Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
File:                     qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json)
Hash identifier:          NQM+WYsnLhsD1gcpnLhwB8f7lPknHb9LBkWLUICBZ38=
Subject key identifier:   FF:79:56:B8:1D:9C:4B:20:56:D9:8D:09:AD:44:BA:8E:4D:E3:9F:E2
Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
Certificate issuer:       /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Certificate serial:       019356BF7F8C4D18BDE6F66DE029A1E0D85D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
Manifest number:          0206
Signing time:             Sat 23 Nov 2024 02:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:10 +0000
Files and hashes:         1: gAsRnJ-ynaftS85sKqZiD-LEI8I.roa (hash: c5TjkTtmbxLajk6hTWpE/XkMciTvrHIH7NDfc24JOMQ=)
                          2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: m9byfJzuCWt4+tUWsOsVFuf2SSQc6fk88FFOp2UQoHU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:7f:8c:4d:18:bd:e6:f6:6d:e0:29:a1:e0:d8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
        Validity
            Not Before: Nov 23 02:00:10 2024 GMT
            Not After : Nov 24 02:00:10 2024 GMT
        Subject: CN=ff7956b81d9c4b2056d98d09ad44ba8e4de39fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:2a:5b:b0:3b:a6:17:69:d4:bc:ec:1f:eb:
                    a1:c4:23:c7:90:24:8d:eb:b2:79:7d:51:a5:38:ba:
                    8a:59:8b:16:4c:7b:e7:0c:1f:08:7b:60:07:f3:32:
                    51:cc:9a:3c:0d:ae:39:df:42:6b:2d:16:7a:34:a1:
                    98:54:fe:4c:3b:38:9b:54:b9:1c:24:7a:dc:31:46:
                    b8:56:bd:02:a6:d2:b5:12:76:4c:1e:b7:ad:7c:30:
                    f3:f4:e4:8c:bb:0e:04:62:fc:4c:c1:be:75:ee:07:
                    16:d2:65:30:9c:28:74:73:2a:dc:5e:ca:bb:c9:bc:
                    d1:69:07:15:ee:05:ad:ab:e7:69:9e:d6:a8:c9:57:
                    99:7e:bb:fa:f9:04:e7:8b:84:38:2d:97:0f:7e:b9:
                    74:cb:54:95:83:fb:26:18:4a:0f:5e:4a:c8:18:25:
                    82:92:83:e4:93:19:be:99:a2:03:ff:04:d9:32:54:
                    3e:65:d9:37:6c:71:df:6b:c3:0e:de:fc:cc:8a:ab:
                    23:42:a7:32:3d:d5:3e:c9:d7:80:b4:a7:2c:b1:4c:
                    48:3b:d1:30:8d:9e:2a:3a:84:f9:e1:a2:ec:5c:ee:
                    c4:69:aa:80:b0:38:e2:41:5e:50:70:bc:23:1f:19:
                    70:8b:3e:9d:55:2b:3c:6f:0f:2a:51:0f:64:ff:d6:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:79:56:B8:1D:9C:4B:20:56:D9:8D:09:AD:44:BA:8E:4D:E3:9F:E2
            X509v3 Authority Key Identifier:
                keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:38:14:80:3b:61:89:ba:5d:93:8b:5d:4b:08:da:38:e8:
         e6:f3:98:69:54:07:3d:d5:07:b3:b9:ae:85:31:fc:3c:5b:90:
         13:ba:10:2d:35:9c:d3:63:0d:7e:5c:53:70:cd:17:99:31:e0:
         5d:58:5d:88:8f:68:d1:14:36:40:c7:b0:c8:ee:e0:51:51:6a:
         0d:d5:a3:6a:99:e7:85:bb:6e:f7:67:ea:75:59:df:c5:3e:09:
         0c:aa:af:82:c4:04:dc:de:54:8b:4c:5c:4e:14:2d:fe:43:5b:
         88:ba:7e:65:b7:72:e9:bd:19:8a:87:0e:45:a7:de:fa:fa:06:
         72:f6:1e:ea:4b:e9:dd:2c:13:93:30:95:34:b1:54:10:04:70:
         af:52:88:a8:1a:39:67:db:7a:9e:89:73:b4:db:af:5f:55:78:
         b7:dc:5e:cc:e9:37:4d:79:78:c1:9c:63:72:f4:39:46:cc:d3:
         36:0a:01:ed:2c:0a:3b:45:d3:ac:8e:ed:c7:df:4d:09:9f:66:
         1d:71:0c:3b:10:96:d9:82:f1:90:a7:34:51:3c:97:13:8c:9d:
         55:6f:be:e2:4a:58:66:36:e4:30:cd:51:93:8b:5c:c1:d7:39:
         d7:68:25:e0:90:73:e3:43:89:0a:87:b7:2e:b0:2b:0f:23:f5:
         eb:23:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:28 2024 by rpki-client on console-ams.rpki-client.org