Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File:                     qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier:          myqWB4qqXYS5Jn3J4Sa2L+mqVnmjviAHXKDCg5fgPW4=
Subject key identifier:   D2:7F:41:F9:C9:D0:1B:1B:C9:77:EB:B9:00:17:5E:6A:89:8F:C7:FE
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer:       /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial:       018F95A8E3BC5300441B91A6C0D7AEC2AD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number:          0579
Signing time:             Mon 20 May 2024 11:00:24 +0000
Manifest this update:     Mon 20 May 2024 11:00:24 +0000
Manifest next update:     Tue 21 May 2024 11:00:24 +0000
Files and hashes:         1: m7PdVTUT3W-ro32es-VVFnzk2Fc.roa (hash: cuKGnN+/Y4i6zRu7TWXF6diM9igiU91ulWUcMrz8QQI=)
                          2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: L6UGU6V/xcIGb4wEecS0QTEwWi+QeDh/W4k2Z7ikBl0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:a8:e3:bc:53:00:44:1b:91:a6:c0:d7:ae:c2:ad:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
        Validity
            Not Before: May 20 11:00:24 2024 GMT
            Not After : May 21 11:00:24 2024 GMT
        Subject: CN=d27f41f9c9d01b1bc977ebb900175e6a898fc7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:80:c5:3c:8a:e9:93:3f:33:13:94:39:43:
                    65:ca:59:16:4f:32:c8:51:68:2f:1c:f2:1a:12:f6:
                    d3:c3:5f:94:94:b9:a8:0c:13:f7:9c:16:f0:04:b8:
                    ac:a8:e4:29:45:e1:4e:dc:a4:94:c6:bc:2a:c8:7e:
                    9e:89:7a:f7:20:b0:c2:56:19:d8:73:ea:a4:d3:d1:
                    22:48:22:08:f4:9f:66:49:0c:f9:78:67:ca:ce:0d:
                    55:69:a6:e6:30:71:22:5b:d5:e7:aa:de:ab:94:52:
                    9d:f1:c0:eb:f7:3d:13:5d:73:2a:01:3f:54:be:ce:
                    5f:50:f2:3c:74:db:f3:ba:0b:a9:9d:59:79:e9:b1:
                    df:f9:58:c6:8f:99:5f:cd:11:78:96:af:d2:7f:dd:
                    0d:8f:9f:c0:45:91:e9:e1:87:b6:ea:20:11:a6:4c:
                    01:11:b0:24:9e:42:1e:d3:4e:b0:ac:11:97:24:59:
                    22:d4:4d:bf:b8:30:4e:6b:f6:8d:3f:b8:4d:91:76:
                    48:2b:6d:71:06:de:c5:60:58:60:e4:91:11:11:33:
                    33:6b:16:bf:c7:4a:c0:c2:fb:74:d6:cc:64:06:b4:
                    e8:b5:20:2e:16:6d:29:d5:f9:fe:e2:f0:44:8e:4d:
                    ee:f7:30:b6:e8:38:6a:ef:6f:9f:ad:0c:ae:c8:ca:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7F:41:F9:C9:D0:1B:1B:C9:77:EB:B9:00:17:5E:6A:89:8F:C7:FE
            X509v3 Authority Key Identifier:
                keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:28:cd:10:95:ce:f7:35:e6:b5:9b:db:bb:33:f5:0f:23:
         cc:ab:80:5c:ea:c4:f1:7b:dc:89:88:06:9c:ed:4a:a0:be:61:
         96:ce:bf:0b:8a:67:f3:17:f7:7b:36:25:99:37:c1:ca:06:24:
         1b:64:e3:3d:2f:c8:d6:a8:4d:b4:ca:d8:25:81:f0:31:13:7b:
         c4:82:29:94:01:04:47:33:06:75:cc:60:41:59:4e:ff:3b:ba:
         8b:ae:b6:d6:ed:10:1a:41:b3:ee:b2:87:4f:4b:b4:9c:2e:8f:
         ff:dd:ec:65:4d:35:3b:13:1b:01:54:38:c7:30:cd:92:81:1f:
         be:90:4a:d2:4b:85:66:ca:de:f7:8c:4d:be:96:d2:64:48:bc:
         74:9c:d2:51:c7:5a:a6:66:3c:a5:8b:82:61:da:34:04:0a:2b:
         a1:49:61:a8:b6:b8:07:4f:54:b3:5a:32:1e:88:54:ff:e1:45:
         c8:fb:0d:b5:17:a4:66:7f:21:5a:1d:49:16:34:50:46:37:ca:
         85:9e:fa:18:bc:b5:3c:55:1a:aa:34:95:12:03:2e:9b:2b:af:
         42:9e:f8:0a:79:6b:6f:ca:23:8c:48:bb:56:a9:bf:88:d2:ef:
         aa:e7:40:6e:1b:72:bc:ca:79:f5:5b:ff:62:fa:4c:c8:8a:ee:
         5b:32:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:20:28 2024 by rpki-client on console-fra.rpki-client.org