Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File:                     qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier:          fb4SwMWU2moZG41UpFI0ewvS+58bgn6ErJemQvDTfhA=
Subject key identifier:   9F:00:AC:DB:3D:D2:82:C3:7F:AB:D0:F2:37:CF:97:1B:00:B4:BF:25
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer:       /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial:       01935688D94862062C6E5398FCB70BBBB7BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number:          0548
Signing time:             Sat 23 Nov 2024 01:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:29 +0000
Files and hashes:         1: kK22u1ntArhccpCxcjd22WJ4HiE.roa (hash: /XDPbBXlabU+oT4jhiFLsesk7TDovr3+B1DAWzpwgCA=)
                          2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: X+oEbinQQjoOXY0IFslMvPsZin5g8rloxOA1F2HgCrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:d9:48:62:06:2c:6e:53:98:fc:b7:0b:bb:b7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
        Validity
            Not Before: Nov 23 01:00:29 2024 GMT
            Not After : Nov 24 01:00:29 2024 GMT
        Subject: CN=9f00acdb3dd282c37fabd0f237cf971b00b4bf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dc:8e:0c:cd:78:82:d3:91:1b:0b:a3:50:34:
                    6f:7d:88:f3:34:4a:45:f5:e4:52:40:e2:e7:b1:1b:
                    bb:50:90:02:c0:ab:72:d1:8a:cf:7b:40:ab:11:5a:
                    e3:f2:8c:a2:9e:91:b3:43:74:ad:a8:af:63:52:0d:
                    c0:15:63:4a:0c:28:ed:1f:9c:cb:19:61:1e:99:31:
                    83:85:5b:41:44:06:b3:8c:21:56:2e:e8:51:f6:f8:
                    bd:bb:8e:14:0d:c6:e1:ab:f1:63:43:47:68:45:92:
                    c5:fa:d0:a6:4a:0d:1e:7a:74:23:6a:a7:89:87:a0:
                    5e:0b:46:41:1d:85:7d:56:f9:2e:92:f2:54:53:81:
                    87:35:7f:a8:40:3d:eb:2a:f5:65:a0:ab:61:84:d9:
                    21:74:03:71:03:37:03:40:b7:88:37:4c:4b:a9:45:
                    7b:ce:1b:0c:68:68:d8:30:14:18:66:47:ef:15:77:
                    06:30:12:22:81:29:f3:a4:aa:a8:46:64:f5:e1:f9:
                    31:39:e3:ca:ab:43:9d:ee:e4:c6:52:7a:07:ec:3d:
                    d2:9d:e5:d5:e2:2f:7c:6e:fe:f3:52:45:15:56:dd:
                    97:f4:d3:1d:51:51:14:0e:e7:a5:2c:3d:69:94:2d:
                    1e:16:cc:c4:71:bd:7a:4a:39:8e:0c:5f:9b:a2:0e:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:00:AC:DB:3D:D2:82:C3:7F:AB:D0:F2:37:CF:97:1B:00:B4:BF:25
            X509v3 Authority Key Identifier:
                keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a9:51:29:9d:13:e9:66:78:5c:dd:9b:29:8e:1c:bd:45:8c:
         ba:e3:15:3a:4b:9c:8d:34:55:b7:04:f1:f0:c7:27:41:d1:82:
         fc:b1:ab:b4:f0:e2:7c:b8:2c:c0:73:4b:07:1a:36:e2:2a:b9:
         fe:d9:3d:b6:9c:2a:a4:b1:e0:71:f4:c7:1e:9d:d9:31:5a:77:
         81:61:20:43:f4:56:5b:b7:2e:9b:81:98:31:3a:49:44:cb:f6:
         7a:42:80:55:c6:5a:31:f7:99:60:3a:85:bb:ce:6b:89:4b:df:
         c1:83:16:cc:83:af:03:c9:6f:1d:0b:a2:25:23:38:bf:91:c0:
         9b:bc:2a:ac:2d:79:2a:9b:ef:58:d9:6b:76:0e:7b:28:27:08:
         be:bb:8e:fd:21:ca:cd:58:cb:bc:cd:fb:98:63:96:cb:4a:ab:
         ee:3e:8f:8f:3f:f1:be:5a:32:bf:c5:64:83:c1:f1:8d:ae:0b:
         f8:62:0e:87:3a:85:e8:b5:0d:42:4d:34:2a:7b:45:ab:4b:1b:
         48:0b:49:b3:0d:6f:78:e9:8d:5e:f8:59:68:4a:cf:8a:cf:3d:
         7f:ab:fe:a9:e3:40:e6:a8:f9:4b:00:ac:30:48:28:72:85:33:
         34:d8:02:57:18:c7:d5:e8:f3:a4:d4:2b:73:dc:1d:8f:b6:5a:
         a6:07:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:31 2024 by rpki-client on console-ams.rpki-client.org