Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File:                     qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier:          MfAHwUH5fAIwMc8lVDj3GTqdKUfMplWQc7aNNYmXZAw=
Subject key identifier:   1A:81:DE:20:EC:56:AE:7C:7F:E9:0D:5A:90:46:BE:8C:A3:83:D7:A1
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer:       /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial:       0192399496E90A6C05C20119046CE2569799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number:          12E0
Signing time:             Sat 28 Sep 2024 17:01:32 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:32 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:32 +0000
Files and hashes:         1: 1DH92buv-T2szdryWgghoDrAyxI.roa (hash: OuiYTRZsb7XNk0vUJufF7l3zNCIth+G4Y5ZGU75S9bs=)
                          2: 4qGlWMF50FNdUg0gd-CMSB7neVM.roa (hash: KArMdiVnhECewdqNwtW2dbfWYgxrWdLR86F3EaelgdY=)
                          3: QOtycFFTxJ9J6MT-HIXYy4aWDbM.roa (hash: BrxR4BymVJapTLgVr+7MTXQuI1LaHaOlC1VkZIr1KEU=)
                          4: oIcU__VI6R9AhzPk0nfdwBK_M4s.roa (hash: 1KafdYUR939CGzxzKH9LjqfaGB10NeO9tNSScNmAq+I=)
                          5: q1ZcYf_JT9N80meN4fls3Ej1Qzk.roa (hash: UAg1NpJEoY46Kw1drG00gS5dW3iZ/CFxJltHjHzgqz0=)
                          6: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: Mn90Ekw5DNwsNSBoxn9xlUzE6SKzIJf9S88KU7bQG0Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:96:e9:0a:6c:05:c2:01:19:04:6c:e2:56:97:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
        Validity
            Not Before: Sep 28 17:01:32 2024 GMT
            Not After : Sep 29 17:01:32 2024 GMT
        Subject: CN=1a81de20ec56ae7c7fe90d5a9046be8ca383d7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:5b:65:15:95:5a:3f:f2:99:08:b7:57:ad:
                    6e:3b:19:b0:28:73:3a:73:6e:f9:09:da:23:02:8f:
                    a4:5e:1e:0b:9e:52:d6:38:6d:b6:41:93:c3:0b:2f:
                    8d:a6:03:5d:89:85:2f:6e:08:19:e3:6a:7e:8f:f5:
                    95:30:86:74:00:44:13:10:eb:75:68:31:df:b0:33:
                    9d:07:69:07:63:15:0e:dd:f9:66:e0:da:69:4d:05:
                    29:53:4f:13:c3:ef:5f:74:68:51:1a:15:76:94:de:
                    64:0e:7e:7b:93:03:0c:e3:2a:77:51:0f:b3:eb:6a:
                    7e:3e:3a:2d:8e:2f:79:72:f2:52:87:f8:7b:78:6f:
                    3c:5b:fe:c1:7c:fa:aa:c6:f1:28:88:0c:b8:37:b2:
                    b9:10:7e:4b:a0:44:bb:1c:df:2b:90:e1:ae:36:40:
                    73:28:8d:da:55:69:3b:41:dd:48:19:98:4b:fe:e1:
                    d3:5a:f3:cf:b0:5f:be:5e:d2:5b:5d:8c:b2:75:fd:
                    b5:84:42:ee:a9:0a:fe:e8:07:25:49:80:47:3a:3f:
                    b7:70:f9:26:c1:07:dd:77:55:fa:d2:c0:b0:d3:ea:
                    8c:95:9c:89:03:06:c2:59:6f:a4:83:98:8e:1d:4b:
                    57:96:c3:c4:2a:e6:eb:fb:0a:a7:2c:f9:5c:88:7d:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:DE:20:EC:56:AE:7C:7F:E9:0D:5A:90:46:BE:8C:A3:83:D7:A1
            X509v3 Authority Key Identifier:
                keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f6:b7:74:a6:c4:3d:bc:bc:a7:ef:88:9b:84:ed:66:db:ee:
         1c:48:a0:f5:ff:83:e8:7c:30:d0:cd:dd:b7:22:e2:46:4f:1e:
         83:10:6c:be:5a:6b:a0:c2:88:87:e0:bd:5b:2a:1b:b9:b3:41:
         51:e0:20:d1:b6:06:d1:3b:e2:b1:77:34:24:ec:f8:b2:eb:99:
         c6:9e:cd:28:e6:4c:59:bf:0e:33:05:d1:57:f4:c5:c5:fa:00:
         ba:85:dc:25:64:4f:82:9d:4d:32:8f:d7:0b:c0:a8:94:63:08:
         0d:68:83:06:f7:be:26:55:ac:d4:ea:2e:3d:64:ce:d0:7b:fa:
         7f:63:65:63:80:70:d7:82:db:90:cc:7d:59:f5:db:af:cc:e1:
         48:c8:8c:36:4e:0b:1d:e6:c4:ff:1f:02:0b:e0:7a:09:6a:35:
         7d:ec:29:1d:63:f2:b0:2e:d1:c9:ec:e7:a4:50:ae:36:21:93:
         6f:e2:d9:2d:f4:0a:e3:ae:8f:fa:a6:a6:79:c4:db:9f:5d:c4:
         c7:82:e7:2c:f3:13:74:bb:e4:9f:6e:94:bb:94:20:02:2e:cd:
         07:50:eb:b5:3d:ba:5a:f0:eb:79:3f:45:0c:4c:a0:3a:d5:fb:
         94:99:25:ec:d3:b0:b5:4e:f2:e7:b4:c1:da:4e:34:46:16:63:
         f0:3f:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:39:18 2024 by rpki-client on console-fra.rpki-client.org