Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File:                     QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier:          2BGUOt8UTmZwu+gL5PMs0x1HBlzyPbARx+S/s/WmJAQ=
Subject key identifier:   DE:A3:94:3D:CE:E9:58:CA:28:8A:E1:AB:0B:CE:ED:48:AB:19:DB:B0
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer:       /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial:       0196BB91F8E9384C8B069CF6023790839462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number:          0B42
Signing time:             Sat 10 May 2025 19:00:27 +0000
Manifest this update:     Sat 10 May 2025 19:00:27 +0000
Manifest next update:     Sun 11 May 2025 19:00:27 +0000
Files and hashes:         1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: WP37/+FtvduLK3TXws8/cPa4qox5AVfqJmAtnTQV3AQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:91:f8:e9:38:4c:8b:06:9c:f6:02:37:90:83:94:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
        Validity
            Not Before: May 10 19:00:27 2025 GMT
            Not After : May 11 19:00:27 2025 GMT
        Subject: CN=dea3943dcee958ca288ae1ab0bceed48ab19dbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:d1:2d:ec:41:33:c9:80:92:ee:6a:5e:73:
                    b6:28:a4:3d:d3:7e:62:61:29:cf:8c:4c:8b:38:67:
                    77:51:c1:bb:25:ef:4f:23:e4:f8:83:6a:77:93:f0:
                    28:2c:91:0b:e7:00:9e:44:f5:75:82:74:db:12:59:
                    14:c8:92:4b:8f:e8:03:09:36:db:14:84:6c:a2:b4:
                    9b:87:bd:68:2b:ae:d0:61:c3:8a:6f:4e:73:3b:bb:
                    47:97:8b:c8:a1:a4:a6:34:6f:21:7d:56:75:ee:67:
                    89:4b:d5:00:7e:14:2e:5b:59:42:a3:a8:d7:69:00:
                    a3:cb:8f:d5:20:dc:e0:64:9d:38:8b:a8:05:39:21:
                    d7:fe:ee:51:8d:c3:5d:ef:c3:ed:f2:18:a0:da:2c:
                    f9:d7:bc:0e:cb:74:b7:12:0e:ea:aa:86:79:1d:f6:
                    1f:50:5d:e7:ec:75:55:46:21:ee:d5:55:3e:a8:31:
                    c1:79:db:02:b4:50:4c:a7:ba:ef:34:86:89:69:5c:
                    19:c3:a8:c9:c4:9f:20:36:71:f2:2b:fc:e0:18:01:
                    fe:54:58:eb:02:07:57:ce:61:c7:35:7a:54:0f:7d:
                    e9:f2:66:1f:79:64:fe:d9:1e:50:33:31:48:3e:0a:
                    b8:e1:15:e2:a2:22:1b:25:8b:8b:d5:96:78:28:1b:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A3:94:3D:CE:E9:58:CA:28:8A:E1:AB:0B:CE:ED:48:AB:19:DB:B0
            X509v3 Authority Key Identifier:
                keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:43:6e:48:d7:dc:bb:83:e0:f9:7c:09:4a:38:fd:33:f4:ff:
         df:06:d4:b9:a6:84:d7:ca:0f:2c:b8:93:b9:05:20:13:6b:b8:
         58:9d:41:34:f7:d5:a1:5f:b9:3f:90:6e:8f:02:35:ec:ae:8a:
         95:90:16:56:f3:a9:c4:bb:58:c3:84:9c:7d:b6:85:b5:fc:0f:
         22:a8:f6:3e:2f:5c:b9:22:71:6a:5b:b3:36:5c:1c:95:ba:68:
         fc:ae:27:22:4b:33:ab:33:d1:30:62:e6:a2:aa:78:30:71:b3:
         e7:16:44:75:62:77:a8:43:bb:7a:19:29:0e:c4:4e:31:03:b1:
         ac:01:76:db:8e:a4:f6:f8:a6:96:e9:15:5b:73:9b:1c:e2:4f:
         2f:94:06:8b:46:79:6a:28:c1:ff:3b:a0:ba:d8:3c:d0:96:54:
         b7:9d:47:00:0f:c0:d2:cb:65:40:87:ea:d5:0b:ce:06:8e:d6:
         42:11:ee:6f:3e:eb:9f:75:28:05:9b:5d:bb:2e:3c:15:a2:5e:
         da:29:98:6c:27:81:b5:86:4d:87:9d:bf:16:c2:be:3f:58:0e:
         ae:7f:03:06:32:c1:9b:78:7b:df:d2:aa:7e:85:9a:77:dd:93:
         96:63:70:1c:71:ea:4a:dc:c8:3b:b4:e3:66:79:4f:4e:c7:80:
         60:61:01:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:26:21 2025 by rpki-client