Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File:                     QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier:          ywyaEvbVC1ScDZY6bE8pDT+QhBL706UmjD9aenUcLMw=
Subject key identifier:   1E:6F:18:7E:DE:AA:CB:B8:21:C2:7E:DA:4C:55:9B:40:D8:D4:6C:82
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer:       /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial:       0193572D9658804B7C1D79D5964B5D68DB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number:          10AA
Signing time:             Sat 23 Nov 2024 04:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:25 +0000
Files and hashes:         1: Gin6T3dsFfBFNzpAFSA7PquXNH4.roa (hash: 8RYd4lZteZcaaaTEX0wfHgw6tY3pLC089+EOILGATIo=)
                          2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: 2Up0D1bk+m1dUWzAFFtVCsR82QU9AAKg4nbazIEFr/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:96:58:80:4b:7c:1d:79:d5:96:4b:5d:68:db:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
        Validity
            Not Before: Nov 23 04:00:25 2024 GMT
            Not After : Nov 24 04:00:25 2024 GMT
        Subject: CN=1e6f187edeaacbb821c27eda4c559b40d8d46c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:39:c0:53:71:42:80:80:ab:7f:18:0a:9f:
                    34:a2:bc:f1:94:70:85:63:45:10:5f:e7:e6:3b:a6:
                    1c:44:a6:f4:c4:6b:10:b1:14:ee:f1:a3:93:9e:d1:
                    7c:3d:fa:df:fb:a6:64:26:ab:7c:ed:b4:4c:c5:55:
                    22:d5:79:76:e5:e9:99:3f:2f:d6:11:9a:17:64:13:
                    a2:38:cd:2c:ed:ce:64:92:39:e5:74:44:dc:ab:4f:
                    34:15:dc:d4:c1:93:12:5b:ba:ed:08:ab:c4:04:5b:
                    7e:8c:64:da:e9:38:bd:0a:b5:37:dd:e3:a7:3c:48:
                    6e:8b:e4:00:59:f8:24:d4:7c:34:84:95:2c:15:5b:
                    7f:c1:7f:71:24:9a:03:bc:cf:63:17:2b:a3:f3:b8:
                    40:9d:71:4e:58:bd:04:c6:c5:13:54:89:27:86:cb:
                    65:6b:6c:a8:e5:18:15:76:de:ba:6d:7d:75:8a:34:
                    06:e0:d6:1c:54:de:d4:12:9f:5a:40:e6:34:07:8b:
                    87:ec:6d:1b:06:c6:18:c0:8c:ce:81:54:ef:16:e8:
                    cd:8c:ae:15:d4:5f:82:9b:30:fc:4f:7d:60:d1:17:
                    65:2a:7c:33:4e:79:88:66:dc:58:c5:9a:18:0e:88:
                    46:d5:28:94:ac:44:e8:6e:63:79:76:67:6f:cc:2a:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6F:18:7E:DE:AA:CB:B8:21:C2:7E:DA:4C:55:9B:40:D8:D4:6C:82
            X509v3 Authority Key Identifier:
                keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:47:b1:e8:a3:06:9c:e3:e9:b4:9f:32:7f:e0:f0:66:ea:db:
         3b:db:60:76:4a:83:9a:bb:a1:ee:0c:e1:e9:6d:8d:5c:14:14:
         e2:99:62:86:34:98:68:b0:55:78:5f:ee:59:2f:f9:d4:a2:65:
         8f:c0:0c:1e:13:06:a4:05:84:0c:68:17:3b:56:d0:26:8c:10:
         2e:0f:2c:3a:46:98:41:f8:37:7c:4c:9a:5e:09:2d:c1:94:4c:
         d6:44:49:d5:d9:61:db:68:0c:4f:10:17:62:76:41:48:b4:51:
         2a:ee:1a:86:3d:bf:43:e9:0f:ce:38:a2:c9:d4:14:7d:6b:06:
         6c:44:cd:d2:fc:2b:c9:01:90:b7:14:02:c1:8c:6b:48:b7:71:
         d3:57:72:b0:fb:18:61:12:8e:16:7c:d9:cb:47:d8:09:3c:6d:
         aa:67:21:a8:03:01:f1:2b:17:ca:06:ef:b3:5b:bf:af:f6:50:
         f8:5d:fd:ae:88:a2:2d:30:a7:25:75:cf:4d:da:09:dd:5f:45:
         4a:c0:0d:16:c4:56:84:0a:6c:5c:9e:12:9f:ad:95:8c:c1:d0:
         d0:a4:62:c4:1b:f2:42:51:a3:9d:1d:ab:2a:ac:cb:91:4c:98:
         ef:4e:ce:76:0b:16:f2:68:79:ef:75:a2:06:70:2c:7a:cd:f9:
         2d:4b:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:23 2024 by rpki-client on console-fra.rpki-client.org