Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File:                     rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier:          UdammjmSuGa4InKYYfz54YNnCu7EpIKtQJT9ppx3c0I=
Subject key identifier:   C2:C1:4F:8D:42:FF:2B:F1:06:03:39:AE:92:FB:C8:53:C2:51:D8:FE
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer:       /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial:       0193587738FD1E0FB4101A308DFDEF2EB60B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 10:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:28 +0000
Files and hashes:         1: 1-CkwHWEmMBU63E9I-IjrIAjWEAI.roa (hash: Gjnn4wUFa/m46lY2BQ3lxeIczB/aFTLH4zrOMulGIbM=)
                          2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: W9++Yf/Cozg0o/otpCb8XMhWxG5Yfy3cEpj/9V2EfGw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:38:fd:1e:0f:b4:10:1a:30:8d:fd:ef:2e:b6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
        Validity
            Not Before: Nov 23 10:00:28 2024 GMT
            Not After : Nov 24 10:00:28 2024 GMT
        Subject: CN=c2c14f8d42ff2bf1060339ae92fbc853c251d8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:81:c2:b9:02:ee:25:9e:16:67:2e:5c:08:
                    80:97:8a:1a:a9:20:b0:31:a5:ee:4a:9f:09:ff:e0:
                    d8:f7:7b:2a:6a:a9:77:6d:a0:c7:cb:92:6a:a8:2e:
                    29:5e:00:95:1e:a5:35:f1:e0:da:7a:f1:7d:94:fc:
                    a0:17:3b:18:93:f9:64:bb:74:98:3e:4f:9d:57:a0:
                    86:fe:da:a5:92:bc:b6:47:84:82:51:4a:01:f4:e7:
                    ab:33:11:03:a9:3c:8b:3f:47:d2:7e:71:7f:b1:03:
                    39:1a:04:70:9c:eb:b8:17:bf:7a:2f:36:d5:8b:76:
                    0e:96:8b:22:4c:96:48:26:d2:1b:c1:9d:25:8a:65:
                    3f:e2:33:ff:10:c0:11:74:b5:5e:45:18:ee:93:25:
                    aa:9f:fe:ce:12:df:f6:3a:6f:91:14:7e:7a:ae:43:
                    26:1d:c2:a2:9e:8c:cd:73:74:54:a6:9d:10:7b:57:
                    87:97:e9:a0:73:8c:07:e5:d6:25:61:17:8c:b3:83:
                    57:d9:7b:b5:02:44:ad:0e:fd:da:58:f3:34:6a:eb:
                    3a:1d:45:4b:c8:30:c4:8e:7b:e9:5f:e5:3f:58:99:
                    25:5b:1e:2e:32:35:29:08:d2:77:c2:92:18:c1:3a:
                    18:cc:fd:4d:c3:b6:44:01:03:2f:55:2d:18:4c:57:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C1:4F:8D:42:FF:2B:F1:06:03:39:AE:92:FB:C8:53:C2:51:D8:FE
            X509v3 Authority Key Identifier:
                keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f0:4f:89:ca:7d:c8:b6:2b:6e:72:f5:05:c0:f1:4b:6f:1d:
         bf:f0:a7:07:c1:99:27:4e:e3:f7:c2:ad:89:85:3d:a9:d4:d9:
         e9:c5:f1:b3:4d:f2:fb:3f:f8:24:b3:e5:4e:57:33:28:51:db:
         e1:12:4b:28:31:98:dd:e5:9e:7b:c9:90:4b:77:24:39:7e:b5:
         86:2f:8b:c1:6a:6d:57:56:2f:34:14:46:d8:69:cd:0f:09:7b:
         0e:b0:75:6e:71:c8:a6:fb:fd:cf:3d:ee:03:d2:67:e4:9e:70:
         ab:10:18:31:de:3f:19:ea:a8:ae:14:22:d4:88:d7:95:af:a5:
         8a:62:0d:25:cc:61:08:16:43:5c:a4:9e:9b:8a:be:8d:31:24:
         c6:ed:ed:69:1a:2f:f5:64:15:2c:c7:b9:3b:6d:36:5d:77:1b:
         1c:7a:37:7d:96:60:48:03:2c:7c:35:6d:a2:d5:44:0d:64:f9:
         39:2f:7a:23:07:8b:1e:85:b6:ce:32:9c:f6:e9:5d:de:8e:0a:
         b2:3e:6b:70:aa:2a:80:5d:c0:d3:5f:7e:2c:f3:19:72:71:6e:
         1c:9f:40:1a:05:df:d4:43:4a:56:34:17:2c:05:10:0d:5f:b8:
         eb:04:6f:94:17:c7:a4:97:ec:f6:1d:9c:b1:79:2a:f8:82:19:
         d0:89:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:06:15 2024 by rpki-client on console-ams.rpki-client.org