Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File:                     QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier:          lhshBDhbwxqy24Qt3yU1F1y0kOpr/25IlLZu1RquQlY=
Subject key identifier:   2F:AB:5E:99:FD:9D:59:11:71:49:9E:5B:4E:CB:0F:CE:6E:C3:8E:93
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer:       /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial:       019365FC5A07A9BBB841FFDFB586548410FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number:          0787
Signing time:             Tue 26 Nov 2024 01:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 01:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 01:00:56 +0000
Files and hashes:         1: G_B6wtJea-fdocZA8cbgqZ-bM0c.roa (hash: 12Jxz6zKM4Gbk8XwzAGVS+7B2fbm1K/F/EIOjCAvTqo=)
                          2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: xZS8B3Rl1SNYHt6lQ6WKXBy8RIiw4IiyvNTD7uTt3no=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:5a:07:a9:bb:b8:41:ff:df:b5:86:54:84:10:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
        Validity
            Not Before: Nov 26 01:00:56 2024 GMT
            Not After : Nov 27 01:00:56 2024 GMT
        Subject: CN=2fab5e99fd9d591171499e5b4ecb0fce6ec38e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:3e:77:f7:3d:2a:c9:30:e8:ef:e8:a4:f7:
                    dd:3f:25:22:ba:42:f1:0b:b0:e9:e1:3b:7b:3f:a6:
                    fd:01:a9:78:4c:90:02:61:5e:fa:ab:60:d3:bd:b5:
                    cb:fe:d2:e5:7f:da:15:af:31:af:ab:d4:52:a7:4c:
                    7f:4a:3e:12:8e:ae:b5:83:d5:88:91:9c:35:ce:21:
                    e6:6d:73:0f:60:80:32:71:d3:16:c5:95:24:b8:70:
                    fa:7c:9c:30:8a:43:05:f6:83:67:d3:22:a7:f0:30:
                    17:d7:0b:2f:80:12:eb:c2:91:74:56:a4:84:c5:75:
                    bf:32:be:c2:34:78:c7:90:3a:e6:8a:db:cb:93:10:
                    8a:9c:9b:79:71:af:1b:73:73:52:f6:b4:68:83:9f:
                    3f:d6:9c:aa:75:1a:fb:d0:fe:96:c6:44:eb:c6:30:
                    58:2d:99:bc:85:77:c0:78:cc:c3:3f:fa:d2:a3:dd:
                    cd:cd:a1:79:c8:65:51:03:94:31:b7:2e:09:36:84:
                    f9:8e:34:10:7d:ff:a0:e5:88:58:82:f7:d5:00:7b:
                    60:ca:92:a1:41:eb:40:8e:bf:fa:03:9e:7c:0e:ee:
                    db:90:4c:3a:48:20:36:98:0b:be:68:2d:7b:ff:6c:
                    b9:0a:19:cd:8a:f8:69:61:69:21:22:4d:41:24:82:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AB:5E:99:FD:9D:59:11:71:49:9E:5B:4E:CB:0F:CE:6E:C3:8E:93
            X509v3 Authority Key Identifier:
                keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:af:0d:ea:d7:00:78:48:b4:94:56:bb:c8:6d:9a:a6:76:63:
         cd:e0:04:f6:4a:f7:b0:8a:f1:d3:20:84:24:02:b3:31:95:0b:
         d1:a6:4e:82:cd:34:92:26:a5:a2:22:9c:0b:92:74:fd:6a:06:
         d7:a6:49:0c:6c:50:33:d2:74:56:5a:04:fa:b3:f2:f2:a0:0e:
         31:8c:03:97:36:aa:5e:01:c0:a3:be:d8:88:73:35:00:a5:5f:
         7d:a3:a2:53:8c:cb:32:59:94:0b:43:72:00:95:a5:bf:5e:a9:
         bd:07:ea:fa:b7:8c:9a:14:e2:84:df:9e:a4:29:f2:8b:f8:31:
         36:ce:66:85:55:81:6a:d7:83:9a:7c:18:ef:b0:64:6e:cc:99:
         fa:4e:72:27:35:4c:9d:92:07:96:bc:99:45:1e:be:05:a6:d3:
         74:69:ce:d2:0c:9e:d9:90:23:96:e6:b8:bc:99:14:36:e4:95:
         b3:0c:c5:94:06:04:aa:4a:d9:d0:30:f2:a9:ef:c8:90:60:8e:
         42:af:76:9e:0b:73:91:b8:6b:c4:ac:36:1c:8b:57:72:ff:26:
         21:ae:1d:8c:80:2a:32:21:61:f7:14:d7:cb:fc:ae:a5:a7:e5:
         14:1e:37:af:87:ca:5c:e8:98:0b:f1:db:f7:7d:a5:e8:07:f4:
         d6:25:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:34:04 2024 by rpki-client on console-fra.rpki-client.org