Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
File:                     QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json)
Hash identifier:          l3GwqU1L3XcFI+H02xXILnE7LQFDwLFi6l3y6RVfxKg=
Subject key identifier:   50:69:55:78:DA:53:45:42:2D:DF:69:FD:F3:EF:94:A6:A4:06:F8:8B
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Certificate issuer:       /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial:       018F847E4B0024DEC9ECD682A2F417264581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
Manifest number:          0263
Signing time:             Fri 17 May 2024 03:00:20 +0000
Manifest this update:     Fri 17 May 2024 03:00:20 +0000
Manifest next update:     Sat 18 May 2024 03:00:20 +0000
Files and hashes:         1: DsNcbk_BTPFlk33nDKu2FCWczdo.roa (hash: YjyaSXvYzPh6eFPk71IGloQvITU9+HPYR7V584HEXj4=)
                          2: G_07xGG_d_NvtW7W9eG7k3fYCv0.roa (hash: 0eZUQY5U5Xrpw23pxnWOvfqfETTV4lw8E1Uegc5TkQE=)
                          3: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: Aewyo6NaHppoYb5zpF5QZc6aQoCNtCZz38MphaDVkC4=)
                          4: ZcL6xI3YHgb2tIqk_9YeqdfLsZw.roa (hash: w3r8UixAmrvrBgjJKe+lqSu5hTqBwV91E0KdybCFHQk=)
                          5: dxl-0gbMPDf3zltjiiweTP0Goi4.roa (hash: MI4mk9WGh8z8PwodWTdm1yU5QOLHQEM7Rkr2judbt4A=)
                          6: sVY6mrM4u5PvskO5kRvvAZ2Yyn0.roa (hash: E31S4MRhR3nbrG0HQYHLrF++ONtRw4D2uekZGsUpoZ4=)
                          7: vMirVsoIngVnP1qrRL1xUmGJz1I.roa (hash: V5cwZ3tT3QHR7SZluH0/tf8n0UWteGfjTrtwdBo+Ln8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:4b:00:24:de:c9:ec:d6:82:a2:f4:17:26:45:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
        Validity
            Not Before: May 17 03:00:20 2024 GMT
            Not After : May 18 03:00:20 2024 GMT
        Subject: CN=50695578da5345422ddf69fdf3ef94a6a406f88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:f9:eb:1e:e1:bf:4f:56:44:e2:52:7e:ef:
                    fc:8b:c6:67:9f:e3:2f:c0:80:34:af:b6:71:c2:2d:
                    3b:60:d5:fd:b8:15:c2:a5:4a:c6:34:46:f9:b8:9d:
                    9a:8c:18:e2:1b:44:dc:0c:3a:3d:d2:03:fa:09:53:
                    18:7a:df:dc:db:c4:36:f5:5c:8e:0d:f3:cb:a4:30:
                    09:42:55:40:af:c6:f5:22:32:19:d9:50:5f:23:a5:
                    b3:63:9b:03:d5:78:15:9a:95:8f:f8:7b:da:cf:eb:
                    17:46:88:ce:33:08:d5:3b:72:7f:40:27:6c:6e:e1:
                    3e:04:41:e2:47:03:cb:cb:2e:ce:05:5e:ee:c8:e3:
                    05:c2:5e:c4:a5:bd:4b:96:92:9b:b2:c4:ac:2a:b9:
                    00:11:83:9f:0e:d0:31:54:a6:43:d0:7d:36:96:2a:
                    52:69:c4:48:31:f8:d7:f2:a3:74:d7:f3:e4:f2:1b:
                    68:4f:3d:31:f7:77:a1:f6:de:2e:88:a0:12:97:37:
                    74:74:0c:b3:ef:7f:28:e2:e3:33:2e:64:44:7a:11:
                    2c:62:fb:87:a8:e3:0b:22:e0:ec:90:73:74:b8:58:
                    12:a1:8d:17:5e:2a:9d:c0:c8:6c:76:22:75:bd:ea:
                    25:d2:d9:2f:fd:f5:88:8a:96:3a:42:f0:71:f4:bb:
                    40:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:69:55:78:DA:53:45:42:2D:DF:69:FD:F3:EF:94:A6:A4:06:F8:8B
            X509v3 Authority Key Identifier:
                keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:38:f1:7a:5d:b1:36:ab:dc:6f:51:6a:14:fe:b8:5b:a7:
         a6:2a:1a:9f:1c:24:19:12:ff:75:72:ed:a2:cd:fc:c9:52:0b:
         96:37:2b:e9:1d:db:15:14:3e:83:f0:de:a0:6b:72:ba:1e:4f:
         26:fd:6e:1c:10:d5:02:3e:33:af:21:60:4c:de:82:a0:50:3d:
         5a:1a:73:fe:8f:c3:b5:d9:d0:12:67:c5:eb:f9:9d:b4:91:22:
         e1:3f:30:78:0b:74:14:b4:20:89:75:c0:5e:b9:6f:78:8d:63:
         2f:3b:26:3a:92:6b:bf:f6:38:42:48:4d:c5:2f:ee:57:7b:17:
         74:f6:3a:f8:d5:6a:64:46:78:95:89:d1:bf:c7:64:6d:1b:b9:
         16:2b:46:9a:9e:33:d7:87:8f:09:63:91:95:5a:24:3e:9c:bf:
         9c:33:85:33:d4:bc:49:91:94:33:70:4c:51:a3:58:2e:78:a2:
         89:af:f9:7a:22:04:5c:d4:21:7d:59:6a:51:6b:3d:ce:2f:42:
         34:fa:fd:55:97:2b:37:fb:9f:93:40:1d:9b:d8:dc:41:42:e5:
         49:2b:c2:58:e3:9f:c7:cd:7f:db:ff:fe:76:e3:ee:12:ab:6a:
         c9:0d:ab:35:90:61:fc:5c:a0:6d:70:77:45:b7:0f:ea:dd:eb:
         3e:e4:08:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+EfksAJN7J7NaCovQXJkWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk
M2JmMTEwHhcNMjQwNTE3MDMwMDIwWhcNMjQwNTE4MDMwMDIwWjAzMTEwLwYDVQQD
Eyg1MDY5NTU3OGRhNTM0NTQyMmRkZjY5ZmRmM2VmOTRhNmE0MDZmODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgX56x7hv09WROJSfu/8i8Znn+Mv
wIA0r7Zxwi07YNX9uBXCpUrGNEb5uJ2ajBjiG0TcDDo90gP6CVMYet/c28Q29VyO
DfPLpDAJQlVAr8b1IjIZ2VBfI6WzY5sD1XgVmpWP+Hvaz+sXRojOMwjVO3J/QCds
buE+BEHiRwPLyy7OBV7uyOMFwl7Epb1LlpKbssSsKrkAEYOfDtAxVKZD0H02lipS
acRIMfjX8qN01/Pk8htoTz0x93eh9t4uiKASlzd0dAyz738o4uMzLmREehEsYvuH
qOMLIuDskHN0uFgSoY0XXiqdwMhsdiJ1veol0tkv/fWIipY6QvBx9LtA4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBpVXjaU0VCLd9p/fPvlKakBviLMB8GA1UdIwQY
MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt
MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz
LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7M48Xpd
sTar3G9RahT+uFunpioanxwkGRL/dXLtos38yVILljcr6R3bFRQ+g/DeoGtyuh5P
Jv1uHBDVAj4zryFgTN6CoFA9Whpz/o/DtdnQEmfF6/mdtJEi4T8weAt0FLQgiXXA
XrlveI1jLzsmOpJrv/Y4QkhNxS/uV3sXdPY6+NVqZEZ4lYnRv8dkbRu5FitGmp4z
14ePCWORlVokPpy/nDOFM9S8SZGUM3BMUaNYLniiia/5eiIEXNQhfVlqUWs9zi9C
NPr9VZcrN/ufk0Adm9jcQULlSSvCWOOfx81/2//+duPuEqtqyQ2rNZBh/FygbXB3
RbcP6t3rPuQITQ==
-----END CERTIFICATE-----