Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.mft
File:                     qEslqyV3CjWNpfX7QnBysKLiRYI.mft (raw, json)
Hash identifier:          RlMpn269L19zoZgffJNviOwc6cEXiGql/BASL/+K+Cg=
Subject key identifier:   65:20:B2:4A:5E:59:8A:43:4B:63:22:8E:42:B1:8C:83:90:80:62:D9
Authority key identifier: A8:4B:25:AB:25:77:0A:35:8D:A5:F5:FB:42:70:72:B0:A2:E2:45:82
Certificate issuer:       /CN=a84b25ab25770a358da5f5fb427072b0a2e24582
Certificate serial:       018F8749E2E060B48B6ECCB9001E8F77BBD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEslqyV3CjWNpfX7QnBysKLiRYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:57 +0000
Manifest this update:     Fri 17 May 2024 16:01:57 +0000
Manifest next update:     Sat 18 May 2024 16:01:57 +0000
Files and hashes:         1: fRADibRNqWN0AtGTn2-utszPj7w.roa (hash: hCmrqKrqlmVQfyvKs2Uss/nWOgWITRqpXaMpzWoZvOo=)
                          2: qEslqyV3CjWNpfX7QnBysKLiRYI.crl (hash: H/2W1zYzRiwpkM2Hd6O+swm1sZBR0Hn0BgbzL9DD6DI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEslqyV3CjWNpfX7QnBysKLiRYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e2:e0:60:b4:8b:6e:cc:b9:00:1e:8f:77:bb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84b25ab25770a358da5f5fb427072b0a2e24582
        Validity
            Not Before: May 17 16:01:57 2024 GMT
            Not After : May 18 16:01:57 2024 GMT
        Subject: CN=6520b24a5e598a434b63228e42b18c83908062d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:6e:30:a8:55:64:1d:a5:c2:df:97:4c:4c:
                    8f:af:d5:52:51:28:8b:2b:94:7b:18:18:37:ba:07:
                    54:69:77:54:3a:fd:ef:8d:07:b9:df:22:0a:b6:05:
                    24:a6:9b:68:49:ed:bb:b8:85:f6:44:97:0d:54:09:
                    6b:85:1c:64:39:99:34:dc:55:df:14:d8:f6:00:b0:
                    16:07:59:11:cc:02:ca:8f:eb:30:5d:17:e6:34:e2:
                    bc:02:0a:f0:10:50:61:b6:9b:79:f1:dc:a5:fd:8c:
                    99:19:bd:54:81:b9:bb:14:66:89:65:6c:cd:5b:f6:
                    64:8f:f9:34:6d:9f:2e:31:65:71:3b:88:a4:ed:55:
                    59:24:e4:48:7e:1b:83:4e:8c:c6:74:e7:c5:51:57:
                    37:48:87:74:0e:8b:b3:ad:69:8c:83:91:a3:9b:fa:
                    f7:e3:f5:28:a2:54:90:b4:7b:83:5f:69:df:c7:29:
                    fa:72:3c:8d:34:d1:fc:6f:2d:02:61:9d:4d:cb:d8:
                    43:41:20:2e:47:4a:db:3d:3d:b0:55:98:14:d9:37:
                    63:08:c4:ae:77:86:ca:27:96:0f:dc:37:1f:30:07:
                    28:be:88:de:3d:7b:ba:a4:25:aa:0b:fd:1c:00:35:
                    6c:a2:70:39:2e:89:63:2b:dd:b5:fa:32:00:58:eb:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:20:B2:4A:5E:59:8A:43:4B:63:22:8E:42:B1:8C:83:90:80:62:D9
            X509v3 Authority Key Identifier:
                keyid:A8:4B:25:AB:25:77:0A:35:8D:A5:F5:FB:42:70:72:B0:A2:E2:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEslqyV3CjWNpfX7QnBysKLiRYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ec:04:96:d1:6d:84:23:87:34:55:0e:48:d2:24:fb:e2:4f:
         5d:2e:0e:c8:0c:8d:83:b1:dc:e6:af:e2:36:29:6e:60:63:cd:
         00:8d:80:11:da:d0:f1:98:8a:ce:96:ba:fe:08:75:63:5c:4e:
         1c:1f:23:8d:05:f9:02:a5:ed:4b:30:ac:fe:47:d3:ec:84:76:
         67:a3:34:f6:c8:b4:6f:89:86:89:a1:54:3b:10:54:ac:43:f1:
         c4:67:b7:98:07:1b:e7:8a:48:dc:d7:de:e6:66:5c:77:75:ba:
         00:29:0c:fa:e6:7d:2d:4d:ce:22:21:1c:c4:fa:2a:7e:55:4b:
         fe:e6:c7:ad:78:89:5a:fe:29:86:86:dd:01:c8:a8:ad:18:2b:
         b2:b0:69:66:76:8c:00:44:c6:4f:24:43:8d:15:b3:05:6b:57:
         06:e9:4c:12:e2:6d:d4:39:c7:6a:8d:0f:d7:33:6d:b8:b6:6f:
         5c:9a:68:71:d3:ef:83:da:4c:ba:58:48:a8:92:be:60:c8:38:
         b7:dc:98:6e:f5:f4:d6:98:8a:e7:6e:6a:6a:55:9e:b4:24:17:
         7d:ec:14:ec:fe:60:32:5d:79:8b:1e:df:cc:bf:df:bb:c7:c3:
         30:b7:69:fe:7c:da:c9:ba:cf:b1:d4:07:a2:9c:62:f2:af:a4:
         63:a5:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:44 2024 by rpki-client on console-fra.rpki-client.org