Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
File:                     qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json)
Hash identifier:          2TJ8pKCqq3JrA2y07Wzfz4KcOQng0v27yCJ/6QDAid4=
Subject key identifier:   7B:84:23:11:20:4F:85:9A:BC:48:B6:00:D1:BF:0D:E2:5A:5B:4E:FC
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Certificate issuer:       /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial:       019045668A361B246B857DE69A91A0A4AD9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
Manifest number:          11DC
Signing time:             Sun 23 Jun 2024 14:01:06 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:06 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:06 +0000
Files and hashes:         1: 97lSmcBENQyyVSCHQrm6UAj1xOw.roa (hash: Ne0JIHFCtYHcV4/57pMWTFnOl0zgrgFP4hNUi+BK8Jk=)
                          2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: /IZmoU5oasIePFPJkF3YuyIiV9/IQxs5CbcwMzW8YfE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:8a:36:1b:24:6b:85:7d:e6:9a:91:a0:a4:ad:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
        Validity
            Not Before: Jun 23 14:01:06 2024 GMT
            Not After : Jun 24 14:01:06 2024 GMT
        Subject: CN=7b842311204f859abc48b600d1bf0de25a5b4efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:3d:e6:cc:bb:90:73:98:7e:88:3a:1d:27:
                    81:c7:e0:71:4c:60:ba:60:e3:f3:67:82:45:56:1d:
                    42:51:0a:9c:42:45:40:02:2a:dd:9f:fd:23:e1:3f:
                    18:b0:39:04:05:79:ff:ae:48:3b:ae:a2:10:1c:29:
                    e4:de:8e:a6:65:98:53:59:6a:54:f8:bf:52:59:f8:
                    5b:24:ee:d5:2a:cd:fb:d0:fc:12:30:bf:7e:2a:5a:
                    a4:5c:3d:a3:a1:df:60:c7:82:f1:ce:75:da:e9:9e:
                    61:ae:ed:48:b3:96:60:26:00:ac:73:11:c5:22:e2:
                    3a:b3:b0:ba:c9:ef:22:9d:2f:88:93:ce:88:27:66:
                    ed:cb:b2:21:b4:a4:65:4d:06:18:a9:c5:82:55:a1:
                    b6:5c:ed:dc:72:9a:a3:39:f3:c0:71:fa:5f:a3:2f:
                    45:5f:74:c7:12:77:7e:2f:07:f4:09:33:00:2f:ad:
                    0b:f2:71:3c:ab:a3:92:38:d6:55:49:cd:33:73:87:
                    96:92:19:2f:90:4e:d3:2e:b8:2a:37:ee:4d:64:e1:
                    49:11:7e:c8:0f:34:0f:9b:6d:01:cc:6c:f7:07:37:
                    ea:a3:b0:0e:e4:d0:53:90:2e:a3:a8:20:b5:a3:e7:
                    66:d8:ac:85:81:92:b2:9b:d4:00:94:83:d5:bc:4c:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:84:23:11:20:4F:85:9A:BC:48:B6:00:D1:BF:0D:E2:5A:5B:4E:FC
            X509v3 Authority Key Identifier:
                keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:f0:28:96:7a:cf:e7:85:54:ec:23:cb:e2:0a:1f:6b:3c:
         a0:53:74:74:b7:0e:d7:46:47:22:38:6a:b4:cc:fa:6d:08:21:
         f0:8d:0b:0c:94:02:2c:83:48:40:08:bf:27:7d:fc:d1:95:de:
         b2:dc:75:22:98:8e:d9:ba:81:36:89:44:29:27:cc:3e:66:08:
         21:3c:4e:ec:ca:5c:fe:76:4e:66:db:b5:e2:91:5e:66:f3:8f:
         9e:f2:39:82:f1:5c:0e:df:50:af:65:ab:ce:43:2d:ea:4b:ee:
         63:26:b8:b1:06:8a:38:de:55:46:75:45:13:9c:6e:c5:29:16:
         04:7f:2b:2e:48:33:1b:a1:8f:5c:bc:9c:8c:c7:0c:e0:de:a8:
         7b:d6:e6:be:ff:d0:2f:13:70:5b:cb:b9:9b:75:29:cc:09:b5:
         f6:b4:3c:0d:d2:65:78:de:5d:18:29:94:2b:26:5a:fc:08:5a:
         f7:db:1b:8b:12:0e:a0:c6:e7:3d:61:3a:42:a0:77:73:77:4f:
         5b:68:e2:ee:11:45:4f:c6:38:0f:f9:5f:93:aa:01:70:64:1a:
         52:4e:05:fb:3a:ed:f3:55:63:e0:a0:12:95:7d:73:7c:94:9b:
         f6:b7:8a:a8:77:24:df:8a:1c:cf:22:db:38:d2:25:f9:1f:eb:
         d3:7c:5d:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFZoo2GyRrhX3mmpGgpK2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZmE0NWE2MmM1ZTg1MGFiOWM4NzI2YTU5YTliZmE5OTJk
MzcxYjIwHhcNMjQwNjIzMTQwMTA2WhcNMjQwNjI0MTQwMTA2WjAzMTEwLwYDVQQD
Eyg3Yjg0MjMxMTIwNGY4NTlhYmM0OGI2MDBkMWJmMGRlMjVhNWI0ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTE95sy7kHOYfog6HSeBx+BxTGC6
YOPzZ4JFVh1CUQqcQkVAAirdn/0j4T8YsDkEBXn/rkg7rqIQHCnk3o6mZZhTWWpU
+L9SWfhbJO7VKs370PwSML9+KlqkXD2jod9gx4LxznXa6Z5hru1Is5ZgJgCscxHF
IuI6s7C6ye8inS+Ik86IJ2bty7IhtKRlTQYYqcWCVaG2XO3ccpqjOfPAcfpfoy9F
X3THEnd+Lwf0CTMAL60L8nE8q6OSONZVSc0zc4eWkhkvkE7TLrgqN+5NZOFJEX7I
DzQPm20BzGz3Bzfqo7AO5NBTkC6jqCC1o+dm2KyFgZKym9QAlIPVvEwtEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuEIxEgT4WavEi2ANG/DeJaW078MB8GA1UdIwQY
MBaAFKr6RaYsXoUKuchyalmpv6mS03GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEt
MmIzZGRiY2I3MjM4LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85N2E5YWEtNjk3MC00OWM4LThkMGEtMmIzZGRiY2I3MjM4
LzEvcXZwRnBpeGVoUXE1eUhKcVdhbV9xWkxUY2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpvwKJZ6
z+eFVOwjy+IKH2s8oFN0dLcO10ZHIjhqtMz6bQgh8I0LDJQCLINIQAi/J3380ZXe
stx1IpiO2bqBNolEKSfMPmYIITxO7Mpc/nZOZtu14pFeZvOPnvI5gvFcDt9Qr2Wr
zkMt6kvuYya4sQaKON5VRnVFE5xuxSkWBH8rLkgzG6GPXLycjMcM4N6oe9bmvv/Q
LxNwW8u5m3UpzAm19rQ8DdJleN5dGCmUKyZa/Aha99sbixIOoMbnPWE6QqB3c3dP
W2ji7hFFT8Y4D/lfk6oBcGQaUk4F+zrt81Vj4KASlX1zfJSb9reKqHck34oczyLb
ONIl+R/r03xdBA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:09:25 2024 by rpki-client on console-fra.rpki-client.org