Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
File:                     QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft (raw, json)
Hash identifier:          SDdcxJqBdvcACo1tH/Gtmu+rhGw9nrsWXnPPSfVflxE=
Subject key identifier:   32:00:7F:21:44:D7:7A:AF:0B:03:4C:62:83:59:D7:FA:5A:A9:F6:0D
Authority key identifier: 40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
Certificate issuer:       /CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Certificate serial:       018F87ED7BB55BF5B493C5A5613D93689498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:38 +0000
Manifest this update:     Fri 17 May 2024 19:00:38 +0000
Manifest next update:     Sat 18 May 2024 19:00:38 +0000
Files and hashes:         1: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl (hash: ztozkrTJ/N4UWZ5AlXubvhuouALjUMYro3pUSF0xEsU=)
                          2: uCtFu8A1Oe6gFi9YzdLYiFqsulg.roa (hash: JDVBQljIWbqGPdqKLdYS/MxJAhx5u3o5ab8hGjgGmf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:7b:b5:5b:f5:b4:93:c5:a5:61:3d:93:68:94:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
        Validity
            Not Before: May 17 19:00:38 2024 GMT
            Not After : May 18 19:00:38 2024 GMT
        Subject: CN=32007f2144d77aaf0b034c628359d7fa5aa9f60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:d0:25:95:29:f5:1d:86:43:cd:2c:1f:4b:
                    b7:a8:5a:49:b9:01:1b:7b:cc:30:90:9e:e7:3e:5a:
                    2b:ae:f0:79:62:52:6c:b6:f5:b0:fa:a9:a2:65:44:
                    73:2c:b6:b4:e7:d8:5a:c5:58:85:e9:52:da:8f:4f:
                    6e:90:f3:74:56:95:8d:76:e5:bf:f2:3c:60:5e:97:
                    f7:2b:4c:bc:a0:69:f5:0f:f9:b5:e7:fd:68:08:a9:
                    68:d4:81:f5:39:e6:5a:1f:31:2e:59:93:67:b8:b5:
                    ff:d6:86:a5:b7:be:99:c2:82:24:c0:56:79:d1:36:
                    6e:8a:83:9f:a4:a3:dd:59:aa:5a:bd:c2:10:dd:c7:
                    f3:43:82:95:25:3a:9f:24:8c:6a:1f:7b:3a:df:c5:
                    9b:8d:0a:7f:11:74:53:d8:2a:5e:b3:1f:b6:39:d4:
                    47:1b:dd:ee:f3:75:ce:49:20:86:ba:db:d4:34:0a:
                    28:c4:6b:42:97:bc:42:de:73:d5:2f:ef:ee:c7:12:
                    af:e1:b7:4c:3d:c4:ef:6b:aa:b4:0e:de:df:6f:23:
                    ca:1f:8e:12:1b:b5:9e:a8:ed:fc:92:a2:e1:b8:cd:
                    49:2c:46:f2:d4:4a:4d:e7:ff:de:df:11:ee:75:9d:
                    54:d1:15:4d:1a:c1:04:72:e2:09:98:6b:1c:0e:c8:
                    a2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:00:7F:21:44:D7:7A:AF:0B:03:4C:62:83:59:D7:FA:5A:A9:F6:0D
            X509v3 Authority Key Identifier:
                keyid:40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:82:32:6f:46:03:d0:5c:8d:8c:78:ac:f9:a5:bc:f8:74:00:
         42:f9:b6:5e:f8:f6:0b:e5:1e:9f:56:07:f6:09:b5:a6:a9:15:
         e4:6b:f0:fc:d5:e2:01:a3:1d:93:6d:f7:db:2f:8c:ac:4e:e2:
         94:e5:be:1a:5e:6a:9f:9f:ff:a1:d9:1a:1a:a4:e4:07:b1:25:
         d8:1c:0c:fe:e8:59:03:e7:85:dc:56:37:f8:20:d9:66:fe:ce:
         f7:3e:3a:11:3e:5d:c0:ee:b0:26:49:aa:22:60:02:8e:bf:b2:
         76:83:c9:49:75:d0:5b:f1:0b:40:da:1b:36:38:22:e8:76:ea:
         a6:51:8a:71:71:2b:fe:33:dc:ec:2a:e9:86:a6:db:ca:e4:9a:
         53:84:e4:c7:a2:2c:06:b2:98:26:0d:97:85:12:e1:66:9c:ec:
         32:0f:37:9c:c0:5f:45:ea:7d:4d:b6:e7:a2:7b:6d:12:41:2c:
         8c:ff:d4:68:f9:1f:ae:a1:c8:a1:2d:8f:b8:69:64:1f:6a:74:
         29:eb:7c:2f:1c:6b:b3:65:68:19:91:35:6d:4f:c3:0e:c0:91:
         c4:b7:cd:ee:15:d0:e5:4a:c1:03:82:72:63:9c:b7:bf:64:af:
         0d:a3:c1:63:f0:f4:9c:d0:15:14:77:6a:27:3f:35:23:0e:b7:
         8a:35:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:00 2024 by rpki-client on console-fra.rpki-client.org