Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File:                     QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier:          DAM8jzWOkNNyNrGUmDDXDakTByFIXLt7poHsO1SAZjM=
Subject key identifier:   6E:93:05:D7:C5:A1:14:FD:72:EE:B2:36:35:58:DB:0A:6F:4B:15:99
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer:       /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial:       01936A46BC7CB3994AB34ADBFD7E99898539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number:          0E78
Signing time:             Tue 26 Nov 2024 21:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:40 +0000
Files and hashes:         1: AfHNEBx1MY6TLVP_yNCkTro8g-U.roa (hash: ZmFTxBVEtUUYFA9Va9x6+Z1k4626SYNqzetcBzhrWUg=)
                          2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: 0A0icGy2UyYJhZDlI4Ykfp0vlJ8QtxCGe2tzFOBejMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:bc:7c:b3:99:4a:b3:4a:db:fd:7e:99:89:85:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
        Validity
            Not Before: Nov 26 21:00:40 2024 GMT
            Not After : Nov 27 21:00:40 2024 GMT
        Subject: CN=6e9305d7c5a114fd72eeb2363558db0a6f4b1599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:db:0a:82:0e:32:48:cf:7d:2c:77:d6:cb:1d:
                    87:94:af:06:2e:44:1d:d4:e9:c1:41:94:a8:84:24:
                    76:91:59:7c:6a:58:14:5c:ec:39:17:24:c5:1e:8f:
                    8c:86:f0:f8:d2:70:21:b8:46:67:50:37:da:8b:4f:
                    72:65:84:cd:63:8c:aa:bb:7a:ad:34:0b:5d:a9:be:
                    4d:3a:db:bf:75:c5:37:59:9d:cd:1e:24:f0:93:5e:
                    dc:59:96:83:fc:3e:8a:b7:9a:83:59:17:bf:ba:3c:
                    eb:46:36:0c:5c:3e:64:58:cf:d5:17:79:01:83:ba:
                    6e:9e:0c:ca:4e:ff:41:5a:f1:35:ef:13:81:1c:60:
                    cb:e7:37:ad:e3:1a:d7:0c:28:62:96:65:8b:b3:20:
                    3e:b6:97:73:06:9f:86:2a:d6:aa:eb:46:bb:fc:67:
                    48:30:d0:7f:ef:22:75:2d:2d:1d:cb:64:88:4d:c0:
                    89:cd:3d:20:cf:0f:5d:e9:ad:84:12:2f:36:cd:f8:
                    08:dd:5e:d8:b4:5f:7d:c5:fe:cf:63:e8:fd:bc:a3:
                    ac:83:b5:c7:1a:58:9f:e6:09:24:c4:ee:95:e1:0e:
                    ed:80:40:e2:f9:b6:90:e5:86:5b:7e:a6:a2:43:b0:
                    69:b8:96:d7:cd:e0:78:85:17:0e:ec:48:cf:1e:8f:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:93:05:D7:C5:A1:14:FD:72:EE:B2:36:35:58:DB:0A:6F:4B:15:99
            X509v3 Authority Key Identifier:
                keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:bc:cb:be:4d:b6:d5:3e:b0:cd:06:9a:c1:a5:ba:2e:3c:83:
         d9:ac:f7:d3:14:b4:a3:3b:3c:cd:94:63:11:08:ed:22:27:b5:
         17:57:07:37:a6:2b:82:81:7e:8f:e2:07:5f:33:64:12:f4:ad:
         13:6f:df:f9:64:2b:15:ee:05:27:a5:ff:60:1b:65:ab:de:2e:
         3f:79:86:27:66:1d:26:ec:23:72:4b:7f:cf:82:b9:a6:f3:c0:
         25:87:b5:e2:c4:60:1a:7f:74:aa:5a:42:f2:9b:41:aa:a0:1c:
         78:21:9a:34:23:fe:56:12:67:e3:23:a5:0c:25:cd:f2:27:7f:
         6d:57:7a:1d:72:c3:82:c8:a3:5b:e0:0d:66:fd:37:2c:35:d2:
         4d:79:2c:e4:d6:1d:98:48:a4:43:75:76:40:65:a1:f4:2b:5e:
         82:d4:39:f4:b6:9e:08:a8:77:91:5e:01:3b:bf:ac:ea:e2:11:
         4b:cf:00:a5:79:5f:e3:72:6c:80:03:4f:89:4b:da:1e:1b:00:
         e7:93:a8:5d:27:e8:3a:ae:7b:5f:77:30:ea:13:3e:1e:c8:a2:
         f6:14:20:10:03:7a:d4:0c:e7:33:42:da:98:8b:b1:d5:4b:0c:
         20:d3:32:9c:2e:fd:1b:6d:8b:bd:e3:a5:0a:e3:88:a5:28:b8:
         b9:bb:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:20 2024 by rpki-client on console-fra.rpki-client.org