Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File:                     Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier:          jtA4FuPznBG5BaNcO/KDg2shUfdUJI82zecDFl72O8E=
Subject key identifier:   22:2A:CE:63:B7:82:8F:27:C1:D8:74:61:8D:AB:2F:1A:0B:29:C4:4A
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer:       /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial:       019356894512461199D438D6E4AAA3EB65BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number:          0583
Signing time:             Sat 23 Nov 2024 01:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:56 +0000
Files and hashes:         1: 2I6TlEo7fe1zUGqWpjpYie-fD0A.roa (hash: LxTfYNjhF+ycDS50AQnUP4HhajwC9JOPMYGMPRTcVis=)
                          2: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: dNe2ufiDoMy0J34BFfooGrfZQPaXev6sZAZ/t1JGHKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:45:12:46:11:99:d4:38:d6:e4:aa:a3:eb:65:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
        Validity
            Not Before: Nov 23 01:00:56 2024 GMT
            Not After : Nov 24 01:00:56 2024 GMT
        Subject: CN=222ace63b7828f27c1d874618dab2f1a0b29c44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:3e:01:cf:22:83:a0:57:49:ad:d5:2f:e2:
                    d6:bd:ed:0f:eb:0d:8e:9e:9b:3b:64:67:42:89:48:
                    29:a5:a3:73:b3:8a:a5:81:07:8a:c7:85:b8:d5:2a:
                    33:3a:4a:a5:ed:47:14:ba:4b:ce:13:16:84:df:2e:
                    4f:74:e7:bd:a8:e8:84:29:98:05:96:7d:13:2e:a0:
                    13:04:7e:79:c2:03:2f:f9:63:aa:e2:9d:f4:81:4e:
                    79:a9:db:f4:d7:bf:b6:f1:32:22:76:88:27:a4:7f:
                    24:41:69:08:7c:c9:d7:6f:3e:6b:d0:5c:3e:58:8c:
                    31:d7:c5:cb:b4:66:dc:00:c4:c5:6b:b8:10:b0:28:
                    e3:43:36:79:ce:04:f6:c0:e3:32:71:1d:6e:35:6c:
                    f6:1d:e2:6a:8d:58:81:00:d6:ef:3c:b4:b7:c3:9d:
                    b6:c9:f9:82:2a:96:82:81:7a:9f:16:8e:d2:e9:0f:
                    33:67:b3:ae:5e:c5:25:b7:f0:32:db:a1:3e:d4:37:
                    6b:19:86:76:76:71:d3:10:de:94:7c:c9:15:74:00:
                    d7:b9:ca:f3:7d:47:a2:56:05:a6:42:a3:9b:50:ed:
                    f2:2d:49:b3:86:79:22:50:96:da:a0:8e:3e:86:75:
                    56:0b:42:3b:f8:d7:53:24:5a:30:d0:b9:e5:63:1d:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2A:CE:63:B7:82:8F:27:C1:D8:74:61:8D:AB:2F:1A:0B:29:C4:4A
            X509v3 Authority Key Identifier:
                keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:81:45:95:5a:01:61:e6:85:c2:ff:bc:e3:a8:7d:e3:a3:63:
         e3:c9:8b:14:08:03:fb:9f:98:fb:f2:c1:67:a7:cb:ab:67:73:
         c3:a2:b1:7c:e8:ee:f7:95:cc:6c:88:e4:df:3a:e8:4d:3d:82:
         24:cd:5a:35:40:89:90:b3:12:df:d7:69:27:65:6e:fc:a1:e1:
         fe:be:5f:ff:b1:d1:0f:13:c1:2e:7d:40:39:81:95:47:c6:4e:
         4e:66:c4:70:79:01:5c:8a:3b:d5:e0:98:23:fa:0f:12:e0:7a:
         52:a1:14:4f:0a:58:3c:39:6a:bc:bd:4a:a1:bb:87:9c:c5:ce:
         68:01:08:9e:47:98:dd:d4:a1:20:bd:30:94:19:7f:0c:a8:b5:
         ea:f7:cc:cd:56:40:04:c2:2d:37:51:b9:ef:21:cb:b6:32:f4:
         cd:1b:9a:1a:22:81:84:79:90:39:34:c6:14:71:72:b9:bf:4f:
         bd:97:da:d8:4a:d6:67:5e:ef:3e:d9:7b:39:74:72:16:f9:90:
         8e:e2:31:a0:f5:36:1e:72:85:56:fe:cc:2a:3f:46:af:47:e2:
         2a:0d:18:bf:02:4a:6e:53:fc:44:25:52:09:dd:ba:e9:4f:a8:
         a3:41:4f:a9:2d:04:63:b7:1f:8a:fd:4a:0f:7a:ad:ef:3f:20:
         a2:88:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:32 2024 by rpki-client on console-ams.rpki-client.org