Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File:                     Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier:          WLtYwlK32dz01NJ8KB0B0XNIXSLnTjfuezHBIhEFeKE=
Subject key identifier:   D3:00:E6:E9:91:58:CB:26:7F:0E:8F:B2:C5:C5:24:C8:3F:78:E6:1F
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer:       /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial:       018F82C6A71116039BCDE464EF0559F4EAA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number:          77
Signing time:             Thu 16 May 2024 19:00:07 +0000
Manifest this update:     Thu 16 May 2024 19:00:07 +0000
Manifest next update:     Fri 17 May 2024 19:00:07 +0000
Files and hashes:         1: BElAAm-cZ9Y3VXAPkp2487BK0Rk.roa (hash: /Qm5l6H/6IpGfEN0uywEoQDf/HAFQqX1QSHIpIa4smI=)
                          2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: +xD0N5TeunTcnrGHZtHW9Pq6SG2weJjvu6b+o+UILho=)
                          3: yEWZ4VYL76v6CXOJZTzc32REVU4.roa (hash: oBb7YT9vlq0MEgGYYB2TO36gjMVOVGIRSUTZDLpyMuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:82:c6:a7:11:16:03:9b:cd:e4:64:ef:05:59:f4:ea:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
        Validity
            Not Before: May 16 19:00:07 2024 GMT
            Not After : May 17 19:00:07 2024 GMT
        Subject: CN=d300e6e99158cb267f0e8fb2c5c524c83f78e61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:74:9c:51:be:5c:af:3b:d3:ef:3a:b4:66:
                    be:00:1a:62:cb:a0:5f:a3:b8:63:46:d6:a4:0a:cd:
                    5e:0a:3e:cc:59:29:e8:4f:24:14:81:24:2e:d9:a8:
                    49:52:ca:0d:6a:52:00:f6:30:0d:60:b8:19:56:ca:
                    2a:3e:8d:ac:ad:3c:fd:73:db:66:98:52:4e:27:85:
                    26:bd:3d:c2:a2:22:c3:e0:fa:37:6b:12:88:39:18:
                    79:76:2c:02:f7:99:01:af:69:79:c5:99:d6:05:20:
                    49:2f:38:40:7f:49:c9:b1:4a:91:2b:db:12:37:ea:
                    9e:09:72:83:0f:88:dd:82:48:8f:02:ea:7d:ae:ff:
                    c9:6e:4c:9e:d6:3e:b2:55:49:db:ed:92:a8:a0:3a:
                    f5:06:1a:76:88:c4:a3:35:af:93:c2:b0:80:ec:2e:
                    97:68:73:ed:56:9c:a3:39:97:89:bb:47:58:4c:08:
                    ea:aa:a1:d4:c4:37:32:66:7b:47:38:bd:d5:b0:6e:
                    0e:15:44:89:21:0c:71:95:b3:4b:d3:c3:1b:87:d8:
                    5f:e4:ad:4b:33:ba:6a:81:90:60:49:69:f1:15:67:
                    d3:4b:86:78:26:63:57:b8:b9:55:77:6a:8c:7c:ec:
                    18:9e:db:56:60:6a:7d:5a:99:be:7a:14:ea:f2:a1:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:00:E6:E9:91:58:CB:26:7F:0E:8F:B2:C5:C5:24:C8:3F:78:E6:1F
            X509v3 Authority Key Identifier:
                keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:88:66:15:dd:03:26:80:04:9d:a6:4e:a1:44:b8:1e:80:bc:
         cc:d2:e1:59:81:cf:33:18:a0:67:39:4c:29:44:bc:df:40:66:
         73:1c:1e:1f:54:8e:61:36:19:63:52:0a:47:ff:4b:85:11:17:
         a8:ff:19:e5:ba:df:e2:ec:e7:a0:46:53:e2:ce:47:87:bd:bf:
         50:57:41:06:64:f4:3c:56:67:93:65:65:b9:86:0e:f6:f2:ef:
         8a:ed:55:a3:a9:5f:e1:f5:a3:80:4a:e7:d2:04:62:47:22:69:
         2e:99:58:6a:2d:4b:f0:c7:57:31:09:8c:34:76:41:9a:6d:20:
         0c:86:71:95:0f:7e:79:4f:a0:73:2a:92:fe:48:83:c2:e8:93:
         6d:ee:71:02:1b:ca:32:02:e8:8a:2b:51:3c:42:5d:ad:02:a9:
         4e:47:ed:1a:a7:8d:d0:fe:a9:0a:98:1a:70:41:27:f9:6d:44:
         06:d7:d7:8e:8f:cd:e3:85:2a:99:ae:0c:4d:94:8b:a7:b6:e6:
         df:f0:69:94:53:60:fe:90:f7:f6:05:3d:25:2c:f5:b7:d5:09:
         b2:76:09:24:a6:55:7f:59:e3:3b:0b:ab:d1:9d:d1:e1:e3:ad:
         58:3e:02:b6:3b:ce:47:8c:20:fc:83:b0:bc:e1:29:20:de:24:
         e3:00:94:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:29:38 2024 by rpki-client on console-ams.rpki-client.org