Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
File:                     QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json)
Hash identifier:          p5PSbNnZaZ2GWjcZZ07QIv/DfY4MXjspEw138Cp20M4=
Subject key identifier:   B9:60:2B:9A:3F:EC:B9:65:43:47:6B:2E:34:4C:6A:0E:5F:AC:64:D3
Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
Certificate issuer:       /CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Certificate serial:       019234DD40EB0C3CFD93544FE66B6A434334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
Manifest number:          05A4
Signing time:             Fri 27 Sep 2024 19:02:48 +0000
Manifest this update:     Fri 27 Sep 2024 19:02:48 +0000
Manifest next update:     Sat 28 Sep 2024 19:02:48 +0000
Files and hashes:         1: 0he25L5w_nSsoO3O2-mCFqSYAqY.roa (hash: tZrDt0M5xC2zBqLMRMVf7AZ+LKtrS5H8QW7TNgwPlJo=)
                          2: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: XQodwyFycJTRWgSw+A8h9hl+REkTwK8rd8FpsqPflbs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:dd:40:eb:0c:3c:fd:93:54:4f:e6:6b:6a:43:43:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc
        Validity
            Not Before: Sep 27 19:02:48 2024 GMT
            Not After : Sep 28 19:02:48 2024 GMT
        Subject: CN=b9602b9a3fecb96543476b2e344c6a0e5fac64d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:e3:0d:9a:99:62:9c:fc:de:a2:1f:fa:bb:
                    d2:67:06:32:0b:37:96:ab:06:8c:8b:5a:c2:25:be:
                    84:2c:cf:5f:67:0c:fb:0b:51:8c:a0:01:52:ba:45:
                    57:78:02:b4:82:95:5a:55:b3:cc:93:e6:95:05:5d:
                    9b:3c:b6:85:48:18:8f:02:c7:2f:0d:bb:e8:96:ad:
                    18:fa:99:f1:d7:4b:0d:90:fc:e8:fe:59:f4:a3:e3:
                    d2:0a:d5:7d:5e:0f:03:54:eb:7d:cd:90:2e:3e:84:
                    33:e6:ad:b0:3c:f5:a8:a4:9c:9b:44:a3:3a:ae:8f:
                    78:70:56:93:db:06:fa:df:fc:5c:48:8a:93:f9:9a:
                    34:48:c9:ca:29:8a:46:df:e8:a6:12:cd:cf:0f:aa:
                    2e:a2:7c:a6:6e:48:63:b4:7a:85:1f:71:7c:f6:fd:
                    bc:15:f4:4e:a5:93:98:47:31:bd:a0:01:90:0e:78:
                    d1:b1:f7:8b:9c:89:6d:fc:92:19:a9:8d:28:55:6a:
                    65:b7:d8:1a:e9:91:fb:8a:4c:3a:b4:24:5a:c7:a4:
                    e4:01:59:b4:c7:1a:3f:b2:9e:a2:80:fd:73:20:61:
                    b1:5a:d5:f1:f4:5f:a8:71:42:a5:28:26:58:d8:ca:
                    49:b1:15:6a:d4:1c:91:c5:45:f8:33:10:c4:7a:15:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:60:2B:9A:3F:EC:B9:65:43:47:6B:2E:34:4C:6A:0E:5F:AC:64:D3
            X509v3 Authority Key Identifier:
                keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:22:a9:e8:a1:6e:b1:d1:f7:7c:88:24:11:df:e9:50:10:a4:
         ff:b4:53:62:a0:c0:dc:d3:01:7c:ef:4e:21:98:4d:73:01:e1:
         6b:38:73:84:a0:e3:15:77:ac:66:67:8d:2b:76:2a:a7:46:e9:
         52:a2:90:29:d7:e3:5e:7a:37:77:a5:37:c5:12:d1:84:a7:8a:
         f8:e9:60:ca:2c:7d:18:7b:36:f6:a3:af:7e:0f:00:fd:1c:b7:
         7a:2e:8f:10:70:f4:9a:ff:3b:5d:69:e2:c4:83:b8:31:77:a5:
         a2:f5:e7:0e:ba:0d:c7:ba:d3:8f:c6:58:f1:84:4d:46:62:8b:
         ba:55:02:27:fe:04:a8:47:4f:cc:a3:d1:bb:a0:38:e0:33:6b:
         87:e7:9d:91:30:db:5d:4d:b2:44:b6:e1:71:fa:b4:ee:18:3d:
         66:9c:07:42:71:07:d1:e4:67:f4:1f:cf:c6:fd:99:2c:5f:9f:
         9d:05:8e:3c:44:39:9c:32:c9:27:23:9c:1a:a6:5a:ea:1f:cf:
         99:81:b8:a7:da:fa:9f:ef:c8:88:94:99:98:22:82:5a:af:b3:
         b1:11:34:f6:22:b7:d3:5b:cf:06:c4:5c:7b:71:9a:18:e6:16:
         73:4d:89:87:b6:1e:80:2b:6e:73:cf:e3:3a:6f:79:5d:03:54:
         5c:76:c5:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI03UDrDDz9k1RP5mtqQ0M0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDY0NTFiOTIzYTA3ZTM2NWIyZjE5MGZhYTU1YTU3MmRk
MGZhZmMwHhcNMjQwOTI3MTkwMjQ4WhcNMjQwOTI4MTkwMjQ4WjAzMTEwLwYDVQQD
EyhiOTYwMmI5YTNmZWNiOTY1NDM0NzZiMmUzNDRjNmEwZTVmYWM2NGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXrjDZqZYpz83qIf+rvSZwYyCzeW
qwaMi1rCJb6ELM9fZwz7C1GMoAFSukVXeAK0gpVaVbPMk+aVBV2bPLaFSBiPAscv
Dbvolq0Y+pnx10sNkPzo/ln0o+PSCtV9Xg8DVOt9zZAuPoQz5q2wPPWopJybRKM6
ro94cFaT2wb63/xcSIqT+Zo0SMnKKYpG3+imEs3PD6ouonymbkhjtHqFH3F89v28
FfROpZOYRzG9oAGQDnjRsfeLnIlt/JIZqY0oVWplt9ga6ZH7ikw6tCRax6TkAVm0
xxo/sp6igP1zIGGxWtXx9F+ocUKlKCZY2MpJsRVq1ByRxUX4MxDEehVgDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlgK5o/7LllQ0drLjRMag5frGTTMB8GA1UdIwQY
MBaAFEHWRRuSOgfjZbLxkPqlWlct0Pr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZWU3NDQtMDg1NC00Y2YxLWFmNmEt
ZjU2Yzg0OTQzYTdkLzEvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZWU3NDQtMDg1NC00Y2YxLWFmNmEtZjU2Yzg0OTQzYTdk
LzEvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyKp6KFu
sdH3fIgkEd/pUBCk/7RTYqDA3NMBfO9OIZhNcwHhazhzhKDjFXesZmeNK3Yqp0bp
UqKQKdfjXno3d6U3xRLRhKeK+Olgyix9GHs29qOvfg8A/Ry3ei6PEHD0mv87XWni
xIO4MXelovXnDroNx7rTj8ZY8YRNRmKLulUCJ/4EqEdPzKPRu6A44DNrh+edkTDb
XU2yRLbhcfq07hg9ZpwHQnEH0eRn9B/Pxv2ZLF+fnQWOPEQ5nDLJJyOcGqZa6h/P
mYG4p9r6n+/IiJSZmCKCWq+zsRE09iK301vPBsRce3GaGOYWc02Jh7YegCtuc8/j
Om95XQNUXHbFiA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 04:11:30 2024 by rpki-client on console-fra.rpki-client.org