Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
File:                     q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft (raw, json)
Hash identifier:          jL5wuKesJh3VBt1qTqN0OnzsGDNSIgwi/svPG/Q7Adc=
Subject key identifier:   DC:3A:7E:2F:E6:C1:26:17:DE:5F:74:FE:63:64:DE:2D:D8:64:3A:4D
Authority key identifier: AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
Certificate issuer:       /CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Certificate serial:       018F866C85F0D961C97A08854E698819F44C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
Manifest number:          076A
Signing time:             Fri 17 May 2024 12:00:10 +0000
Manifest this update:     Fri 17 May 2024 12:00:10 +0000
Manifest next update:     Sat 18 May 2024 12:00:10 +0000
Files and hashes:         1: 8Uz8OUotVKCm5p8Tq2H7fr4Yq2A.roa (hash: CkLP+Za6tFv9nsYDrtlhZxFf/stXtZj73eh6qoJ8h4o=)
                          2: q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl (hash: FJpAct9f/8L4gSO1qLC9t32jUSViSNxvr4FSPKVRQ0Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:85:f0:d9:61:c9:7a:08:85:4e:69:88:19:f4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
        Validity
            Not Before: May 17 12:00:10 2024 GMT
            Not After : May 18 12:00:10 2024 GMT
        Subject: CN=dc3a7e2fe6c12617de5f74fe6364de2dd8643a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:96:c1:8e:f6:3f:b4:c5:ca:29:91:76:3b:
                    f3:29:48:a5:48:70:4b:48:10:81:dd:53:45:8b:3f:
                    1f:70:28:c1:fb:2c:b2:6a:ba:f6:8e:8a:58:9c:b8:
                    4b:fe:cc:f2:eb:b4:ee:7b:44:14:9e:a8:a0:a9:f0:
                    4e:a6:49:f4:64:bc:a2:5e:82:11:02:44:e6:83:f8:
                    fa:3a:46:a0:a3:7c:8c:0c:fb:82:a1:eb:05:e5:5e:
                    f3:84:09:12:9f:3f:a6:a0:b2:82:27:cb:6d:bd:ee:
                    f5:b5:e0:c5:6f:c4:20:21:81:5e:f6:a0:6e:af:11:
                    3f:be:ea:bc:dc:2d:ef:5a:c5:cc:7a:c6:09:9c:b0:
                    09:fe:6b:a3:c2:75:eb:a3:34:60:62:7e:f7:37:c0:
                    2f:29:bd:d4:7c:4f:9c:32:cb:87:b2:67:63:ae:d4:
                    ed:37:5f:2a:4f:51:15:4b:b6:61:0c:45:6f:ad:90:
                    fa:19:eb:bb:54:ff:cf:68:6c:4b:e4:d7:cb:23:d4:
                    46:95:18:6a:f3:64:02:c0:15:47:46:58:94:f6:11:
                    a3:3a:ef:a4:41:4a:00:5b:1f:4a:2d:52:f4:36:3d:
                    1a:4c:0b:11:02:68:f9:da:87:78:a5:ee:70:cb:c7:
                    b6:a4:d1:f8:72:d5:60:e2:a2:a2:2a:90:78:13:9d:
                    01:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3A:7E:2F:E6:C1:26:17:DE:5F:74:FE:63:64:DE:2D:D8:64:3A:4D
            X509v3 Authority Key Identifier:
                keyid:AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:81:bc:0e:ec:1b:44:60:ee:5e:90:cc:1d:91:89:25:3a:2b:
         14:ad:78:47:c8:30:8b:b0:ad:59:8c:be:6c:9b:c3:73:40:2d:
         c3:7c:dd:b9:89:52:a5:cf:dd:34:71:bc:0d:64:43:a8:3a:a5:
         bd:ba:d7:f2:fd:a2:f8:44:df:3a:32:70:48:42:9e:53:90:a2:
         76:7e:bb:db:6a:db:a9:a4:1d:59:34:34:61:8a:06:d4:14:c2:
         f1:25:c5:01:b0:26:34:b5:dc:c8:80:3f:c4:99:2b:88:33:63:
         7a:5b:d4:b7:25:fb:c3:e8:d9:7a:21:14:d7:7d:af:b8:bc:f6:
         5e:50:b6:d8:62:f5:3e:34:1a:a0:ae:a7:32:8c:9c:65:6b:3b:
         8f:c4:6b:0d:a4:91:14:a9:43:bf:c9:9a:f1:ba:eb:06:48:04:
         fe:dd:1e:ae:f2:86:7c:4a:fe:f4:f4:25:e6:1c:09:aa:e0:2c:
         12:e3:a8:f0:31:eb:1e:ee:e0:d6:96:2a:f8:8e:26:d0:19:3e:
         c2:57:c2:df:3c:07:90:8c:76:60:b5:af:2b:55:5f:af:3b:37:
         4e:43:00:db:eb:e8:55:4a:99:d5:5e:c8:0c:ad:83:56:45:b4:
         ba:44:50:d3:0d:68:02:82:b5:e3:02:5f:e2:bd:d1:0a:00:ae:
         cf:5c:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:24 2024 by rpki-client on console-fra.rpki-client.org