Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File:                     Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier:          edukK4wVf8Wi8jgkvGfv4wUZS2jkVbtTirkAJ1HVZy0=
Subject key identifier:   04:D2:AC:81:71:D8:AC:37:5A:D4:C6:B4:79:85:41:E5:29:0A:B1:34
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer:       /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial:       018F885B155F57909657DA650C1DF065B5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 21:00:21 +0000
Manifest this update:     Fri 17 May 2024 21:00:21 +0000
Manifest next update:     Sat 18 May 2024 21:00:21 +0000
Files and hashes:         1: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: wqREDlFOvBjWsKQX4pUQE8zcD2/tS9f6Tk+PtvfD/m4=)
                          2: sG9QCECmwbS225jEPdJrJGg8JOg.roa (hash: fD8TdLRAW/bvC9eCvEbAkpeRHJhgic19Gq713W+jkXs=)
                          3: umWcaqQh_ZUxL6mSaZYgOt9--wg.roa (hash: w3qUe+bJVQeln69cJRsMFOrvRrjc2/bgVuGfkaToCjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:15:5f:57:90:96:57:da:65:0c:1d:f0:65:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
        Validity
            Not Before: May 17 21:00:21 2024 GMT
            Not After : May 18 21:00:21 2024 GMT
        Subject: CN=04d2ac8171d8ac375ad4c6b4798541e5290ab134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:f9:89:3a:41:3f:83:80:ed:d2:69:c2:09:
                    01:d7:a3:40:d8:a7:38:52:08:4d:62:8e:00:98:47:
                    ae:46:87:c2:70:fd:32:25:a9:0f:85:0a:d6:5f:31:
                    eb:6d:80:f1:5e:1a:6d:88:07:44:00:7c:1b:9c:38:
                    54:b5:11:1d:06:fb:d3:4d:39:59:f5:b6:24:04:53:
                    a1:e8:0f:c0:37:4e:ae:f2:d4:32:08:3d:1b:05:cc:
                    60:ba:be:69:e3:aa:cc:51:70:a3:97:23:6f:10:3a:
                    b7:de:42:d1:d7:31:0a:51:f6:9f:37:2c:96:19:6b:
                    db:ab:7e:96:86:d6:c5:c8:57:bb:08:32:7a:ab:82:
                    75:60:f0:ab:3b:a7:00:74:cd:07:43:b4:d2:ea:64:
                    5a:40:f7:c5:ac:47:2a:6d:48:d8:51:5d:38:a2:46:
                    3a:5d:f1:1b:99:05:57:5b:e8:38:91:d5:c2:a1:34:
                    46:53:15:73:e9:32:e8:67:4d:26:4d:b3:82:86:a6:
                    05:37:d7:f3:4a:f4:d3:3a:a7:52:33:c8:5b:8e:75:
                    55:16:1e:43:6b:74:8b:62:84:e0:8a:8b:41:bc:5d:
                    17:12:a1:89:83:69:f3:c3:4c:df:5c:16:b4:a2:ba:
                    68:8c:3d:69:85:7f:a8:c1:65:bb:a9:92:9a:75:45:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D2:AC:81:71:D8:AC:37:5A:D4:C6:B4:79:85:41:E5:29:0A:B1:34
            X509v3 Authority Key Identifier:
                keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:73:87:1b:af:7e:db:61:b3:0f:01:60:0f:3e:f3:9e:92:
         70:15:26:59:14:aa:ac:32:0a:19:9f:fe:95:7e:62:52:29:8c:
         97:de:0f:82:d0:0d:8f:9b:e3:ed:b5:31:06:08:3e:90:ad:13:
         b9:4c:1e:ff:af:28:dc:e2:70:7d:0f:66:86:c6:71:17:7b:f8:
         28:36:29:3c:1d:b2:4b:9a:56:d1:64:17:83:01:dd:22:7a:26:
         b3:4c:0a:f1:43:97:87:ad:7d:0f:8d:7c:ff:57:0e:07:80:2e:
         b4:0d:02:c2:7f:95:2c:9e:e1:ef:aa:a9:fd:90:a1:d3:0a:a6:
         c2:a7:2b:a3:d0:e1:87:9e:a5:3c:cf:e2:77:e7:b4:95:64:02:
         8d:34:6d:fc:13:3e:73:6f:1e:de:d4:fd:a4:a2:b3:0d:98:01:
         0b:b6:eb:6b:da:74:38:39:43:e6:e7:e3:8b:d7:11:4b:7b:4e:
         bb:32:38:e3:73:2b:73:ce:d4:41:95:05:c9:ca:f9:a0:77:03:
         8b:1f:c3:2d:56:4f:2d:af:8d:be:c4:a6:5a:00:16:8a:47:a1:
         6c:47:d4:98:2e:4e:6c:50:71:bd:05:2b:19:93:78:15:32:dd:
         93:12:7b:75:29:1a:50:1a:f4:64:76:7a:4d:4d:35:3e:59:97:
         bd:15:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:04:53 2024 by rpki-client on console-ams.rpki-client.org