Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File:                     qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier:          xkFSDvsRtojYEyZl5IO/OPvfApUReV37XqBWVlJYyeg=
Subject key identifier:   B7:34:E1:8D:F7:F3:E7:44:49:D9:41:3E:86:00:DD:B5:B6:F1:73:0F
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer:       /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial:       019369D96260D5A11610F46FF11322706241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:01:14 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:14 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:14 +0000
Files and hashes:         1: UZlQM9Ac06vVIav-KMAIFOFYjYY.roa (hash: 9O+e/qjden+xtp4QSPqqsCG82xsP+xhezQN8BrPWUQI=)
                          2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: DPIISw/CMqEhJSsFAhMF9+oSos0KYDPQkPtN57OUnsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:62:60:d5:a1:16:10:f4:6f:f1:13:22:70:62:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
        Validity
            Not Before: Nov 26 19:01:14 2024 GMT
            Not After : Nov 27 19:01:14 2024 GMT
        Subject: CN=b734e18df7f3e74449d9413e8600ddb5b6f1730f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:c3:c3:59:20:a7:c8:ee:4e:13:0f:a9:ce:
                    11:87:9d:83:bc:5e:2b:f5:e9:39:e1:09:03:ff:d4:
                    ff:c0:13:0a:ac:68:43:f6:32:a3:19:1d:a3:79:f6:
                    61:07:c9:86:a7:95:cb:c4:f7:99:58:8e:9c:96:ae:
                    69:fa:b0:07:3c:4a:59:45:b4:b5:95:9a:10:c9:77:
                    2e:15:eb:94:d7:41:81:f6:c7:82:00:c1:d9:eb:75:
                    dc:69:7e:6f:28:0e:0e:9f:04:b9:b5:21:19:d1:f0:
                    7c:de:e0:33:6f:1d:77:70:d3:52:22:29:80:70:39:
                    5c:32:e6:e1:4f:54:d7:cb:78:5a:a4:d1:72:ae:61:
                    bd:23:0e:0f:73:5c:00:e2:db:20:79:9d:08:29:09:
                    0a:71:9b:6a:db:bf:b0:f0:b8:58:53:2a:d1:78:34:
                    25:dc:5d:d8:1d:b0:2c:f2:e8:19:f5:aa:84:2b:1b:
                    37:5d:bd:58:80:c6:0f:ec:9c:59:46:c7:04:af:17:
                    cf:84:e9:2b:34:c9:06:a1:22:95:ab:8a:ee:1b:b5:
                    2f:4d:8c:f2:64:44:24:f6:9a:55:a7:25:fc:31:ed:
                    ad:90:da:c8:41:f6:22:6a:dd:4b:97:f9:40:26:ca:
                    b2:73:92:29:45:3f:b3:8c:49:85:21:80:63:4f:9d:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:34:E1:8D:F7:F3:E7:44:49:D9:41:3E:86:00:DD:B5:B6:F1:73:0F
            X509v3 Authority Key Identifier:
                keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:83:14:41:22:5c:60:a1:32:c2:ca:9f:fd:8b:1c:ca:70:7b:
         09:fd:23:f2:31:83:4a:0e:03:e8:0e:40:c6:75:7e:66:19:f9:
         cd:3f:3d:3d:d9:95:a8:52:00:cb:0f:01:6b:ee:c8:43:ca:27:
         a8:a4:fc:ce:ef:3f:7a:4a:1d:e6:d0:e2:59:de:2d:83:83:a9:
         74:7e:61:0b:77:6d:cf:ee:eb:44:95:f0:d0:26:76:b9:24:c7:
         12:3f:7d:42:82:69:7e:09:51:76:23:09:18:a0:de:62:72:5d:
         48:8f:97:dc:de:ba:19:c8:7c:ff:18:06:ef:fa:7c:f4:6d:d2:
         ce:ee:56:80:09:36:6d:a7:81:6d:83:a7:61:a0:f5:99:8d:db:
         ca:70:ce:1b:86:29:b2:7b:b1:60:b0:e5:66:3c:d9:58:26:1a:
         09:b9:2e:0d:f7:99:00:26:7b:b0:6e:80:1f:c3:4d:84:fe:54:
         b7:5b:15:64:9a:7c:a5:77:0c:59:46:21:0d:40:43:93:d8:d8:
         cb:5a:b8:02:ac:25:29:cf:29:70:6c:c3:1b:20:ae:a1:2f:c8:
         70:e0:29:8e:ee:69:af:6f:a0:1e:c0:6f:49:0d:eb:06:11:37:
         a7:1d:4a:79:93:43:cb:1a:82:41:01:4e:8b:55:f3:07:65:70:
         36:a4:2c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:58 2024 by rpki-client on console-ams.rpki-client.org