Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File:                     qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier:          b57i7u2j+q9FGR/QctNemqrE8azPi9FuIuK0HkXirCg=
Subject key identifier:   0E:58:5A:8A:66:FF:77:43:C0:5B:3C:06:57:22:CF:75:78:5E:FB:57
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer:       /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial:       01904C444CA170C2E9066D31C67A92118486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number:          11DE
Signing time:             Mon 24 Jun 2024 22:01:02 +0000
Manifest this update:     Mon 24 Jun 2024 22:01:02 +0000
Manifest next update:     Tue 25 Jun 2024 22:01:02 +0000
Files and hashes:         1: UZlQM9Ac06vVIav-KMAIFOFYjYY.roa (hash: 9O+e/qjden+xtp4QSPqqsCG82xsP+xhezQN8BrPWUQI=)
                          2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: 30pKODIVbjzTHdDXDgftE0OCmLrNzY+DajdTFRgtDBc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4c:44:4c:a1:70:c2:e9:06:6d:31:c6:7a:92:11:84:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
        Validity
            Not Before: Jun 24 22:01:02 2024 GMT
            Not After : Jun 25 22:01:02 2024 GMT
        Subject: CN=0e585a8a66ff7743c05b3c065722cf75785efb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:54:d6:9b:33:49:fe:9c:bc:f5:fd:69:e2:
                    ed:96:d3:5f:84:af:77:95:83:bc:fd:91:39:3a:99:
                    3e:88:c2:5e:fe:3a:01:16:f7:bd:04:0f:69:5c:74:
                    6c:36:e8:bb:59:80:12:43:a9:bd:94:a7:30:0f:92:
                    1e:e9:a5:bf:b8:67:a8:ea:a2:1f:01:c0:8f:70:1b:
                    cd:d5:7f:b1:1a:45:d1:f1:7c:a2:5a:2e:8f:c3:99:
                    63:0a:9e:46:66:11:64:46:7c:ab:e3:f0:3f:1b:1d:
                    ce:6b:88:3f:4c:d6:b6:f4:77:80:14:04:79:5c:8b:
                    da:0e:ef:28:c4:ad:90:bd:a4:fd:73:dd:63:ed:c9:
                    74:ba:87:ec:fb:7d:e2:25:00:f0:1a:7f:06:45:b4:
                    02:d5:2c:83:a5:05:66:06:0f:4b:05:47:f2:80:e1:
                    ac:ea:f9:2b:87:32:cb:4f:4b:56:f7:72:d9:bc:2c:
                    bd:32:f0:65:df:9f:1d:ae:3e:41:a4:b2:e9:b5:ee:
                    03:47:67:b2:62:d1:4a:10:43:37:a8:65:14:5a:29:
                    95:4a:80:7c:66:a9:02:f1:81:d1:58:f6:bf:de:f3:
                    14:e2:ac:1f:e5:bf:ed:4b:b4:fe:3b:ca:e1:5b:4f:
                    92:8e:2f:a4:3e:8b:2c:65:57:62:3b:23:d9:ea:b8:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:58:5A:8A:66:FF:77:43:C0:5B:3C:06:57:22:CF:75:78:5E:FB:57
            X509v3 Authority Key Identifier:
                keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:04:3d:49:e1:c8:de:c4:90:9b:c1:18:78:f8:01:1e:58:d5:
         cc:9e:73:e8:57:a0:2b:b1:91:2a:05:4a:e4:4c:ac:1c:bf:c9:
         98:20:d9:53:e9:3b:93:de:a2:55:20:c8:84:86:e0:9b:dd:f7:
         bb:8c:a7:3b:b1:31:1c:5d:c9:4c:6b:8b:8d:13:e5:48:27:f6:
         36:9c:20:0a:ac:68:71:98:67:92:59:12:66:cd:8c:92:1a:b2:
         40:77:e6:47:2c:8f:fd:3e:53:76:da:c7:96:19:33:73:bc:8d:
         0a:4d:9d:96:fb:da:d9:83:51:7a:1c:95:ea:15:e9:d9:33:b8:
         dc:a2:38:cd:80:46:13:cd:e9:29:50:35:f1:c2:34:3d:11:1a:
         71:dd:b4:e5:f0:71:e9:f1:81:fc:1d:9d:45:42:37:67:20:01:
         25:66:6b:08:b6:3d:f1:8b:45:ab:37:cf:25:0e:4c:7f:a1:ec:
         ea:b4:65:b5:23:8e:9d:93:1c:84:93:c3:1f:fb:dc:1b:c5:7a:
         bc:69:84:f5:bf:9f:af:6a:1a:8d:f9:41:5b:30:ca:f6:96:b0:
         4a:13:ea:19:8c:68:0b:08:1f:b6:32:ca:26:56:37:ec:d2:fe:
         38:03:ed:a1:8e:3c:dc:92:1f:3d:27:87:9e:0c:be:a0:cc:b9:
         77:d3:49:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:50:34 2024 by rpki-client on console-fra.rpki-client.org