Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
File:                     qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft (raw, json)
Hash identifier:          XPHCh+MX5H4GSwyGgD0phZJmax8ATINPkCG7wx5AS84=
Subject key identifier:   F5:4A:9E:73:F1:EF:CA:58:12:02:E0:CF:E3:42:D9:F7:B6:60:DB:DC
Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
Certificate issuer:       /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Certificate serial:       018F877F4DD65C7A84540D6E0AB34C8BBB6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
Manifest number:          B3
Signing time:             Fri 17 May 2024 17:00:18 +0000
Manifest this update:     Fri 17 May 2024 17:00:18 +0000
Manifest next update:     Sat 18 May 2024 17:00:18 +0000
Files and hashes:         1: 4heLdJNsdjtJEdC40Xq874QpfOM.roa (hash: D+TZ1sQ6s6nj8PiG0qxgMenI1Plj3aNRZSn7nme/PLc=)
                          2: qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl (hash: KlTzW2WAjfmEOnUZ34bSOekoMyvcfFlfTlIlGsMCmww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:4d:d6:5c:7a:84:54:0d:6e:0a:b3:4c:8b:bb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
        Validity
            Not Before: May 17 17:00:18 2024 GMT
            Not After : May 18 17:00:18 2024 GMT
        Subject: CN=f54a9e73f1efca581202e0cfe342d9f7b660dbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:ea:31:87:56:26:ee:76:b1:a5:ab:33:ad:
                    c5:cd:20:3a:51:3e:c8:c2:19:32:61:87:b2:a4:b1:
                    6e:0b:30:b6:a0:ee:65:90:d9:f6:e5:fa:3a:3d:c3:
                    4b:af:dc:37:de:59:f7:b9:71:68:72:8c:99:b3:db:
                    e1:cf:f8:07:da:b5:cc:81:b9:64:4a:02:0c:16:47:
                    e2:4b:99:51:94:e9:30:14:eb:10:39:4f:7f:d4:20:
                    fc:b3:2a:41:b8:dd:c4:7c:cf:2b:7d:48:a5:8a:10:
                    c0:c1:de:3f:d3:2d:0a:1a:de:95:d6:d8:7f:8c:bd:
                    95:37:d1:a9:8a:8d:02:8a:a0:65:6c:69:70:d4:bd:
                    6d:57:d4:ee:7f:e4:ef:36:d2:c4:28:7e:cc:ea:b2:
                    41:35:61:7e:33:a5:fe:8d:fb:d5:43:27:7d:35:f6:
                    3e:6f:6f:39:0b:c5:d8:5a:57:5c:e3:a6:4b:e2:1e:
                    4e:1f:8b:f8:80:92:28:99:16:99:37:78:ab:fe:7a:
                    c5:ee:76:57:d4:74:c7:72:72:32:a7:99:ca:46:2c:
                    20:c1:72:58:cd:ee:b9:6d:dd:01:0a:f3:7e:81:98:
                    12:1b:a7:ec:5d:27:00:4f:dd:77:dd:10:e9:3e:1a:
                    aa:8a:14:f2:eb:2f:ea:0b:b9:45:e7:1a:0f:e2:9a:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4A:9E:73:F1:EF:CA:58:12:02:E0:CF:E3:42:D9:F7:B6:60:DB:DC
            X509v3 Authority Key Identifier:
                keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d9:5a:38:44:3c:be:61:69:2b:ab:91:2a:8d:0b:70:e5:b7:
         8e:fb:c0:4e:c7:72:19:c6:ff:71:5c:a5:7d:76:82:70:42:a4:
         c0:0e:65:fa:32:bd:67:06:57:29:7b:8a:af:92:a2:3d:ed:5e:
         58:d0:ea:9c:53:61:a4:65:11:84:06:68:fe:12:0c:c3:63:6c:
         c4:a0:95:bd:db:04:e0:09:a6:d3:94:7a:58:fc:1c:72:8b:ed:
         f3:1e:4e:bd:0e:2d:77:de:27:69:de:67:4f:89:5f:57:4c:85:
         13:c9:d0:25:ae:f9:65:a3:0f:03:00:25:e5:be:f4:af:fc:8a:
         78:67:d4:28:b2:1d:8c:d3:9b:c4:7e:28:ab:6b:53:30:bf:75:
         bd:1c:cb:29:e7:c5:b6:63:34:00:00:a4:58:05:e0:84:9a:a6:
         25:b0:cf:4e:d2:6d:91:e9:3e:48:20:8d:17:0c:21:18:bf:71:
         83:f0:b6:2d:0f:2b:a4:df:98:cf:ae:2c:9b:06:cb:8a:9e:ee:
         1e:49:01:ab:a1:ab:35:63:79:1e:e3:80:24:ec:9a:81:51:61:
         60:6a:96:29:5a:bb:40:b0:b2:7b:d7:23:86:7a:06:09:54:56:
         b0:52:f7:11:b1:42:92:39:cd:8f:3f:16:9b:b3:16:36:e5:30:
         ee:ff:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:29 2024 by rpki-client on console-fra.rpki-client.org