Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
File:                     Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft (raw, json)
Hash identifier:          BsdCsPmF2qhiJaiatCDecMPeLFnHN8r/oo5jThjizog=
Subject key identifier:   E9:5A:31:3C:EF:8B:2C:00:D0:7D:5D:F7:84:55:D8:A5:66:F2:54:9C
Authority key identifier: 43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
Certificate issuer:       /CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Certificate serial:       01935877EEBA2DA478A18F4A8CBEC853A743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
Manifest number:          109D
Signing time:             Sat 23 Nov 2024 10:01:15 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:15 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:15 +0000
Files and hashes:         1: C1McBUoStX2C-f5AJnmtXiKXLvg.roa (hash: eBPGapOa9e7VrDtFQIb6zc0B6c0Gl9PTuWOQ6Q5hozk=)
                          2: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl (hash: yvdq/ezxNaUxz3v/u0XRH+FS0lVBtg0djyrq8dQjiuc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:ee:ba:2d:a4:78:a1:8f:4a:8c:be:c8:53:a7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
        Validity
            Not Before: Nov 23 10:01:15 2024 GMT
            Not After : Nov 24 10:01:15 2024 GMT
        Subject: CN=e95a313cef8b2c00d07d5df78455d8a566f2549c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:05:38:57:0c:53:0c:86:64:33:48:9b:d8:cc:
                    3d:5e:d7:b5:ab:c6:27:bf:1d:e3:f6:e7:1d:94:ee:
                    19:1c:c2:d5:5e:16:cb:7b:d0:ef:40:25:51:44:88:
                    3b:fe:ac:fc:fd:c4:24:e8:ab:2e:8d:e0:cc:22:a1:
                    d8:b6:19:30:23:8c:36:eb:61:69:1f:0c:9d:ad:53:
                    d9:95:44:39:58:4f:70:cf:d8:f9:70:a3:df:f8:8d:
                    06:9c:1e:cb:62:78:d9:57:10:af:f6:bd:ea:e6:60:
                    05:29:50:4f:74:3a:f8:b6:a7:3d:3f:da:fa:9b:be:
                    b3:75:40:19:68:42:1d:ed:64:df:3c:10:03:ec:0c:
                    43:93:91:0b:04:d8:48:4b:2e:e7:35:ca:f8:71:b5:
                    5c:fa:da:df:2a:80:f7:84:97:ee:ce:20:5d:95:11:
                    cd:a8:cf:08:3d:9d:c4:58:5a:85:a8:c9:68:d7:e1:
                    5b:c7:e0:f9:2c:bb:b4:36:a8:48:5d:70:5a:11:bd:
                    4e:1d:66:94:a4:0e:43:85:49:05:8f:8c:98:b8:2c:
                    3f:e7:1d:84:2d:24:bf:80:4b:ac:00:fe:23:ae:33:
                    ad:c5:c2:88:6d:44:73:44:e6:81:61:d8:cd:be:a7:
                    ae:12:34:7c:b0:66:77:2d:9e:a3:43:ae:6b:80:d9:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5A:31:3C:EF:8B:2C:00:D0:7D:5D:F7:84:55:D8:A5:66:F2:54:9C
            X509v3 Authority Key Identifier:
                keyid:43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:44:a8:37:b6:e0:14:dc:de:49:f2:99:0a:a7:35:b6:5c:81:
         7d:35:c9:46:3b:e3:d8:85:66:1e:a6:32:82:f8:e5:d7:b8:8d:
         0f:c4:77:78:f5:ae:39:bc:19:1f:98:c4:3c:10:05:18:28:62:
         5e:85:2d:b2:16:6f:59:c5:20:b6:64:49:ed:55:dc:90:78:b8:
         1a:91:b4:64:8d:74:12:1a:9b:19:c4:e1:4b:ec:8d:81:87:89:
         d4:00:d4:19:bb:99:0e:f9:2b:20:57:76:04:c7:fa:24:c4:c1:
         ce:3b:06:b0:fa:81:c0:e8:56:c9:28:4a:dd:48:62:05:ea:32:
         99:e9:5b:cd:e3:b9:07:41:2c:1b:6f:1f:f6:cd:3c:db:5c:d9:
         c3:67:64:65:bc:50:04:39:b4:b0:b6:97:02:b1:da:a1:19:4f:
         01:3f:6a:8c:1a:df:ee:4b:8c:61:ca:ef:93:cc:f5:c4:67:b4:
         d0:27:1c:ab:e8:71:18:00:bb:21:14:ac:85:96:f4:e8:4b:3e:
         80:87:71:6f:33:23:b2:93:60:b0:26:7d:6c:f0:e1:c9:d7:73:
         1f:dc:4f:e4:07:ff:17:69:6d:98:82:72:27:cd:0a:96:17:9a:
         75:95:8c:0b:21:bc:c4:05:4c:0b:67:c4:0f:dc:d2:4f:9c:5d:
         31:9f:de:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYd+66LaR4oY9KjL7IU6dDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNjgzMzBiZWEyZGZlODgwZmZhNjJmNjdiNTY2YWVhZTJk
Mjg3ZmQwHhcNMjQxMTIzMTAwMTE1WhcNMjQxMTI0MTAwMTE1WjAzMTEwLwYDVQQD
EyhlOTVhMzEzY2VmOGIyYzAwZDA3ZDVkZjc4NDU1ZDhhNTY2ZjI1NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gU4VwxTDIZkM0ib2Mw9Xte1q8Yn
vx3j9ucdlO4ZHMLVXhbLe9DvQCVRRIg7/qz8/cQk6KsujeDMIqHYthkwI4w262Fp
HwydrVPZlUQ5WE9wz9j5cKPf+I0GnB7LYnjZVxCv9r3q5mAFKVBPdDr4tqc9P9r6
m76zdUAZaEId7WTfPBAD7AxDk5ELBNhISy7nNcr4cbVc+trfKoD3hJfuziBdlRHN
qM8IPZ3EWFqFqMlo1+Fbx+D5LLu0NqhIXXBaEb1OHWaUpA5DhUkFj4yYuCw/5x2E
LSS/gEusAP4jrjOtxcKIbURzROaBYdjNvqeuEjR8sGZ3LZ6jQ65rgNnh0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlaMTzviywA0H1d94RV2KVm8lScMB8GA1UdIwQY
MBaAFENoMwvqLf6ID/pi9ntWauri0of9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJnekMtb3Rfb2dQLW1MMmUxWnE2dUxTaF8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84ZmMzYjAtOTcwNC00NzUxLWIxNDkt
NWEzN2Y2YTFiY2E5LzEvUTJnekMtb3Rfb2dQLW1MMmUxWnE2dUxTaF8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84ZmMzYjAtOTcwNC00NzUxLWIxNDktNWEzN2Y2YTFiY2E5
LzEvUTJnekMtb3Rfb2dQLW1MMmUxWnE2dUxTaF8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOESoN7bg
FNzeSfKZCqc1tlyBfTXJRjvj2IVmHqYygvjl17iND8R3ePWuObwZH5jEPBAFGChi
XoUtshZvWcUgtmRJ7VXckHi4GpG0ZI10EhqbGcThS+yNgYeJ1ADUGbuZDvkrIFd2
BMf6JMTBzjsGsPqBwOhWyShK3UhiBeoymelbzeO5B0EsG28f9s0821zZw2dkZbxQ
BDm0sLaXArHaoRlPAT9qjBrf7kuMYcrvk8z1xGe00Cccq+hxGAC7IRSshZb06Es+
gIdxbzMjspNgsCZ9bPDhyddzH9xP5Af/F2ltmIJyJ80KlheadZWMCyG8xAVMC2fE
D9zST5xdMZ/ehg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:05:30 2024 by rpki-client on console-ams.rpki-client.org