Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          9+GaCUt+rdkUba/YI9bp3f5shErqHongxCE9H6LdbYs=
Subject key identifier:   D2:99:BC:F3:D3:3E:E1:13:EE:7C:C0:4C:3D:98:88:F5:EF:BE:D5:DC
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       018F874985DD95C4FFCB1037AA71967235E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 16:01:33 +0000
Manifest this update:     Fri 17 May 2024 16:01:33 +0000
Manifest next update:     Sat 18 May 2024 16:01:33 +0000
Files and hashes:         1: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: QqOy+PD/c7m28fxThb2xrCmEXcqWGV/Z69P6NurP6DU=)
                          2: fbcwD46wBu3sV2waymycL7HBw0w.roa (hash: E3BtypHTqPSP3fsYXZp+1pYUiJsd9n+waXNonMlRW68=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:85:dd:95:c4:ff:cb:10:37:aa:71:96:72:35:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: May 17 16:01:33 2024 GMT
            Not After : May 18 16:01:33 2024 GMT
        Subject: CN=d299bcf3d33ee113ee7cc04c3d9888f5efbed5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:21:bc:f5:c4:82:1c:6b:d7:ec:ce:c9:21:
                    eb:e4:f3:b8:fd:e5:e6:ae:3a:ca:4b:78:30:b3:67:
                    2b:2b:fe:d5:74:0c:90:f7:a9:7d:d9:1d:13:04:77:
                    59:35:f1:a6:53:b1:d7:ba:ff:e0:0c:46:42:f6:ab:
                    ca:c4:15:2d:52:ee:0e:b4:49:6c:0e:b0:2f:8f:cb:
                    e1:91:25:e2:dd:99:c4:23:01:68:ff:c3:fe:17:e7:
                    a9:ec:d1:9b:95:de:7b:69:61:09:9f:f9:b3:46:2c:
                    25:ba:46:33:39:19:aa:a1:f2:5a:63:fb:b6:a6:98:
                    1f:08:70:b5:18:1d:c5:82:3d:81:df:fb:14:52:fc:
                    49:a7:51:84:12:4a:fe:cc:06:b7:2e:2f:31:06:73:
                    0d:e4:f3:6e:40:3c:fc:39:0f:57:7b:bb:c3:de:ef:
                    b8:25:3d:9f:ea:e1:f3:dd:6e:c7:a3:8b:b7:40:9d:
                    f2:62:3e:42:22:40:06:7c:df:48:52:5f:46:31:62:
                    f4:67:eb:60:18:82:d1:4d:1e:47:0d:31:b1:b1:16:
                    2d:7e:70:42:ce:93:3f:bd:95:7a:43:a5:f5:54:79:
                    a2:da:53:e4:59:2c:3c:33:5f:12:7b:62:e9:08:77:
                    92:c0:c3:30:af:77:e3:ae:02:2f:27:40:ed:c2:c0:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:BC:F3:D3:3E:E1:13:EE:7C:C0:4C:3D:98:88:F5:EF:BE:D5:DC
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:80:b6:e7:7b:e9:b2:70:42:e1:9b:82:79:df:85:5b:04:69:
         b2:66:5d:82:33:dd:91:ae:5b:68:97:0d:e2:5a:aa:8c:ab:1c:
         cb:5d:7e:c5:92:f8:05:89:ed:e3:63:a0:85:05:2f:05:65:4f:
         30:9a:cb:0a:00:36:9c:f8:20:ca:46:7c:ea:38:3c:1c:2f:65:
         49:bd:d1:86:41:b6:8e:69:e7:50:82:60:df:f8:14:e9:3a:7b:
         0b:8a:f6:e6:52:15:d6:53:22:c0:c7:f1:af:a8:21:c3:72:7a:
         f6:25:3f:db:5a:5b:ec:4a:6f:5f:60:bc:cb:99:c6:b9:81:e9:
         5a:40:18:03:0e:00:c0:a4:88:ed:fa:cf:f5:6a:85:87:34:e9:
         d4:f4:db:b5:ab:04:a8:ef:94:d0:89:4c:2f:e3:ae:9d:a3:ec:
         e8:7c:7f:7e:11:05:a2:92:f6:32:65:29:e8:c7:1a:e5:e7:ad:
         8d:aa:df:da:f0:50:44:81:54:9f:6c:ed:70:f6:c3:0e:a3:3b:
         98:a9:12:5b:64:d0:84:f6:d5:9f:0b:d3:48:f7:2f:44:9b:4d:
         40:72:f6:3b:87:2d:9f:a2:a2:7f:af:44:24:d7:f0:17:73:4d:
         99:44:d2:fd:19:df:80:4e:f1:00:92:2f:aa:d2:79:43:bb:38:
         5a:f9:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:51 2024 by rpki-client on console-fra.rpki-client.org