Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File:                     1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier:          KOyFM3Qh7DgICjQk39VHVmB53UiQCHPQOiKjridaokQ=
Subject key identifier:   15:70:F3:95:F5:64:24:EF:54:3F:5B:50:7A:72:B6:11:FF:E1:1E:36
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer:       /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial:       018F87B636614D84CD288BE34E9E68DAD2D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number:          014B
Signing time:             Fri 17 May 2024 18:00:16 +0000
Manifest this update:     Fri 17 May 2024 18:00:16 +0000
Manifest next update:     Sat 18 May 2024 18:00:16 +0000
Files and hashes:         1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: HbtH+uvB/hkXDEGRRGp8RbtX4EvLaLvOQ7IXBzwUW6Y=)
                          2: 5gZFkNGiEDw1dAdyaJLRHT2fm8Q.roa (hash: ePMNFlKldFL3mqzfGGw2l/sA14ZIYT5Brr94y0P7/JY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:36:61:4d:84:cd:28:8b:e3:4e:9e:68:da:d2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
        Validity
            Not Before: May 17 18:00:16 2024 GMT
            Not After : May 18 18:00:16 2024 GMT
        Subject: CN=1570f395f56424ef543f5b507a72b611ffe11e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:8e:1e:c4:57:ce:65:34:ba:e9:86:43:23:
                    2b:7b:72:a7:fa:65:e0:3d:7e:d9:70:7d:df:39:64:
                    b7:f6:07:dd:2c:73:e9:57:67:75:c2:74:e9:e6:a2:
                    58:9a:fb:4f:ea:07:6a:b5:82:46:fd:a7:bc:ef:cc:
                    f7:cf:66:ff:be:26:8e:b2:32:72:d8:22:69:f0:e6:
                    bb:f2:0e:6c:88:99:03:f6:35:10:b4:2a:e0:77:47:
                    b7:40:ca:61:77:9a:1d:34:20:f4:2f:f8:83:25:13:
                    32:35:cb:b4:66:44:af:6e:a4:7a:75:5a:e9:12:ed:
                    e8:d2:88:30:13:f7:24:20:29:ca:30:4e:ac:a3:0c:
                    3b:69:13:87:d9:a2:ae:81:dc:94:10:64:99:54:c2:
                    ef:4b:55:ea:b1:15:aa:7f:70:9d:bc:bc:ea:2c:18:
                    63:e1:41:7b:d1:9c:57:bb:08:88:ee:14:ad:a1:df:
                    8b:1f:04:fe:eb:e1:f2:3d:fa:5a:38:2d:4b:7f:b2:
                    ba:c6:f1:b8:2e:93:ac:6b:c8:b9:f4:64:5c:0d:2e:
                    66:ef:2a:fe:bf:b8:c8:32:12:33:a0:a3:03:87:ec:
                    c7:d0:b6:af:88:7b:33:04:18:b2:72:d3:99:e4:be:
                    da:e4:56:2d:16:11:87:4c:bc:ca:19:e6:31:15:9c:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:70:F3:95:F5:64:24:EF:54:3F:5B:50:7A:72:B6:11:FF:E1:1E:36
            X509v3 Authority Key Identifier:
                keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:59:2b:37:7f:35:dd:26:20:82:dd:d1:ac:8e:72:61:ec:f0:
         31:86:a5:f6:d0:db:d0:92:82:e1:5f:e5:8b:b4:aa:c1:25:1e:
         4c:a6:95:32:ce:bc:e0:1b:d9:03:4b:78:ad:4b:25:e5:ac:0b:
         a0:57:35:56:11:9a:d9:84:9e:c0:4c:fa:ab:4d:4b:ea:a1:85:
         12:ae:6a:44:ee:3e:4d:76:48:fd:77:ff:6c:e7:a4:e9:a3:c3:
         b7:b3:7b:81:65:5d:a5:5f:52:9f:e0:07:e3:05:38:5e:ce:b8:
         dc:8a:4f:6f:f9:9c:9c:f3:70:d6:41:8f:4e:02:9a:1b:16:7f:
         15:39:4b:b6:27:0e:ed:5d:7d:cb:24:59:c4:69:e3:32:d3:cb:
         8c:ac:88:8e:96:be:32:e1:59:ca:72:3f:3e:4c:ca:2e:a3:2c:
         01:e6:b6:20:6d:e8:09:a2:54:b8:4b:96:f9:b9:de:b2:ea:77:
         e7:e3:ba:d3:89:7c:b3:51:be:6d:e0:4b:a9:3c:17:06:62:05:
         db:61:cf:32:54:81:f8:c5:9f:6d:7a:a5:7e:00:00:99:e5:e0:
         0f:94:c0:a9:64:c5:b1:9f:cb:ac:3c:70:9f:cb:75:ec:ee:76:
         1c:f9:4f:d5:43:2d:74:7c:fb:df:c8:f1:56:31:91:ba:50:63:
         12:4f:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:35:55 2024 by rpki-client on console-ams.rpki-client.org