Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File:                     qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier:          5uPIclYkRFDbSzhaAsNWqOfJr7u+XhrYFw0Rhxaj5o4=
Subject key identifier:   49:2E:03:40:9F:92:2A:79:4C:07:EB:AF:7C:29:2E:B0:2F:E0:64:20
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer:       /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial:       0193561ADBA82C491E674E7F2D98CAF1F333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number:          1375
Signing time:             Fri 22 Nov 2024 23:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:20 +0000
Files and hashes:         1: 4rlGRFfeVVH0iaTmHFWGqk9aUb4.roa (hash: /6rLmFzHivcHa1Uy/CZIN4AhiCyL4izFMKEa4tlfCZ0=)
                          2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: HiKdYSLwEOYAc7Azy7Ed3FAaQDKyyOARwgHD6YZFwAE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:db:a8:2c:49:1e:67:4e:7f:2d:98:ca:f1:f3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
        Validity
            Not Before: Nov 22 23:00:20 2024 GMT
            Not After : Nov 23 23:00:20 2024 GMT
        Subject: CN=492e03409f922a794c07ebaf7c292eb02fe06420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:63:1c:c0:4a:7f:0d:44:70:0f:55:c2:a4:46:
                    c0:be:4c:3b:33:fa:1f:62:fc:6c:9f:cb:ca:88:07:
                    17:66:5c:6a:30:84:b8:9f:d7:c7:0f:2f:09:04:58:
                    a8:81:8f:18:b9:5e:3f:73:f4:d8:46:3b:8a:05:42:
                    22:23:c0:80:e4:8e:f2:c0:f8:a9:b5:24:9f:13:2d:
                    7e:33:57:d3:e5:1e:c8:e3:a3:30:36:58:41:06:d5:
                    74:3d:7a:74:8d:b9:ae:d0:6a:cc:99:e1:20:32:b1:
                    17:fc:37:4c:80:01:f1:2a:ab:f4:82:28:a0:86:6e:
                    1a:eb:89:e8:39:b5:37:71:9b:c3:8d:ec:c1:69:e1:
                    67:42:17:99:e7:76:b1:f4:1e:5b:28:1e:6d:48:d5:
                    00:c5:1d:a4:1d:2d:1e:1f:c5:52:4d:dd:4e:8c:c3:
                    92:5b:a5:07:df:46:07:a9:a2:fa:3c:70:bc:7f:f4:
                    6a:f1:1d:51:7b:18:87:d9:7d:23:7c:3d:6e:87:06:
                    53:98:6e:b8:91:54:3f:df:56:5f:e2:75:c6:e4:98:
                    d3:aa:85:29:ae:dd:46:c2:de:eb:c0:c4:75:2e:04:
                    35:c0:c4:e8:76:63:b9:3e:93:8d:63:bc:51:dd:0d:
                    0e:ba:f2:ce:6d:ec:f4:a6:ad:e0:d3:da:85:07:02:
                    0e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2E:03:40:9F:92:2A:79:4C:07:EB:AF:7C:29:2E:B0:2F:E0:64:20
            X509v3 Authority Key Identifier:
                keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:51:02:d2:1a:21:ae:06:23:f8:51:ad:e5:36:ba:a0:46:bc:
         41:75:2c:91:b4:41:cc:85:e4:73:97:3f:df:57:62:af:35:10:
         e5:9d:d2:5b:e9:33:2c:43:f4:a4:af:6d:19:7b:a1:93:92:cf:
         16:f5:76:f1:37:42:05:96:b3:f5:97:04:9f:74:3e:3d:73:9b:
         8a:fb:99:45:cf:98:03:5e:f1:ac:0e:db:f9:bf:cb:7a:97:ae:
         2a:9f:7e:61:ff:37:72:c9:21:d9:da:e3:4e:c8:6b:93:33:cf:
         d8:d7:bf:df:09:dd:e4:27:94:a0:58:bf:42:7a:42:77:8a:ce:
         13:fb:08:f4:9e:0b:2a:fb:06:19:3f:b6:aa:fd:4f:fb:3a:c0:
         46:eb:f4:d2:0e:e6:92:d6:fd:5f:4c:10:57:f2:55:98:19:52:
         f8:9f:d7:44:8d:88:d2:ec:db:a5:3c:28:af:81:e2:27:77:ba:
         8b:51:45:c3:05:26:c6:16:ca:8b:79:dd:54:b7:32:4b:bd:c8:
         6d:0b:14:b3:be:aa:6a:14:02:b1:d7:b6:34:bd:2d:d3:dc:25:
         eb:b2:8a:77:3d:e9:21:3d:43:34:0f:58:61:71:55:c4:8e:26:
         85:08:78:41:77:29:ef:31:0e:f3:c9:f9:ff:c3:89:7e:db:b6:
         d1:17:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:52 2024 by rpki-client on console-ams.rpki-client.org