Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File:                     qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier:          BJhAXH0qp5Djl90IFgLW1nAtW9eQcNNrg8epfW9DxJA=
Subject key identifier:   72:2E:0B:17:D4:92:6D:48:5E:5A:BE:AF:C5:DC:7F:D4:5C:CC:11:45
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer:       /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial:       01935952CA661BF1B163C5712E3E3849BA8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number:          1306
Signing time:             Sat 23 Nov 2024 14:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:18 +0000
Files and hashes:         1: YhX2CrB5Nz7z7jLLa3hFvLZDdzU.roa (hash: lvInM5p7mVP/Sy0AaI8vR+7+SNoAUzSiZUOULxm36rs=)
                          2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: ITuqz5G781a3/2yTKH0Fk/Hidd3a1/QzRvnDV/GlAz8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:52:ca:66:1b:f1:b1:63:c5:71:2e:3e:38:49:ba:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
        Validity
            Not Before: Nov 23 14:00:18 2024 GMT
            Not After : Nov 24 14:00:18 2024 GMT
        Subject: CN=722e0b17d4926d485e5abeafc5dc7fd45ccc1145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:aa:ae:33:6c:50:32:5d:6e:46:3d:81:91:
                    3b:d7:92:f3:49:32:5b:71:f3:df:5c:b8:fe:cc:41:
                    13:bd:1e:8b:ad:13:45:8b:f2:a8:c3:a2:b6:61:b0:
                    88:75:8e:45:5f:63:f6:85:12:18:2a:2c:12:ef:78:
                    e9:c9:e5:37:cc:65:a2:13:be:7f:41:9d:9f:82:89:
                    97:09:26:0d:67:18:9f:3b:7d:22:fb:a0:ef:77:64:
                    f8:7b:e2:81:8c:90:dd:57:d1:f2:ee:9c:28:19:07:
                    96:ed:d6:5c:ea:39:dd:5a:5c:2f:65:27:7e:02:09:
                    f3:6d:57:33:34:87:0e:59:d8:5e:64:90:48:1d:aa:
                    a7:65:c3:94:50:34:6c:f3:60:99:d0:45:33:4e:c2:
                    41:1e:3e:49:cd:e4:8c:89:7f:b2:78:28:01:26:58:
                    cd:b2:d4:77:dd:5f:a0:89:a6:6c:a7:5b:c4:02:1e:
                    75:2b:fc:7f:27:de:3d:d0:07:f6:a2:f9:08:78:e8:
                    3d:dc:1f:87:c7:18:15:a1:98:8c:3d:ed:d4:06:98:
                    d4:2a:6a:1d:b8:13:b0:2e:5d:6c:d0:10:56:bc:60:
                    57:fd:80:0f:25:ac:7d:92:85:8d:da:a1:09:0d:9d:
                    0c:b7:bf:18:b6:37:94:52:45:e5:f4:cd:a4:5b:85:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2E:0B:17:D4:92:6D:48:5E:5A:BE:AF:C5:DC:7F:D4:5C:CC:11:45
            X509v3 Authority Key Identifier:
                keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ef:9a:8f:c7:06:22:1b:77:e6:10:1e:10:08:23:20:3e:99:
         92:eb:66:ae:9f:00:4f:40:69:5e:3b:27:52:d8:ea:5e:2f:68:
         ba:e2:bd:f2:84:ff:16:02:fd:d4:9e:97:02:70:4f:b0:4e:ce:
         3d:e8:fe:3a:a8:8a:97:28:30:93:8b:14:32:42:05:fa:19:f9:
         e5:5e:ee:60:4f:e2:22:cc:72:64:41:1f:b7:3e:c1:6a:b2:11:
         47:fb:87:9e:14:fd:43:20:a2:c0:59:0c:1c:b4:e1:20:ca:a7:
         32:3b:3d:5b:58:c7:04:cc:c5:74:0a:a0:82:86:d6:25:68:d1:
         54:26:2d:1e:ef:7e:f1:55:48:bd:1c:2b:d6:1d:0b:a7:22:6f:
         1f:e3:3e:d8:10:58:1d:7a:0c:f0:01:d3:fb:58:0f:79:06:d3:
         3b:2d:e3:9c:64:7b:70:f0:7b:4f:3d:89:dc:37:6d:db:99:09:
         12:d9:79:66:00:03:37:5a:2a:e9:ee:a3:67:21:01:69:d0:a7:
         95:cc:36:63:67:1f:de:9a:b4:4a:33:58:63:a7:c3:c7:df:b7:
         1b:3f:ac:52:70:50:55:e3:75:00:5c:70:d9:2e:e0:20:42:9d:
         d8:61:3a:cb:56:78:7f:da:cc:de:1e:45:99:e5:c0:4d:a0:be:
         42:19:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:10:37 2024 by rpki-client on console-ams.rpki-client.org