Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft
File:                     qbX_0k0utdXB4c_niwA8S6taLxM.mft (raw, json)
Hash identifier:          BFlLiDEtTlFfV0+lKiKpNfZD2dq+ScdOKEXjfb9Z5Xs=
Subject key identifier:   A9:D7:F7:D4:07:C1:63:56:B0:85:5E:FF:F3:C1:1A:33:A2:6C:7B:6B
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Certificate issuer:       /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial:       018F86A37B8FBB924048237D3BF80F91F183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft
Manifest number:          0939
Signing time:             Fri 17 May 2024 13:00:11 +0000
Manifest this update:     Fri 17 May 2024 13:00:11 +0000
Manifest next update:     Sat 18 May 2024 13:00:11 +0000
Files and hashes:         1: _Qq1JicHvaaUfWv_NQDT4dnJiWM.roa (hash: uYslwVW3FRwc47AwQ6TKAX+6WdzokR+5lG3kZILEN2U=)
                          2: qbX_0k0utdXB4c_niwA8S6taLxM.crl (hash: Qtd362mDEKQIt5rWiltexSRyRFEBAI2HqUicceNUtOA=)
                          3: y8vVXSFUC5w-EtQ1ZVaiywOFXyk.roa (hash: Q2e0Y+s3lPQYT1dNMneQPuY+tAwTjVvlo+hnYp0jgi0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:7b:8f:bb:92:40:48:23:7d:3b:f8:0f:91:f1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
        Validity
            Not Before: May 17 13:00:11 2024 GMT
            Not After : May 18 13:00:11 2024 GMT
        Subject: CN=a9d7f7d407c16356b0855efff3c11a33a26c7b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:bc:53:e7:00:cf:51:b2:5f:9f:42:e2:3a:
                    54:d3:8c:0a:40:b7:a8:67:06:4c:fb:5e:e5:f4:aa:
                    34:6c:0f:00:b2:29:de:83:d8:b0:97:cf:51:2c:04:
                    89:62:85:ff:3e:a9:7f:10:a1:eb:c8:49:8f:b3:b6:
                    e7:b6:2d:76:81:0b:e5:d4:2b:c6:d4:57:fa:1d:8f:
                    d5:28:38:13:4c:93:e3:09:09:69:98:31:c7:01:c1:
                    b3:4a:1b:09:f3:81:0f:ed:5a:b9:a1:18:93:57:37:
                    78:fb:3a:9a:6a:82:f3:ad:a8:74:fe:46:3d:59:11:
                    66:1f:bc:90:19:74:20:4d:fe:5e:5c:47:45:cf:59:
                    67:cb:59:db:aa:62:e3:c7:b3:3b:ce:a8:84:5e:55:
                    c1:27:72:a8:57:cd:3a:ad:e3:1f:7b:12:47:e1:4a:
                    28:35:59:de:75:8e:01:8e:c4:b1:d2:9a:46:12:77:
                    c9:38:63:39:37:b5:45:2c:c7:e4:26:3d:bc:2c:f9:
                    e2:8b:67:98:27:45:e3:95:9b:c4:43:5f:f1:ab:5d:
                    36:42:23:1f:d6:fd:2b:4a:97:a6:fc:59:aa:f4:ec:
                    97:26:86:ef:3d:3f:77:8e:88:7f:9b:a8:95:e8:82:
                    56:f6:49:3c:dd:50:78:aa:c0:00:03:fa:88:fa:5b:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D7:F7:D4:07:C1:63:56:B0:85:5E:FF:F3:C1:1A:33:A2:6C:7B:6B
            X509v3 Authority Key Identifier:
                keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:3b:c2:84:e0:66:12:89:a8:15:8c:05:3e:1b:fc:18:2b:
         e1:a5:fd:99:6e:ca:de:5d:5d:17:13:db:aa:98:4b:59:a7:51:
         9d:f3:e3:8a:a6:cf:18:cf:83:c3:13:28:81:b1:62:b6:df:16:
         05:4b:ef:98:bf:63:9e:dc:e3:0e:c3:12:4c:68:da:30:83:40:
         94:86:27:5d:77:35:46:90:50:a8:46:ab:04:6e:a2:d1:0c:ac:
         7c:88:7a:48:3c:0f:7f:0f:46:70:df:36:b2:94:7a:da:63:d2:
         d7:83:03:cf:cd:1e:04:0a:69:c0:23:8c:cc:1a:da:34:d7:18:
         6d:0d:18:cc:ee:93:d4:d2:63:4e:2a:3a:40:41:db:a3:d9:1f:
         93:19:85:a3:4c:f3:df:ed:63:85:02:1b:bd:5a:62:55:39:d2:
         f7:02:42:e3:05:c6:0f:6a:43:82:30:e2:7a:60:fb:cb:35:24:
         d7:a2:69:17:5c:08:af:16:e0:11:a1:52:ac:87:18:b0:04:2a:
         51:ed:d1:34:8c:6c:09:27:92:af:a9:02:cd:0e:c7:91:c9:55:
         b9:05:25:b3:69:f6:85:e4:5f:d2:f0:61:09:aa:32:73:10:c3:
         63:e2:50:82:70:a1:6a:84:7f:d0:9d:62:bf:0a:d5:0d:53:8d:
         26:c5:01:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:05 2024 by rpki-client on console-fra.rpki-client.org