Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File:                     fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier:          i2MH+kuRWMf/8cHmkFR3xEoeSpk6lliuiNpXJgjLPTc=
Subject key identifier:   E9:90:12:63:D9:3C:11:BD:09:C6:CF:55:76:02:D0:68:D7:80:D9:A3
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer:       /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial:       018F8891E528B2D36646670957F98E65909F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number:          110A
Signing time:             Fri 17 May 2024 22:00:13 +0000
Manifest this update:     Fri 17 May 2024 22:00:13 +0000
Manifest next update:     Sat 18 May 2024 22:00:13 +0000
Files and hashes:         1: 4F5_eVYJG9hUB5W-Sluj7GspvGc.roa (hash: kB+yQpcvethguyZgnzvLynn+gEfcQl1AtZbRWbHy7Ao=)
                          2: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: Toz26CdQ+uf2JPcjdjPWuvXjp61Sx+t0m5QUrhgbXEs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:e5:28:b2:d3:66:46:67:09:57:f9:8e:65:90:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
        Validity
            Not Before: May 17 22:00:13 2024 GMT
            Not After : May 18 22:00:13 2024 GMT
        Subject: CN=e9901263d93c11bd09c6cf557602d068d780d9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:91:a1:81:e0:ed:a3:2b:ef:5e:72:5a:a9:
                    97:10:a3:d7:8b:cf:ec:c1:85:1a:98:c2:1f:85:35:
                    47:82:42:35:a4:74:86:6f:b4:8d:af:72:93:66:b9:
                    0b:0c:77:9b:2e:42:39:08:c3:c2:67:6e:a8:1b:d8:
                    70:30:b3:74:3e:d8:5a:f2:05:22:1e:86:d2:4f:e3:
                    0b:85:be:55:5b:4a:1f:c1:2e:e9:99:6c:48:bd:c1:
                    36:82:5c:17:48:ff:60:16:50:f7:59:77:ab:9d:27:
                    5d:43:8d:d5:69:03:2b:7e:40:66:0e:ab:d6:b3:d6:
                    32:b7:73:e3:0e:b5:3b:ef:bd:d6:80:21:98:83:be:
                    33:bd:3d:50:b0:17:da:04:00:3e:a3:78:74:b5:01:
                    b9:f5:5d:d7:63:88:0d:2b:14:23:fe:9f:99:6e:32:
                    34:90:28:89:f2:dd:61:cd:3d:8a:9e:a7:c5:1e:e2:
                    22:29:82:44:98:7f:91:6d:18:43:5d:e4:05:39:ff:
                    7b:f2:49:aa:8a:d2:9c:70:26:8f:68:d8:b9:50:6a:
                    ea:b4:72:5e:8a:de:17:ba:e0:69:bc:e8:98:83:2b:
                    20:f8:f3:be:1f:c0:ee:1f:f6:5d:4f:3b:2e:41:16:
                    2f:32:5e:c4:a5:fa:05:1c:49:d5:4e:92:9f:e8:90:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:90:12:63:D9:3C:11:BD:09:C6:CF:55:76:02:D0:68:D7:80:D9:A3
            X509v3 Authority Key Identifier:
                keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:fb:b2:b5:fe:58:f3:a3:8e:15:bf:ff:26:5c:fa:fe:1d:
         67:59:de:ca:36:a2:ad:a4:6d:b4:38:8c:28:2c:ee:b4:a7:37:
         fa:2c:61:57:95:8b:44:e9:34:86:bc:8c:c5:4a:9a:29:54:4d:
         24:40:eb:e6:03:b4:80:49:c6:c7:0d:53:2f:31:73:bc:c7:a4:
         dc:99:7c:1a:2f:05:3b:b8:da:46:b5:3e:8d:d4:49:07:9f:30:
         7c:f1:58:1e:e0:c8:f6:ec:8d:be:61:3f:9c:c9:db:64:9a:ac:
         38:17:7c:b5:16:f3:4e:4d:90:38:8b:09:95:e7:04:70:26:d7:
         e1:f6:0b:1a:10:59:c6:8d:85:7b:3d:d5:e6:dc:12:02:d4:b3:
         c2:b1:d4:da:d6:2d:e2:f3:dc:cb:6f:b0:1d:a6:19:96:84:cc:
         21:56:00:2e:a6:b8:ca:21:af:ad:31:47:af:fe:ee:7a:99:21:
         a7:0d:cb:a5:94:bc:dc:2d:2b:a6:d6:20:8b:b0:20:1e:59:a9:
         c6:2f:be:5d:7e:0b:c3:49:5b:2d:b2:3e:e5:08:53:6c:78:21:
         7e:01:75:71:f1:e9:65:db:26:dc:36:43:bb:a7:bf:cc:a7:23:
         50:cf:8e:38:6c:96:07:66:4f:0c:66:85:b3:58:b8:04:fd:a1:
         e5:e2:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:31:54 2024 by rpki-client on console-ams.rpki-client.org