Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File:                     qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier:          9xBWqVW77sszsWpxDPu0Qre4STNw54QOO9roM/pM6wo=
Subject key identifier:   96:BB:4E:AB:0F:0C:11:50:64:7A:2C:0F:16:1A:64:E2:7C:67:3C:5B
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer:       /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial:       019368C663C4E0FA2234B8C57B135108A2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 14:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:52 +0000
Files and hashes:         1: 6qQ3IStxm87jE8bCMDlCUF4KBRY.roa (hash: sYQNNf9sRQ2gKmZTiuUaNyBqO4ZTPPJidtlH0sPrfL4=)
                          2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: 2Utpqo1SR4YQrZCrzJVue4XFY1nGu0QRUiPLvyASKuE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:63:c4:e0:fa:22:34:b8:c5:7b:13:51:08:a2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
        Validity
            Not Before: Nov 26 14:00:52 2024 GMT
            Not After : Nov 27 14:00:52 2024 GMT
        Subject: CN=96bb4eab0f0c1150647a2c0f161a64e27c673c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:0e:7b:6b:ac:b2:34:99:bf:78:a5:57:18:
                    44:fd:c8:88:16:28:e3:b6:c9:0a:84:53:9c:7b:3b:
                    75:cf:30:98:7d:56:8a:c2:28:fa:8a:4c:86:97:f1:
                    b6:36:25:bb:4d:2a:52:4a:00:bf:4c:da:32:a8:af:
                    71:8e:b4:b7:ae:bb:0e:c0:d6:f0:de:df:57:ae:37:
                    f4:b5:4f:f2:c2:a9:e6:e6:0c:40:02:31:e8:ec:d9:
                    f2:ae:19:8b:43:9f:06:95:dd:d5:c9:1d:a2:fd:95:
                    21:09:a7:22:20:d9:90:c6:1e:fe:5d:a0:6b:36:be:
                    2c:01:e7:38:0a:1a:8c:84:74:08:42:62:25:2d:8e:
                    66:3e:cd:b0:84:6e:8d:bc:b1:e6:e5:e9:fb:57:b4:
                    94:8e:f7:d1:27:73:b2:b7:54:82:30:8e:59:62:83:
                    82:5e:57:a1:3a:d4:73:be:75:c8:37:59:99:23:89:
                    16:f3:1e:aa:76:47:4b:a2:12:42:22:13:a9:4e:10:
                    d1:24:93:d0:73:e9:87:f6:42:6c:81:bb:80:fe:2c:
                    50:1c:13:79:78:19:bb:54:c9:23:83:f1:a7:bf:5e:
                    5f:f1:6c:c6:42:8e:10:f0:b5:7d:ec:6d:54:51:20:
                    6a:1e:c3:9f:37:3e:8d:d1:cb:39:1f:81:be:55:a1:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BB:4E:AB:0F:0C:11:50:64:7A:2C:0F:16:1A:64:E2:7C:67:3C:5B
            X509v3 Authority Key Identifier:
                keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:06:d7:84:a1:2f:ac:b5:fb:bb:53:ee:99:4a:a0:a0:f6:f4:
         ac:0d:be:8e:98:49:5c:2e:5d:d4:2c:41:64:66:b6:0d:74:81:
         13:70:b7:0d:5f:00:62:83:4f:9e:eb:d5:e4:2b:aa:6f:42:c3:
         99:72:8e:df:0c:2d:a5:5a:3c:50:57:f9:67:c4:29:e4:b9:e0:
         4a:9c:e9:72:22:a5:0c:af:70:a8:b1:85:9e:13:95:72:39:9f:
         cc:c0:bd:99:90:f7:f0:9f:87:c4:db:ef:4b:dd:a0:a1:c7:ae:
         e8:be:64:92:58:e0:df:1b:93:87:bd:26:61:2e:e3:77:69:32:
         23:38:2a:61:50:90:34:f5:c8:0e:74:c0:68:36:09:eb:5e:c3:
         b7:d0:e0:c6:a8:1f:2c:47:d8:b9:30:0c:37:6f:ef:2c:92:57:
         53:b1:b3:61:2d:9a:06:46:ad:2e:d1:00:89:6f:19:70:a1:f7:
         7f:d1:aa:fb:bf:f2:b9:8d:b2:98:58:ec:ff:c0:7e:12:26:fd:
         06:af:10:b5:f1:70:cd:e0:49:52:de:ad:26:c2:5a:70:3d:7b:
         94:ac:1a:48:66:e2:6a:ca:de:f2:6b:dc:65:9c:1b:00:02:99:
         da:fa:a8:a5:dc:1e:88:09:e8:af:76:db:06:6c:54:da:1c:48:
         f4:a4:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:06:47 2024 by rpki-client on console-fra.rpki-client.org