Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File:                     qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier:          TayjVs9DzBUglqcVLmetgZ5q4V7LhM7Q98aq/I5HbgA=
Subject key identifier:   C5:7E:4C:42:23:39:F8:85:E0:96:E0:63:D0:5E:99:8C:CA:A1:D7:D8
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer:       /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial:       01905211480B8A3EAB4E0DA89D69024B373F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number:          10BA
Signing time:             Wed 26 Jun 2024 01:03:02 +0000
Manifest this update:     Wed 26 Jun 2024 01:03:02 +0000
Manifest next update:     Thu 27 Jun 2024 01:03:02 +0000
Files and hashes:         1: nrvP1MWg-0PoF_ZM_fu6IBwRKnw.roa (hash: SFY+/bOEurloX1AKKyiupTLkXVVuX1N6FAKgtfVZvSo=)
                          2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: kId5CKqLwBLwC91qtkUhojU4945GAmQPbq5wLwuANSY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 20:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:11:48:0b:8a:3e:ab:4e:0d:a8:9d:69:02:4b:37:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
        Validity
            Not Before: Jun 26 01:03:02 2024 GMT
            Not After : Jun 27 01:03:02 2024 GMT
        Subject: CN=c57e4c422339f885e096e063d05e998ccaa1d7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:da:65:9d:29:e4:32:03:3d:8e:8f:c3:ef:
                    a1:e7:1a:42:5d:82:d5:ae:2c:0c:7f:80:93:79:c8:
                    54:52:90:f4:ec:35:89:8c:7f:9d:e1:b8:08:da:de:
                    74:e4:4f:b7:25:78:b2:b3:6f:e4:42:b5:56:93:4e:
                    a7:fa:69:cc:54:cc:e8:a7:5b:65:0b:b4:06:22:1d:
                    5d:92:72:fb:8c:34:aa:c5:00:1b:43:9d:ac:e0:3d:
                    33:6e:5d:1c:de:6e:ed:e6:6a:bb:d6:22:2a:2e:e9:
                    68:b7:7e:6c:a7:ac:94:12:2b:8c:4f:0f:36:ef:4e:
                    0b:65:03:93:91:0d:3b:17:7d:17:82:7c:a6:c2:ce:
                    b3:2e:ca:97:22:85:d6:00:29:c3:64:73:f4:a9:c0:
                    f7:dd:3e:55:3b:0a:a3:dd:5b:b6:f8:b0:ec:a1:df:
                    33:52:48:6e:1d:79:81:4a:d6:7f:4a:9c:52:15:ab:
                    68:f4:a0:57:35:c9:39:09:9f:5e:00:83:0e:34:c0:
                    8e:91:a7:fd:a9:c0:ce:fb:82:12:4b:dd:4d:52:7c:
                    9a:8b:b5:3f:69:5f:71:97:60:9b:80:38:f3:a8:8a:
                    ea:f2:d0:57:3c:74:aa:2b:fd:d5:94:09:05:39:fb:
                    a4:ab:64:a4:74:d0:60:93:d3:60:53:de:ef:7a:50:
                    65:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7E:4C:42:23:39:F8:85:E0:96:E0:63:D0:5E:99:8C:CA:A1:D7:D8
            X509v3 Authority Key Identifier:
                keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7d:26:83:66:e7:03:84:27:c0:af:6f:50:2c:ee:b7:78:d0:
         4f:0b:8c:86:1b:35:63:cf:86:f8:79:1b:26:09:cc:e9:1f:ec:
         3c:f1:ce:03:fa:c5:65:09:e3:4c:5d:f0:ba:31:d2:fb:96:8f:
         58:ca:89:40:ed:22:77:2f:e2:31:d9:d9:14:79:2e:c1:88:5a:
         69:94:50:28:04:59:94:f5:97:39:97:c8:89:b4:77:27:fa:65:
         c8:65:e5:19:35:d6:18:20:c5:17:89:f7:1a:07:ee:d5:1c:69:
         b1:1d:f5:60:0b:37:6c:7c:ee:8c:31:b8:70:3d:8c:7d:24:fd:
         e0:80:9f:42:80:ad:de:bd:f5:1b:cf:5f:06:05:d9:9a:7f:ed:
         6b:cd:55:87:e0:ea:b7:1f:08:de:1d:75:52:af:3c:65:64:f4:
         d0:a6:6b:a9:d8:87:81:7b:c2:25:2b:59:cc:37:35:f4:46:28:
         4e:67:0b:45:c8:bd:7c:62:3f:2f:7c:66:9f:c4:da:84:18:4a:
         b0:c8:c7:8c:86:dc:c7:d0:9a:4e:4e:33:3f:24:b0:25:7e:1a:
         ae:e2:73:47:44:ac:2f:13:79:a1:4c:83:b1:98:e4:e5:84:d5:
         33:c0:9e:0a:5c:9f:c9:bb:57:a4:a0:2d:65:44:7e:cd:23:b7:
         05:6e:d8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:10:33 2024 by rpki-client on console-ams.rpki-client.org