Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File:                     QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier:          6qPo4jW9sQ+bneV5poOx9i0kMud9vgEz+zSUwKL9/sM=
Subject key identifier:   7A:E7:40:9C:EF:30:82:6A:4D:61:42:69:63:35:22:72:1E:51:14:E5
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer:       /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial:       019357D2A3BB3780911B77D19D3C64966BD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number:          1262
Signing time:             Sat 23 Nov 2024 07:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:42 +0000
Files and hashes:         1: GT1dqj5bvtAMqy1gX-Q5HLZvemY.roa (hash: 6PZGyiBkPHzRboXX3zcq1YFVvCdh5o+aek91Tqcp8gs=)
                          2: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: UheBnAiCtxAymzpNFxEPStuNDYDwYFsHP/Hd8jAC9VU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:a3:bb:37:80:91:1b:77:d1:9d:3c:64:96:6b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
        Validity
            Not Before: Nov 23 07:00:42 2024 GMT
            Not After : Nov 24 07:00:42 2024 GMT
        Subject: CN=7ae7409cef30826a4d614269633522721e5114e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:42:f1:72:55:9a:13:17:61:48:d2:8d:38:a7:
                    20:d1:ca:87:b3:2d:b7:44:78:85:a6:0c:9b:52:94:
                    bd:83:fd:b3:f4:ee:cd:74:e1:fb:da:c1:3f:2b:2d:
                    70:b6:e0:e2:44:b2:4c:0a:34:ec:bd:2b:7e:2f:46:
                    b8:ff:c3:56:cd:cd:c5:d5:5c:c6:7a:17:24:7a:44:
                    ad:7b:69:76:68:74:a9:2d:f5:6a:1f:f2:ca:90:16:
                    63:cf:1b:3b:ac:6f:c7:bc:de:51:f1:4b:89:64:53:
                    4d:96:e0:a8:a2:9b:c3:48:be:33:37:af:99:34:1b:
                    5f:14:f9:bd:3c:29:72:78:35:89:a8:4b:7f:79:5e:
                    fe:48:cb:c9:e6:df:2f:3f:67:6b:bb:52:03:e8:ea:
                    80:69:17:21:dc:7e:eb:0f:8d:e1:87:0a:c8:68:39:
                    c7:f6:5a:ec:24:56:f0:17:59:c4:7c:f0:76:45:ca:
                    b9:8d:06:5c:fe:81:f3:57:27:be:f2:51:1a:9d:bb:
                    1e:98:e9:f4:a3:31:b0:64:14:91:cf:86:b8:23:56:
                    1b:9f:ba:78:25:a8:4f:15:54:ca:19:b3:30:71:37:
                    55:70:94:e5:52:bb:53:06:97:43:9a:d1:f5:3a:0e:
                    ab:c7:0a:f6:54:10:7a:20:01:28:5c:56:61:b4:05:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E7:40:9C:EF:30:82:6A:4D:61:42:69:63:35:22:72:1E:51:14:E5
            X509v3 Authority Key Identifier:
                keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:60:67:2b:8d:ce:fd:5c:3f:3c:6b:61:16:80:df:19:ff:18:
         66:75:6a:39:81:16:ba:77:f7:1b:fb:2c:0d:e3:30:e8:9a:9c:
         2d:b7:c5:c9:81:e2:2d:e8:56:57:de:e0:5d:61:59:62:5a:1f:
         ba:59:14:7d:be:7e:67:2b:d4:21:9a:ec:51:45:92:d8:f2:18:
         dd:fd:71:5f:e4:ff:bb:86:fb:2d:bd:62:f2:cf:70:59:96:b7:
         23:6b:18:c3:bf:87:3e:6e:f4:1d:fb:23:87:6c:93:c2:89:af:
         bb:13:eb:64:f8:4e:9a:d5:7e:fd:79:ca:1e:f7:83:e4:4a:97:
         76:79:84:36:5f:dd:47:3d:c4:24:e0:53:8c:a5:3f:7c:cf:73:
         84:ef:49:ef:0a:2d:d0:11:98:6b:a3:fe:06:b3:fb:db:83:dc:
         36:21:3d:84:41:2c:4e:fc:1b:a8:2e:7f:ab:22:1f:65:f8:f8:
         e8:32:9f:80:aa:e5:f8:0c:b4:bb:37:d4:de:5f:45:fa:5d:95:
         5f:10:66:69:42:91:f7:d8:29:d2:33:8a:db:ca:c8:4a:da:6e:
         78:2a:eb:89:26:7f:03:1b:74:8d:b1:17:b9:cc:4c:75:4f:15:
         ea:e9:96:5e:15:f2:be:2e:e4:28:e3:3a:42:28:1c:81:88:22:
         39:7c:98:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:12 2024 by rpki-client on console-ams.rpki-client.org