Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File:                     QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier:          inAlK8RYXt7H3x82iy9CKbhYsaaGOgZsf/SbTWnhP+s=
Subject key identifier:   1D:29:ED:9B:B0:05:20:5A:8A:AD:38:93:03:2D:53:ED:48:76:B2:D0
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer:       /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial:       0193572D9CCD380C49DE11852676F4534451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number:          0A2F
Signing time:             Sat 23 Nov 2024 04:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:27 +0000
Files and hashes:         1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: gdTbYPT14VUKxT28RVdONiZstLzmhw1hNEJ8lYMcpcI=)
                          2: fAQ3uoX3gLx5Op3T8kWpYtPrpIo.roa (hash: 6mkywlIAjV5xKHmJK/d1Sc9FbcXLSsrT/P9oLXWjSK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:9c:cd:38:0c:49:de:11:85:26:76:f4:53:44:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
        Validity
            Not Before: Nov 23 04:00:27 2024 GMT
            Not After : Nov 24 04:00:27 2024 GMT
        Subject: CN=1d29ed9bb005205a8aad3893032d53ed4876b2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:28:d8:65:1e:19:c0:5e:35:36:5a:1b:4b:
                    2b:76:be:e8:88:2b:08:67:93:91:32:0a:88:8d:f1:
                    84:00:8d:b3:3b:ab:d7:69:f2:31:cd:d9:8e:94:6b:
                    22:99:e0:12:de:5b:28:73:4c:bc:89:f9:39:54:a9:
                    18:5a:2f:92:02:d4:f6:75:aa:7a:5b:8e:c6:59:4f:
                    7b:47:d4:a8:bc:e7:43:d0:4b:d8:77:51:83:43:8e:
                    6e:c0:29:cd:90:cd:67:04:b5:db:5d:e3:99:9b:4d:
                    56:3f:11:fd:60:82:76:c3:a0:55:12:36:d8:d4:4f:
                    6b:48:2e:a8:62:b2:05:9d:30:c5:44:7d:27:7d:4a:
                    35:05:6a:09:ed:c4:3f:c8:60:69:33:79:64:36:24:
                    c9:82:0f:a8:30:a0:44:7e:da:59:10:db:03:88:7e:
                    02:1a:c1:8e:43:e1:55:10:86:56:95:4c:47:a8:ae:
                    5c:b3:91:6d:bf:db:01:c3:1f:72:0d:be:aa:68:ad:
                    1b:e8:31:35:83:dc:b4:f4:db:ea:4a:7d:89:7c:02:
                    3b:68:7d:9b:f4:c9:73:24:21:fb:b1:e1:99:51:ef:
                    e4:70:e1:58:4f:6a:7c:f9:91:10:e9:da:23:9d:2c:
                    be:3c:e5:57:ed:4c:a3:de:31:b6:1e:a0:c3:57:78:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:29:ED:9B:B0:05:20:5A:8A:AD:38:93:03:2D:53:ED:48:76:B2:D0
            X509v3 Authority Key Identifier:
                keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f1:63:a2:90:94:99:10:3d:10:a7:a6:06:59:5c:ee:6c:ca:
         9d:9a:ea:56:86:49:a2:c5:0d:ff:55:4b:f5:93:5b:38:9f:3e:
         5b:d0:e8:0a:fd:ca:00:c0:5f:ea:1b:d2:20:30:93:6b:71:50:
         59:cc:0e:8a:21:8f:e7:42:fe:b5:67:87:16:0f:4a:fd:c0:2f:
         80:f4:4e:ae:7c:c9:fd:3e:fe:fc:1c:f1:60:dc:cb:22:36:d1:
         52:b0:71:c0:03:97:09:b5:93:8c:e0:3f:56:d2:04:12:d9:7e:
         18:23:74:f7:b6:c1:bb:05:5d:ea:0b:84:36:61:c9:fb:c3:09:
         36:03:f1:e2:2e:19:ef:54:67:17:09:8c:84:df:83:0e:2d:8e:
         4f:95:3d:13:29:53:c8:b6:e3:8d:e5:31:8a:bb:c9:da:e0:80:
         8f:fa:6f:bf:c6:1d:fc:6e:be:f1:cd:1b:28:6b:1a:3d:b5:a3:
         2e:64:84:8c:e8:a9:97:c2:08:7a:41:f4:56:bf:c0:e0:eb:90:
         c1:85:6e:ca:b9:6b:c7:9f:a7:55:43:f6:e3:5a:d9:5e:ca:6d:
         6b:6f:e8:91:4f:a8:db:62:20:99:f3:0d:ca:e8:87:ef:9f:c4:
         73:e7:88:92:17:b2:30:52:8d:4c:22:55:79:d2:aa:dd:87:00:
         28:cf:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:27 2024 by rpki-client on console-ams.rpki-client.org