Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File:                     Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier:          WUwsqX/4RPRLMLY9jZt31dy//tMeBSnYGrNtBrTNXl8=
Subject key identifier:   03:2A:0C:F7:ED:CF:10:B9:10:2C:64:E1:39:31:B8:CA:D5:FB:D1:80
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer:       /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial:       018F5D3AD23F61AF6312CCAFF04ED1D1D698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number:          0E00
Signing time:             Thu 09 May 2024 12:01:26 +0000
Manifest this update:     Thu 09 May 2024 12:01:26 +0000
Manifest next update:     Fri 10 May 2024 12:01:26 +0000
Files and hashes:         1: 1VjHw5HEWylZtpn53VuYsR9koR8.roa (hash: 1sHTG9myqpOVEf9hm52sNqgg+TVKMCGFvRpFqLyCFQs=)
                          2: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: cyAa6NmAJcalS2LXadBS2s8A2JmIiVnXEa7LoahrJg4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 08:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5d:3a:d2:3f:61:af:63:12:cc:af:f0:4e:d1:d1:d6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
        Validity
            Not Before: May  9 12:01:26 2024 GMT
            Not After : May 10 12:01:26 2024 GMT
        Subject: CN=032a0cf7edcf10b9102c64e13931b8cad5fbd180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:ce:1a:f6:78:a0:62:df:2c:32:ca:8a:1a:
                    b7:0a:e3:f3:e6:59:b6:a0:ac:3b:e3:a2:53:b8:27:
                    27:5d:48:bb:6a:5d:36:f5:5e:af:45:14:8d:2c:fe:
                    70:42:83:9b:30:97:d7:81:ff:38:3e:e4:30:54:13:
                    a4:17:57:eb:5e:ea:a4:3e:dc:0d:d4:3c:dc:33:a2:
                    6a:d1:8f:4c:7e:b6:af:80:87:d0:6e:25:3a:e4:49:
                    ac:94:ac:f6:75:1f:e4:3a:8c:ac:8d:e6:00:ac:4c:
                    9d:fb:23:ba:9a:ff:ac:03:3b:99:31:b3:fe:6e:b8:
                    96:75:24:0a:1e:b0:e9:bc:5e:ec:a0:c2:33:27:f2:
                    56:aa:1f:0f:d4:ca:7f:57:ae:2b:00:9e:41:d8:8e:
                    44:59:8a:de:9c:0c:61:b2:67:9e:3c:a4:e7:14:f3:
                    c7:6e:cf:4f:7a:c2:f8:e4:e8:18:a6:fb:15:41:0e:
                    68:29:d5:5c:c0:30:6a:d0:a4:62:f7:1d:e1:74:fb:
                    58:ee:27:5f:f6:99:0f:21:39:91:aa:a6:bb:ce:1b:
                    33:b8:93:de:ad:2d:e6:35:e9:7d:28:e9:8d:f9:3c:
                    bf:05:b2:49:0c:38:23:3e:42:94:35:2b:59:25:08:
                    bd:6f:9a:f2:5d:e0:d1:2f:81:2f:e7:0e:6b:7f:9e:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2A:0C:F7:ED:CF:10:B9:10:2C:64:E1:39:31:B8:CA:D5:FB:D1:80
            X509v3 Authority Key Identifier:
                keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b9:60:8b:f0:c8:d0:9e:dd:d1:57:3c:20:eb:0e:f6:bd:d7:
         aa:5e:8b:9c:55:e9:27:c3:2d:ef:a9:2c:cd:a5:17:15:87:92:
         32:dc:2f:7c:4e:da:20:f4:2f:25:03:64:6c:2e:06:20:25:90:
         ad:cc:96:08:70:2e:8a:b7:04:ef:76:ba:83:3d:34:a8:ad:1d:
         fe:b2:f9:17:e7:48:4b:cf:05:bf:95:30:9a:76:1e:f6:fa:f9:
         74:b5:68:c6:eb:08:39:42:f5:3f:cf:a8:a8:45:59:08:84:f4:
         0c:3e:9a:ba:ba:e9:4e:5e:05:23:e2:df:36:f4:f3:ee:95:e1:
         47:35:1b:da:c0:fe:2a:47:22:8c:3a:41:a0:82:13:5d:89:54:
         ce:81:2a:98:2a:96:a2:ad:80:72:65:91:84:43:48:7a:59:06:
         74:f1:9d:5a:c7:a4:94:bf:21:cc:50:c3:dd:df:dc:63:4b:24:
         c4:6d:99:4a:98:6c:87:d5:38:b4:17:70:32:1b:92:fd:8f:cd:
         79:9e:a1:8b:29:86:13:1c:fc:ec:9b:70:44:af:f0:49:6d:5d:
         2d:d8:66:a6:01:58:f7:8b:e4:f8:e5:e3:ca:92:e5:3d:07:57:
         ce:fa:af:4d:ce:9c:b5:8b:0f:40:64:eb:71:48:6e:3f:0e:9b:
         e7:bd:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:13:16 2024 by rpki-client on console-ams.rpki-client.org