Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          G+qsUDgG5wE3jk0Nftn7aBqbUN4PniUd7NbdcRQSeHM=
Subject key identifier:   49:2A:D8:24:D8:E6:34:E8:00:45:51:0C:FE:69:72:F9:31:D7:6C:4E
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       0193579BB6EE56B058A79E4CBA0CDE14BCC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          029F
Signing time:             Sat 23 Nov 2024 06:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:42 +0000
Files and hashes:         1: 1-7s8yRsWdpcNYRcC6pNWouKZo_s.roa (hash: cKxPXK76vSWT8kc54pFn0Xp8YyVkwsVFfQi9TChBGyc=)
                          2: 1vtsNBXxjHxuFB986u-a-Qai2xk.roa (hash: VhS2AmG5HNy9rj6U9NWORkZQc7plpX64k1TFzVsyBX0=)
                          3: TqZcftukadCZ12qs19wmP03-xes.crl (hash: DFXabEmcQNNySjO9MHcyC1GgzPvsnDv8iozz835wVT0=)
                          4: a2OjTk5blyfnAh7OmOC802tqsME.roa (hash: nMFuIPE8rM6P0k4M/K15T+p3Gri4o/RXKy498lwqUis=)
                          5: sevC8do58Ak7ZpfSev00ohlQsCw.roa (hash: RIP/Kn2Nw+4bCLSCat6k83lkJst1obL4IJb40l8npXg=)
                          6: ybluWzRNWJWVkM4LdMhN2qbYNiA.roa (hash: 5VhivqUvJ4H/Xx3dusqAO6SABn9AUoBB/dmwOD8WIII=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:b6:ee:56:b0:58:a7:9e:4c:ba:0c:de:14:bc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Nov 23 06:00:42 2024 GMT
            Not After : Nov 24 06:00:42 2024 GMT
        Subject: CN=492ad824d8e634e80045510cfe6972f931d76c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:32:d9:fe:f1:d1:2b:20:0c:6d:dc:a5:2a:
                    ce:25:15:ab:47:ae:ac:34:d1:d7:6e:69:f4:58:d2:
                    2a:07:32:9a:c8:a4:b9:76:af:78:81:42:d6:cf:58:
                    7f:f8:aa:90:b3:19:c7:5c:77:df:3d:0a:cf:38:67:
                    49:ac:b2:2e:5f:4c:fc:a0:35:a4:52:cc:10:50:d1:
                    f3:53:d2:d7:4c:c9:e4:36:e7:5f:a2:15:e0:7f:49:
                    70:93:1e:87:88:07:cf:7f:fd:d2:72:4e:8e:eb:0c:
                    32:af:54:c2:9a:fe:1a:fb:71:ff:e1:c8:01:eb:7a:
                    ae:f9:f6:04:76:3c:0a:c7:a5:a4:49:4d:44:72:60:
                    6b:c4:ff:28:f6:60:e5:9c:e1:0c:e6:c5:27:41:ab:
                    dc:47:41:14:c7:d8:4a:c2:88:96:ee:c8:4b:60:d0:
                    06:a1:f3:e8:41:7e:9a:55:6b:a1:a0:78:0e:d9:23:
                    ce:fa:b1:03:ec:c0:1a:2c:84:0d:f0:15:dd:99:b1:
                    9e:d7:33:99:72:34:08:7d:ef:e8:c1:a3:ab:cb:76:
                    ad:5e:ae:5d:44:cd:30:77:60:00:50:e9:e4:07:76:
                    94:7b:e1:26:b0:4d:64:c1:56:9b:9d:39:1c:99:dc:
                    51:4c:96:8e:4e:3b:2c:5a:6e:ce:e0:22:30:d1:50:
                    d8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2A:D8:24:D8:E6:34:E8:00:45:51:0C:FE:69:72:F9:31:D7:6C:4E
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:56:3b:fd:02:e3:e5:d7:f0:db:b9:ae:68:32:d5:ec:09:
         e4:fc:e7:54:bc:a2:9a:80:54:cb:e3:11:2b:1a:0f:76:4f:4f:
         36:60:94:0f:37:ca:2f:ce:3d:72:59:f0:49:50:75:1c:97:65:
         f0:09:92:c9:25:7c:f7:9c:94:f5:2f:f7:4d:68:ec:e3:64:5e:
         d0:35:65:83:aa:f4:59:d7:54:32:2e:9b:9f:e4:38:e2:9c:72:
         d3:e5:8a:ba:92:7e:23:8c:38:48:31:52:2a:c4:8e:bc:2f:7b:
         eb:73:25:9c:47:0e:07:00:d1:c6:d2:4d:53:69:ea:eb:de:50:
         ec:27:e5:48:7e:bf:cf:38:8c:0f:ca:4b:9d:54:9b:50:b4:fb:
         22:fc:2f:71:b1:23:b9:e5:17:e1:c7:4d:8f:0b:8b:98:54:f1:
         a6:de:ea:ae:03:a5:86:13:75:4c:84:44:4d:7d:22:3d:26:7c:
         d7:fc:e2:10:d0:a4:dd:9d:a0:a6:be:4a:a4:e9:80:31:6c:a0:
         79:d6:8a:88:50:21:37:c6:9e:bd:e5:8c:a5:b8:03:c0:74:85:
         66:df:75:b6:4c:7f:cb:65:82:fb:8b:f4:cd:8b:23:dd:26:f3:
         66:d9:b0:87:c4:3c:22:b3:cf:55:ee:64:1c:58:4c:e9:8b:23:
         61:79:db:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:51 2024 by rpki-client on console-fra.rpki-client.org