Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.mft
File:                     qQ3EdQKeHXkzVZeLpGv4cwZVZLE.mft (raw, json)
Hash identifier:          w+pwGaGynIbXrWg+PsrBIqngSh7S/d8clXD19yKvGz4=
Subject key identifier:   24:1E:C6:AB:45:90:A6:12:CD:C6:79:69:4C:BF:4D:49:35:2F:74:20
Authority key identifier: A9:0D:C4:75:02:9E:1D:79:33:55:97:8B:A4:6B:F8:73:06:55:64:B1
Certificate issuer:       /CN=a90dc475029e1d793355978ba46bf873065564b1
Certificate serial:       019368FCDE9A9C8AC83CE10C7CE2EB4BEADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.mft
Manifest number:          07A6
Signing time:             Tue 26 Nov 2024 15:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:22 +0000
Files and hashes:         1: j1IEZXMzXLCKi9RncFlAMYKulAw.roa (hash: TXxPSz/pQk7cTxbi6YRxpNNlXPlIanShgMwqSRJgp5I=)
                          2: qQ3EdQKeHXkzVZeLpGv4cwZVZLE.crl (hash: FZLK50RrXcxqsDlv7WlxSOvzEV9SwNxrcndys10ch+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 15:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fc:de:9a:9c:8a:c8:3c:e1:0c:7c:e2:eb:4b:ea:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90dc475029e1d793355978ba46bf873065564b1
        Validity
            Not Before: Nov 26 15:00:22 2024 GMT
            Not After : Nov 27 15:00:22 2024 GMT
        Subject: CN=241ec6ab4590a612cdc679694cbf4d49352f7420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:2d:8d:47:4a:2a:29:1c:99:e3:f9:ce:f6:
                    64:4b:63:4f:eb:d6:1c:d4:2d:6a:9a:15:8c:d1:9a:
                    02:6c:14:b9:86:41:5f:1d:5d:e6:f8:47:42:80:b2:
                    c2:c8:ea:32:30:1e:77:b1:ff:aa:c6:0d:14:b0:dd:
                    e3:0b:31:a1:c5:99:21:84:72:d3:52:be:c7:e6:da:
                    43:2f:74:0f:16:f4:af:cd:aa:6a:e0:66:96:c1:62:
                    37:e6:16:98:f7:96:e7:f6:46:f9:86:89:9c:a3:34:
                    a0:fb:07:b5:45:d6:d7:13:ce:04:24:92:08:db:7f:
                    48:a7:21:ef:0d:25:1e:f4:bd:54:3e:3b:62:bb:5a:
                    72:67:90:3c:91:b6:d1:02:9b:26:99:bf:bb:56:76:
                    41:f9:11:9a:1e:ce:42:f6:f7:58:61:2f:26:96:9d:
                    d5:a5:44:34:0d:59:72:76:1f:50:b5:ef:e8:26:00:
                    72:71:e9:65:87:28:85:e0:3e:25:df:5e:83:c2:77:
                    e9:b2:73:da:2e:bb:2b:fa:1a:b3:e6:29:2b:bd:7e:
                    4a:b6:0b:7f:b2:79:c4:9e:f9:73:6e:a1:8a:21:20:
                    a4:be:47:68:12:e7:31:f5:e2:6e:ad:c1:7e:28:e2:
                    78:c5:a2:f6:25:24:3e:7c:28:41:3b:a4:60:76:79:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1E:C6:AB:45:90:A6:12:CD:C6:79:69:4C:BF:4D:49:35:2F:74:20
            X509v3 Authority Key Identifier:
                keyid:A9:0D:C4:75:02:9E:1D:79:33:55:97:8B:A4:6B:F8:73:06:55:64:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:40:a4:b2:3a:69:a7:21:26:cb:58:88:b8:3d:76:8b:95:
         48:99:a2:dc:22:43:65:9f:76:a4:a8:af:6d:55:53:82:0f:10:
         f5:9e:b7:9c:66:85:e5:5d:6c:3a:74:b3:f9:b0:9b:01:e3:5c:
         75:9c:19:97:2f:0f:e0:90:26:f4:5e:82:1f:55:2f:35:72:a4:
         2d:0d:fc:47:17:95:f1:3d:8a:3a:65:b7:69:d0:de:0f:2f:84:
         8c:51:9b:77:4e:c5:8b:3a:d2:45:84:5e:65:96:1f:c6:e6:d4:
         9b:61:b6:73:0e:99:6b:fb:02:61:ed:f2:fd:e6:da:c6:d3:c5:
         0a:22:94:d8:cd:06:e7:ae:a8:8f:ff:78:4e:45:80:09:1f:c4:
         50:16:ae:9f:c9:84:d4:01:93:2b:09:64:f9:5d:9b:26:64:b6:
         05:bb:fc:cc:6d:ea:0f:35:f6:2b:cb:a2:71:e9:e1:50:a8:62:
         7f:f2:b5:42:28:d6:37:78:21:1b:4a:d2:d6:2a:75:03:34:67:
         05:5b:1a:ff:92:20:e3:78:22:8b:49:a8:eb:52:29:d3:9a:75:
         85:f6:5c:58:30:da:f0:f4:9e:63:e4:a9:e9:54:3b:3a:d1:2b:
         66:1a:db:8d:70:de:49:1d:ab:f9:25:52:c6:5c:48:e3:96:c6:
         12:53:df:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNo/N6anIrIPOEMfOLrS+reMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGRjNDc1MDI5ZTFkNzkzMzU1OTc4YmE0NmJmODczMDY1
NTY0YjEwHhcNMjQxMTI2MTUwMDIyWhcNMjQxMTI3MTUwMDIyWjAzMTEwLwYDVQQD
EygyNDFlYzZhYjQ1OTBhNjEyY2RjNjc5Njk0Y2JmNGQ0OTM1MmY3NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IwtjUdKKikcmeP5zvZkS2NP69Yc
1C1qmhWM0ZoCbBS5hkFfHV3m+EdCgLLCyOoyMB53sf+qxg0UsN3jCzGhxZkhhHLT
Ur7H5tpDL3QPFvSvzapq4GaWwWI35haY95bn9kb5homcozSg+we1RdbXE84EJJII
239IpyHvDSUe9L1UPjtiu1pyZ5A8kbbRApsmmb+7VnZB+RGaHs5C9vdYYS8mlp3V
pUQ0DVlydh9Qte/oJgBycellhyiF4D4l316DwnfpsnPaLrsr+hqz5ikrvX5Ktgt/
snnEnvlzbqGKISCkvkdoEucx9eJurcF+KOJ4xaL2JSQ+fChBO6RgdnnNDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQexqtFkKYSzcZ5aUy/TUk1L3QgMB8GA1UdIwQY
MBaAFKkNxHUCnh15M1WXi6Rr+HMGVWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVEzRWRRS2VIWGt6VlplTHBHdjRjd1pWWkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80ODNhNjgtMDhlNy00ZjkwLTlmZDkt
ZmY0YTJiODU4ODljLzEvcVEzRWRRS2VIWGt6VlplTHBHdjRjd1pWWkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80ODNhNjgtMDhlNy00ZjkwLTlmZDktZmY0YTJiODU4ODlj
LzEvcVEzRWRRS2VIWGt6VlplTHBHdjRjd1pWWkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo5ApLI6
aachJstYiLg9douVSJmi3CJDZZ92pKivbVVTgg8Q9Z63nGaF5V1sOnSz+bCbAeNc
dZwZly8P4JAm9F6CH1UvNXKkLQ38RxeV8T2KOmW3adDeDy+EjFGbd07FizrSRYRe
ZZYfxubUm2G2cw6Za/sCYe3y/ebaxtPFCiKU2M0G566oj/94TkWACR/EUBaun8mE
1AGTKwlk+V2bJmS2Bbv8zG3qDzX2K8uicenhUKhif/K1QijWN3ghG0rS1ip1AzRn
BVsa/5Ig43gii0mo61Ip05p1hfZcWDDa8PSeY+Sp6VQ7OtErZhrbjXDeSR2r+SVS
xlxI45bGElPfjw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:07 2024 by rpki-client on console-ams.rpki-client.org