Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/q-test-ca/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.mft
File:                     83027A47466EFA0ED200A7CA6EE9CF229F431C1B.mft (raw, json)
Hash identifier:          StRkJmHixfaE4WBIB39h2KoavYu23qs982ctcx/bCi8=
Subject key identifier:   20:EC:E7:0E:8A:60:5E:3C:EC:FB:E8:C6:B6:CB:84:35:85:13:11:D0
Authority key identifier: 83:02:7A:47:46:6E:FA:0E:D2:00:A7:CA:6E:E9:CF:22:9F:43:1C:1B
Certificate issuer:       /CN=83027A47466EFA0ED200A7CA6EE9CF229F431C1B
Certificate serial:       76DA075DF3F25AFAB228E0C7380D45F1B2FC041F
Authority info access:    rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/q-test-ca/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.mft
Manifest number:          04
Signing time:             Mon 12 Aug 2024 10:35:24 +0000
Manifest this update:     Mon 12 Aug 2024 10:30:24 +0000
Manifest next update:     Tue 13 Aug 2024 12:30:24 +0000
Files and hashes:         1: AS210561.pad (hash: HiDMALKp1np5EZsp7Gr/5286qUvaGq0eH0CgnnDXcEk=)
                          2: 83027A47466EFA0ED200A7CA6EE9CF229F431C1B.crl (hash: udJ/yzLZ8GCJj6pCCp0osEyCHvMT3JBcA8qPSJZeYIA=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/q-test-ca/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.crl
                          rsync://rpki-repo.as207960.net/repo/q-test-ca/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.mft
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.cer
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/madzR6fTnzfwTrT1hftt_NsubSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Aug 2024 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:da:07:5d:f3:f2:5a:fa:b2:28:e0:c7:38:0d:45:f1:b2:fc:04:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83027A47466EFA0ED200A7CA6EE9CF229F431C1B
        Validity
            Not Before: Aug 12 10:30:24 2024 GMT
            Not After : Aug 13 12:30:24 2024 GMT
        Subject: CN=20ECE70E8A605E3CECFBE8C6B6CB8435851311D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:6b:81:a5:b1:4a:ac:e5:78:98:86:cf:86:
                    21:9d:b3:00:db:88:e4:d0:ff:6f:70:1f:4b:6f:a1:
                    fc:52:03:3c:ce:db:ff:78:bc:3e:6f:3a:37:7a:ac:
                    64:28:e7:e5:5a:a5:24:bf:4b:04:e3:07:19:32:26:
                    1a:26:b8:bd:9b:31:06:68:fc:8d:53:c8:5d:aa:51:
                    29:fd:5e:62:c1:cf:f2:71:a2:ad:28:07:04:6c:4b:
                    21:fd:94:86:7d:a9:c9:07:60:5e:a9:8b:91:62:aa:
                    6c:0d:b5:f2:e0:cc:e5:d2:33:b5:ba:94:08:a1:5a:
                    25:22:08:56:0a:14:5e:86:12:7f:dc:b5:4a:e5:52:
                    8e:32:00:2d:d9:9f:04:38:cc:f7:fd:31:2a:c7:02:
                    55:64:f7:a7:a3:6e:3e:1c:0d:29:f8:f3:7f:f5:e2:
                    9a:fa:e1:c0:69:59:35:2f:61:59:93:10:46:2e:7d:
                    89:56:40:16:bc:90:86:d2:5b:58:c5:ad:17:e9:2d:
                    49:a9:cf:50:90:48:70:34:3c:d0:89:6d:79:2b:67:
                    46:c1:ed:d9:72:57:a3:7a:a4:bf:62:a6:88:24:e9:
                    2a:3a:65:60:a8:4a:a9:75:67:ae:ff:68:c5:65:fe:
                    eb:d9:2c:74:d9:44:80:1e:11:d1:99:b7:aa:db:33:
                    33:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EC:E7:0E:8A:60:5E:3C:EC:FB:E8:C6:B6:CB:84:35:85:13:11:D0
            X509v3 Authority Key Identifier:
                keyid:83:02:7A:47:46:6E:FA:0E:D2:00:A7:CA:6E:E9:CF:22:9F:43:1C:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/q-test-ca/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/q-test-ca/1/83027A47466EFA0ED200A7CA6EE9CF229F431C1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:b5:bc:b7:91:3b:6f:5f:0e:d5:d8:39:0d:cb:1e:97:ee:
         99:e0:a4:5e:fe:de:df:63:e8:8a:36:2b:24:a7:82:e6:31:c3:
         e6:c7:bb:42:33:f2:73:c1:f9:df:d5:d1:86:c0:f9:58:ab:b7:
         a7:2d:de:85:02:fc:6c:19:6d:20:f9:1f:ae:2a:0c:1d:df:50:
         97:17:ff:39:d1:8b:68:05:22:81:98:16:15:9e:26:4a:e1:70:
         24:45:06:00:53:59:ad:8a:fa:0f:06:d1:ac:7c:8b:c8:3e:1c:
         11:7f:38:0a:26:52:d2:eb:b6:7a:bf:3a:fb:35:68:e7:84:06:
         a0:24:66:ed:21:12:88:87:0e:7b:57:85:d1:7d:ce:1d:23:ba:
         68:85:9f:c3:0f:01:ce:38:2b:f1:37:31:38:68:34:d5:00:fa:
         a3:dd:70:5b:7c:a3:8e:49:4c:0b:cc:48:87:f2:1c:26:27:e1:
         35:4b:cd:16:17:0d:6a:47:db:84:07:69:44:0a:0a:8c:84:85:
         53:39:3c:64:b9:d2:62:c3:f6:dd:0a:6d:3b:f6:a3:b9:14:ef:
         cf:42:93:80:68:95:5b:09:32:6f:4f:18:f2:11:9e:1b:dc:84:
         ad:12:9e:c4:7f:0f:ac:b7:de:2e:47:7c:bf:e0:ac:ca:da:cd:
         05:c3:05:01
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUdtoHXfPyWvqyKODHOA1F8bL8BB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwMjdBNDc0NjZFRkEwRUQyMDBBN0NBNkVFOUNGMjI5
RjQzMUMxQjAeFw0yNDA4MTIxMDMwMjRaFw0yNDA4MTMxMjMwMjRaMDMxMTAvBgNV
BAMTKDIwRUNFNzBFOEE2MDVFM0NFQ0ZCRThDNkI2Q0I4NDM1ODUxMzExRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqGuBpbFKrOV4mIbPhiGdswDb
iOTQ/29wH0tvofxSAzzO2/94vD5vOjd6rGQo5+VapSS/SwTjBxkyJhomuL2bMQZo
/I1TyF2qUSn9XmLBz/Jxoq0oBwRsSyH9lIZ9qckHYF6pi5FiqmwNtfLgzOXSM7W6
lAihWiUiCFYKFF6GEn/ctUrlUo4yAC3ZnwQ4zPf9MSrHAlVk96ejbj4cDSn483/1
4pr64cBpWTUvYVmTEEYufYlWQBa8kIbSW1jFrRfpLUmpz1CQSHA0PNCJbXkrZ0bB
7dlyV6N6pL9ipogk6So6ZWCoSql1Z67/aMVl/uvZLHTZRIAeEdGZt6rbMzPrAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUIOznDopgXjzs++jGtsuENYUTEdAwHwYDVR0j
BBgwFoAUgwJ6R0Zu+g7SAKfKbunPIp9DHBswDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3EtdGVzdC1jYS8xLzgzMDI3QTQ3NDY2RUZBMEVEMjAwQTdDQTZFRTlDRjIyOUY0
MzFDMUIuY3JsMIGaBggrBgEFBQcBAQSBjTCBijCBhwYIKwYBBQUHMAKGe3JzeW5j
Oi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBvL3Jwa2lfY2FfZDBmMmRiOTlm
ZTFkNGIzNmI5MzAxYzgyMTIyMGZlM2EvMS84MzAyN0E0NzQ2NkVGQTBFRDIwMEE3
Q0E2RUU5Q0YyMjlGNDMxQzFCLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUH
MAuGXHJzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBvL3EtdGVzdC1j
YS8xLzgzMDI3QTQ3NDY2RUZBMEVEMjAwQTdDQTZFRTlDRjIyOUY0MzFDMUIubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB82rW8t5E7b18O1dg5Dcsel+6Z4KRe/t7fY+iKNiskp4LmMcPmx7tC
M/Jzwfnf1dGGwPlYq7enLd6FAvxsGW0g+R+uKgwd31CXF/850YtoBSKBmBYVniZK
4XAkRQYAU1mtivoPBtGsfIvIPhwRfzgKJlLS67Z6vzr7NWjnhAagJGbtIRKIhw57
V4XRfc4dI7pohZ/DDwHOOCvxNzE4aDTVAPqj3XBbfKOOSUwLzEiH8hwmJ+E1S80W
Fw1qR9uEB2lECgqMhIVTOTxkudJiw/bdCm079qO5FO/PQpOAaJVbCTJvTxjyEZ4b
3IStEp7Efw+st94uR3y/4KzK2s0FwwUB
-----END CERTIFICATE-----
Generated at Mon Aug 12 11:30:49 2024 by rpki-client on console-fra.rpki-client.org