Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
File:                     QD8Iu6_6QWGEMgOop1erbpVGsM4.mft (raw, json)
Hash identifier:          Nf/QkO7lwHyYsgxWU6o6/n5TvQ8Shsi9om3KrHw9eSU=
Subject key identifier:   5B:50:12:D0:8B:79:F7:5F:A4:89:6C:DE:23:2A:6E:07:55:FC:01:10
Authority key identifier: 40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
Certificate issuer:       /CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Certificate serial:       019369A1BA199F86A9AAA85843D3D2472EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
Manifest number:          028D
Signing time:             Tue 26 Nov 2024 18:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:26 +0000
Files and hashes:         1: ACtGecJJAJmuFtIB_Xuk3R8U-jA.roa (hash: EV1ru+tEmzjvjl0JdbwT7XMX0flwYi5qD+edbusxh14=)
                          2: QD8Iu6_6QWGEMgOop1erbpVGsM4.crl (hash: MVLcHNL89CEOrd5D/84wy9EA5EzEiSTfQY3VlvoyFDY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:ba:19:9f:86:a9:aa:a8:58:43:d3:d2:47:2e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
        Validity
            Not Before: Nov 26 18:00:26 2024 GMT
            Not After : Nov 27 18:00:26 2024 GMT
        Subject: CN=5b5012d08b79f75fa4896cde232a6e0755fc0110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:03:b0:3c:1d:d5:e1:1d:79:b2:9b:b5:7d:
                    75:d8:d0:46:cf:fc:69:1c:81:13:0d:3c:9c:93:11:
                    9b:4e:5e:20:46:24:24:f8:ae:92:e4:33:30:06:a7:
                    22:be:f5:54:24:54:27:47:41:f4:59:b0:73:f2:af:
                    1c:ea:56:a0:b1:af:ba:9c:d4:d4:fe:ef:13:08:13:
                    c3:ff:21:5d:39:98:19:28:c5:b3:37:0a:c4:79:25:
                    58:9e:c2:e6:6e:2c:2d:dd:b4:52:5b:b4:6b:af:d8:
                    ee:d5:3a:3f:0c:b5:56:67:66:04:d5:1f:14:04:09:
                    85:4a:92:e8:fd:06:d2:9a:26:22:18:f6:ae:e5:d8:
                    fb:57:42:10:db:9f:5d:68:7f:00:c3:91:48:a9:45:
                    e5:98:89:31:ed:df:40:ed:bf:65:e9:5a:12:c9:bd:
                    b2:52:2a:90:63:3b:54:31:91:98:95:ba:35:aa:9d:
                    1c:2c:de:06:16:e4:8a:cb:45:dc:75:5c:e3:81:6f:
                    a2:dc:b9:ac:1e:d2:b8:68:bb:90:49:b8:d1:05:c6:
                    9c:f9:18:72:98:b3:e5:9e:da:d9:30:91:2c:28:bb:
                    53:f3:f2:dd:69:2e:9a:2d:94:d8:a4:f3:68:26:03:
                    02:d0:00:f5:ab:ca:e3:34:c3:7e:05:a2:a4:ae:92:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:50:12:D0:8B:79:F7:5F:A4:89:6C:DE:23:2A:6E:07:55:FC:01:10
            X509v3 Authority Key Identifier:
                keyid:40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:07:f4:23:a4:86:08:64:17:68:59:15:22:84:a9:8b:f2:b3:
         85:0a:77:3f:9c:ab:ce:b8:2f:d5:c3:b4:15:a8:58:7c:fb:5a:
         01:a2:8c:95:a5:e2:77:32:9d:9e:6a:0a:f6:47:2a:ac:09:d9:
         eb:43:94:ff:45:db:ac:b2:e3:d2:b5:64:76:d5:11:2b:63:78:
         08:ae:38:32:85:57:8b:d1:a7:ea:da:40:b3:35:36:1d:d4:62:
         5a:94:cf:bf:05:fd:67:2b:b7:fb:df:91:27:00:10:93:f8:eb:
         e0:06:7b:a8:bb:7c:4a:f5:56:ed:8a:0a:5b:e6:d9:5d:e4:a5:
         0a:40:44:a6:02:08:2a:5d:a6:20:27:6f:39:fd:ae:89:96:d7:
         a6:60:1e:30:d7:23:73:04:23:83:28:11:2c:f9:23:92:42:39:
         57:88:2f:d9:ec:22:9a:25:58:14:06:88:ce:8e:58:4a:fd:0d:
         6b:e1:51:40:b9:3b:6c:10:b2:21:98:e2:61:0e:fa:70:f3:2f:
         0d:fd:33:96:62:23:5a:b4:40:ab:10:f4:ce:11:da:26:a5:fb:
         55:c5:d4:74:11:78:ce:1f:a0:44:c4:5f:db:d8:6c:00:24:c2:
         7d:c0:98:4b:9a:25:19:84:91:ae:03:64:5f:ee:0e:2b:99:01:
         f8:09:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:08 2024 by rpki-client on console-ams.rpki-client.org