         9e:4c:b7:a3:25:4e:76:60:73:e7:67:25:5b:79:c2:5b:cd:fd:
         15:92:a0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:44:24 2024 by rpki-client on console-ams.rpki-client.org