Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File:                     QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier:          nmz9w+r8wWyYogT1c3SzpSTPdAH3tKeVym/+jOdQMsc=
Subject key identifier:   27:75:94:FA:81:FE:66:CE:B1:D5:89:6F:99:D6:65:0D:B9:11:41:F6
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer:       /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial:       018F87ED52B051EA2467EE3F6EF14A7CBD6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number:          05E6
Signing time:             Fri 17 May 2024 19:00:28 +0000
Manifest this update:     Fri 17 May 2024 19:00:28 +0000
Manifest next update:     Sat 18 May 2024 19:00:28 +0000
Files and hashes:         1: Q4-YHrSDebCXdOEMOd2_iFai00Q.roa (hash: 3O/GZxGnNKQIF2aryC1DZ23ufuBb0iZm9g4HaYYVvOs=)
                          2: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: yIaTLyLOc2K8N7fX54VACJQdR/cF/LPt6ars1hqBC4Q=)
                          3: eUumkvwZMIoQ7bC4unqWk005_cs.roa (hash: bc6Wyi7aRXhU3AiJklD7d9+BcehMtEaY1/gIK8Zm5GM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:52:b0:51:ea:24:67:ee:3f:6e:f1:4a:7c:bd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
        Validity
            Not Before: May 17 19:00:28 2024 GMT
            Not After : May 18 19:00:28 2024 GMT
        Subject: CN=277594fa81fe66ceb1d5896f99d6650db91141f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:4b:a8:b1:fe:d4:ff:f0:10:62:a8:6a:44:
                    6f:a9:c5:bd:44:3e:88:e4:c9:24:dc:8d:6e:b2:c9:
                    21:77:cc:84:a4:02:cd:0d:4f:c3:77:bc:34:c8:61:
                    00:50:4c:34:88:3f:b1:09:78:de:f2:3f:eb:12:32:
                    60:b8:77:f2:92:1e:91:97:f2:b8:ff:68:13:2a:9f:
                    b4:2f:82:ea:68:71:22:9e:09:00:0a:fe:e3:68:1b:
                    dd:a3:30:52:8a:75:ec:d0:f1:f7:de:07:cb:b8:9d:
                    08:2f:12:d6:f0:71:d4:c7:54:3c:d0:2c:12:2e:0f:
                    7e:88:29:03:5b:9c:56:67:93:65:4f:cc:4c:08:2d:
                    92:bd:d8:ec:6e:2d:b5:74:98:58:4d:61:f0:94:00:
                    2c:e6:ed:e9:e1:9c:26:35:f3:60:3b:17:9a:95:e2:
                    f6:af:27:5d:12:70:8d:ed:90:5c:75:fa:2a:69:06:
                    47:00:e8:a4:e3:e4:98:56:7b:1f:70:24:45:5f:b2:
                    94:d4:66:be:b3:bc:c7:e3:07:4c:bf:b7:3b:97:32:
                    ef:c3:09:c1:60:64:04:8e:91:0d:0e:71:0f:50:1e:
                    5b:a5:e6:9f:5c:1a:36:1c:3e:1c:ce:71:a3:1b:4f:
                    40:fc:f2:6c:89:1b:e4:da:93:cb:69:6e:6a:81:10:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:75:94:FA:81:FE:66:CE:B1:D5:89:6F:99:D6:65:0D:B9:11:41:F6
            X509v3 Authority Key Identifier:
                keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:80:66:8a:08:87:c2:28:2e:89:ab:ed:d3:79:16:6d:99:04:
         d3:28:52:f5:2e:67:89:b0:3e:ae:29:50:64:9d:37:c4:fb:d1:
         46:f8:29:62:c8:06:59:11:26:12:4d:2d:3e:c5:af:27:e9:a4:
         ef:69:31:f4:d8:36:02:23:ca:a8:29:2f:a1:14:ed:e2:dc:c3:
         48:25:9e:e0:9f:4d:5e:41:a3:fb:b7:ea:05:23:56:2e:ee:96:
         f0:db:3c:94:ad:a8:5a:65:81:b5:b1:11:91:27:4d:6f:2f:69:
         02:96:3e:b3:1f:a2:79:27:c4:1e:ac:74:4d:25:5f:cc:5e:0a:
         0f:70:40:13:14:c6:01:50:57:ba:5a:d0:a1:ff:df:0e:f2:d2:
         b5:cc:8f:da:97:4a:58:5c:02:f5:58:85:77:9f:21:ec:c2:bb:
         56:20:fb:6b:e0:5f:8a:9d:db:c6:16:2c:b7:91:5e:63:f3:44:
         ea:fa:81:d7:ad:c2:bb:4b:19:4a:e9:13:12:a0:86:d5:eb:d7:
         ad:48:04:61:c9:15:90:b7:60:4a:26:a0:6e:0c:68:16:41:1d:
         05:3c:a1:b6:ac:43:e2:39:16:f8:cd:8e:db:e2:4a:f0:18:da:
         b8:0f:28:21:c0:44:eb:56:89:cc:9e:1e:72:76:3a:96:f1:25:
         b3:c3:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:56 2024 by rpki-client on console-fra.rpki-client.org