Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File:                     q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier:          +uMLEBy9X89pYn6BKDcVCPZCI5qW4yx58Hghk6Sbw38=
Subject key identifier:   62:2F:38:68:3C:AF:DF:84:53:99:E8:01:D3:E0:1B:1F:5E:E5:98:FE
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer:       /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial:       019359536FE6326D4B400D05BF2AB92E3268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number:          06F5
Signing time:             Sat 23 Nov 2024 14:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 14:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 14:01:00 +0000
Files and hashes:         1: 2sNpepc9j_s0UJfPGZNgRjgtufE.roa (hash: fIelJ6d1GRXIcOw716qQyA9ns7lG9sZ+Gb0R7Koqb5s=)
                          2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: eoP+XA3BjIL6FI0j2xU/7S1Y41Swy30U/vqFPkvQhJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:6f:e6:32:6d:4b:40:0d:05:bf:2a:b9:2e:32:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
        Validity
            Not Before: Nov 23 14:01:00 2024 GMT
            Not After : Nov 24 14:01:00 2024 GMT
        Subject: CN=622f38683cafdf845399e801d3e01b1f5ee598fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f5:fe:0d:76:42:aa:84:a1:55:c1:5c:15:83:
                    0a:53:ff:b0:88:a6:38:92:c5:dc:13:01:b9:42:ff:
                    19:90:65:f8:72:f3:6f:e3:4e:e4:64:2c:af:71:73:
                    ab:0b:2f:76:63:cf:1f:5e:77:14:9d:b9:77:20:d3:
                    ff:25:8f:64:15:27:74:8d:98:a4:4f:ab:09:86:8a:
                    49:25:58:99:84:24:b5:e3:5f:0e:c4:00:24:82:0c:
                    f7:1b:f2:45:07:02:7e:fd:33:5f:ab:dd:dc:31:99:
                    0e:e3:77:7d:6b:35:fb:e3:b4:b6:1e:41:4c:6e:1f:
                    db:ed:72:1d:e7:df:f7:c3:71:f4:5e:b9:82:25:06:
                    4e:b5:6d:7d:56:55:54:ef:33:4e:af:ff:fb:cf:b2:
                    19:84:0a:b5:e1:da:2c:3c:c1:1c:96:c3:64:e0:6a:
                    0e:77:53:e8:2d:46:0b:21:33:7a:2f:07:6f:aa:ad:
                    a7:3e:7c:18:f1:cf:b1:b8:42:e1:83:19:50:e9:d8:
                    4d:49:21:cf:6c:bf:ce:24:2d:35:c9:fa:32:b8:1c:
                    88:3c:2a:6b:40:3d:58:eb:79:5f:7b:4e:01:84:80:
                    4c:96:6d:63:dd:0b:4e:80:7a:db:1a:46:5b:b2:f4:
                    8b:56:31:66:b3:9d:1f:98:49:6d:12:67:3a:e3:f2:
                    91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2F:38:68:3C:AF:DF:84:53:99:E8:01:D3:E0:1B:1F:5E:E5:98:FE
            X509v3 Authority Key Identifier:
                keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ae:b8:ee:53:93:75:72:37:23:5d:8c:09:01:37:8b:2f:16:
         7e:62:e9:4a:45:e1:1a:c3:37:0f:dd:60:65:04:cf:d0:8c:b0:
         fd:46:cf:f8:fe:d6:c6:05:b7:74:61:eb:d2:1f:f5:a7:45:67:
         46:88:70:c8:a9:de:b9:96:ba:13:fe:7a:36:8d:52:64:c7:c5:
         45:66:36:e5:24:72:fd:3c:23:b9:3e:d2:41:01:73:bb:86:bc:
         91:7c:7d:6c:ca:7d:78:32:1e:b5:48:fc:f8:18:a2:a1:1b:2d:
         68:2c:8e:39:ae:72:9c:4f:b6:95:cd:af:c9:fd:98:ed:dd:e3:
         62:4e:5b:47:fb:b2:91:9f:c3:82:58:5c:99:68:ce:72:b3:db:
         56:61:18:51:06:df:de:a0:10:2d:cd:f5:60:e3:c3:4a:ad:45:
         23:b1:eb:27:5a:b4:74:f6:24:39:8b:bc:54:02:57:c6:a4:22:
         68:b0:c9:e0:c3:73:d5:b1:26:39:6d:f9:0d:19:12:ca:23:66:
         fd:fc:5a:40:45:2b:ea:e6:13:c4:e9:eb:fc:83:69:ff:6e:c8:
         85:41:65:ec:4d:77:5a:b3:61:d8:37:c0:de:00:f1:8d:06:cc:
         ce:73:ff:70:25:4e:35:90:d2:30:27:27:fc:81:67:e0:f3:ad:
         02:16:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:10:05 2024 by rpki-client on console-ams.rpki-client.org