Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File:                     Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier:          qm9XXN2D/wcJ4DlGv/mfttBdDcOS64mw1U0Vo4UVGpE=
Subject key identifier:   84:94:B4:86:F2:81:9D:C2:D4:86:53:E0:72:BB:26:18:3F:FF:D2:7F
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer:       /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial:       01921097FE9E23A18A28B02FBB7C502F1D7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number:          12CF
Signing time:             Fri 20 Sep 2024 18:00:49 +0000
Manifest this update:     Fri 20 Sep 2024 18:00:49 +0000
Manifest next update:     Sat 21 Sep 2024 18:00:49 +0000
Files and hashes:         1: 2TxiObfcwEc_LzzaDiLNSLyYIV4.roa (hash: j78XmRYtee2Gl/xK3f6Mvbk/RXfCx/oHEVkBy2Z+df8=)
                          2: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: qq+VKG7glCEKsmJ2flIykO4BOcaqU1ejtlX7cBv3+e4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:10:97:fe:9e:23:a1:8a:28:b0:2f:bb:7c:50:2f:1d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
        Validity
            Not Before: Sep 20 18:00:49 2024 GMT
            Not After : Sep 21 18:00:49 2024 GMT
        Subject: CN=8494b486f2819dc2d48653e072bb26183fffd27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:15:21:33:3a:55:2d:9e:85:5d:66:09:4e:
                    89:b4:ff:5a:47:de:4c:8c:de:7b:24:c2:a4:ea:a6:
                    5e:ba:e5:c0:01:e0:c2:26:7c:81:7b:07:9f:92:a7:
                    06:f4:d1:61:8a:a3:d7:8b:61:22:84:95:7f:3c:28:
                    cc:4c:d7:11:d2:dc:c2:8c:d2:5a:3f:33:df:15:0e:
                    92:b8:10:c8:6a:a8:10:4b:f6:b6:2b:78:3d:b4:00:
                    7d:14:e1:2e:36:06:14:10:67:c1:d1:6c:05:c0:c9:
                    69:c9:a5:a3:30:95:aa:8b:4f:af:60:7b:65:9f:2a:
                    36:3d:94:f1:ef:7c:5d:70:50:f5:9c:30:bf:ee:21:
                    d3:5c:20:b5:df:5a:6a:af:6b:4d:43:98:78:a3:07:
                    e8:0d:80:38:61:6e:a2:03:ce:32:97:e9:bf:a9:6f:
                    3f:43:bf:e3:1f:5a:d5:58:57:36:f8:d7:1d:bc:38:
                    4e:26:84:5d:42:15:87:d8:51:fa:db:61:be:42:77:
                    6e:54:44:bb:f1:47:7a:bb:2f:a0:6e:93:e3:c2:73:
                    5a:21:7e:c9:ad:37:21:80:be:97:dc:21:3b:46:a1:
                    e2:18:99:6c:eb:fd:cb:ed:61:40:fe:92:d5:0c:c4:
                    c3:20:45:4c:71:26:db:6a:cf:4a:6e:52:72:14:48:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:94:B4:86:F2:81:9D:C2:D4:86:53:E0:72:BB:26:18:3F:FF:D2:7F
            X509v3 Authority Key Identifier:
                keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:af:a8:6f:5a:84:cb:2d:1f:47:6b:52:67:92:34:a7:0e:7b:
         ec:54:54:5a:01:c0:a3:d3:b7:51:bf:bb:10:23:54:f6:b6:9e:
         38:20:86:b9:1c:5a:b6:30:30:98:6a:f2:11:90:fb:4a:20:6d:
         15:b6:aa:27:63:10:fb:24:52:98:57:58:08:01:43:48:77:73:
         53:c0:8f:4a:c8:d3:bb:75:77:7e:83:bb:93:61:ec:3c:3e:cd:
         81:21:8d:2b:3e:1c:bc:1e:da:f8:44:9d:00:7b:75:01:1b:0e:
         60:d3:e6:e9:86:f6:f3:2e:1b:b8:a9:2f:ad:da:c3:6c:94:eb:
         37:ce:42:d4:c8:65:18:ad:b3:4c:8d:91:31:5c:6c:10:fc:4e:
         d7:1c:7e:88:4d:dd:89:f7:4c:87:90:07:ef:34:c4:8e:cc:8f:
         6f:a3:d9:19:9a:91:8f:5a:dc:9f:a4:a8:6e:93:b0:60:7d:aa:
         7e:53:86:5d:33:31:9b:ec:93:95:2d:7a:f5:d9:7c:da:a8:5c:
         5c:75:2f:c8:a6:3b:73:e3:49:a5:b4:11:87:59:d7:7f:04:00:
         a4:76:41:33:77:ec:6a:d8:b4:b9:10:75:3f:02:a1:66:17:18:
         0a:2b:66:8b:8a:11:51:f2:15:e5:94:c8:6a:b1:cf:89:b8:33:
         c1:fc:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:57:35 2024 by rpki-client on console-fra.rpki-client.org