Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
File:                     QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft (raw, json)
Hash identifier:          U/gWiPR4TmJeIVlVK8+arocqrSq/hlTW26LG4gTd9NM=
Subject key identifier:   01:DC:94:50:52:C2:89:A1:69:A4:81:13:88:3C:EB:D2:E0:BA:CB:9D
Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
Certificate issuer:       /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Certificate serial:       0193568A13F4D01B188C060FC85922213999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:49 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:49 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:49 +0000
Files and hashes:         1: QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl (hash: Hhit1ywO0WPDRO7rXEtdxsAX227DzNoavVEFVq0Jmio=)
                          2: Rf_rBwwk4OMuMrGT_sLC0KyyOV0.roa (hash: b2SNHuNLl+2E2zFwfNXkB+wJygS0QjtywGIjtoUeBJE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:13:f4:d0:1b:18:8c:06:0f:c8:59:22:21:39:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
        Validity
            Not Before: Nov 23 01:01:49 2024 GMT
            Not After : Nov 24 01:01:49 2024 GMT
        Subject: CN=01dc945052c289a169a48113883cebd2e0bacb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:23:97:16:b1:4f:e0:6e:03:15:9c:85:d4:
                    56:2f:0f:bc:47:ce:cf:91:a7:c5:d0:3b:f4:ae:99:
                    0c:49:3f:dc:0f:e0:0a:88:78:b1:52:6d:3c:3b:4c:
                    0b:14:17:d4:1a:10:43:ec:43:27:5a:31:fe:6e:ba:
                    a3:61:c3:88:fb:e0:cf:15:63:f7:b1:cb:4b:62:65:
                    36:c7:f7:bf:3f:81:d7:36:9f:68:a1:d7:81:0d:63:
                    3e:32:c5:92:0d:a2:7f:6d:e3:63:bc:8a:41:52:94:
                    65:2d:cf:83:b2:94:70:c5:75:47:05:5f:ba:35:14:
                    9d:ef:df:be:e2:13:4b:53:15:da:94:34:ac:c9:88:
                    d2:55:35:cd:3b:07:da:b2:d0:23:d7:40:62:de:1a:
                    40:9e:52:b8:c1:17:14:60:8b:a1:d2:f5:c7:09:61:
                    20:50:93:c2:f8:e8:ca:69:db:38:28:8c:73:d7:31:
                    55:83:39:d5:ea:74:bf:e6:01:a8:22:6b:0d:3a:0e:
                    30:14:8a:15:73:e8:e5:d1:f3:ba:1d:42:00:72:57:
                    a1:26:d5:d1:92:bb:71:00:8b:33:eb:bd:de:2e:97:
                    95:77:75:c3:19:9f:cf:38:01:be:22:f5:be:ee:dc:
                    86:d7:c4:b7:99:71:7b:5e:97:cd:60:2d:43:d8:d7:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DC:94:50:52:C2:89:A1:69:A4:81:13:88:3C:EB:D2:E0:BA:CB:9D
            X509v3 Authority Key Identifier:
                keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:30:d6:6d:e0:ba:dd:48:f4:ff:1b:83:33:86:4d:e3:d0:b3:
         8f:74:eb:bc:e9:e2:70:ae:57:aa:21:68:3c:2d:fc:40:5e:ef:
         37:fa:46:40:b1:5a:fd:d3:31:c7:c7:91:f9:09:e4:0d:8f:76:
         09:02:f8:8f:75:a5:95:d0:d2:87:aa:04:c6:65:bc:83:16:f7:
         85:5c:4f:9a:9b:cb:2d:81:2b:92:78:db:23:a6:10:c2:c7:14:
         7f:d8:ef:a5:01:60:d8:66:86:89:d7:7b:2e:87:a5:86:7f:72:
         64:c6:99:4b:8f:70:f5:5a:9c:de:88:eb:a0:b3:43:b2:d6:b5:
         d7:b7:58:4f:7f:90:19:4f:d4:b3:64:24:72:20:ff:0b:6f:f3:
         39:12:de:99:c5:08:28:67:0c:cf:a0:b2:07:3e:31:f7:d0:c7:
         c2:d5:3f:a5:7a:ee:c4:65:c9:c1:82:ac:44:2c:39:9d:72:2d:
         e6:c2:66:49:03:ce:92:d2:6b:4c:32:d8:85:26:91:ab:b9:37:
         89:91:05:f5:e7:45:9d:6f:67:b0:72:2b:fe:2d:22:a9:2b:3a:
         a2:0c:79:94:66:a1:a3:ce:94:34:ea:08:91:c6:d8:71:b8:06:
         5b:0c:79:6b:7f:56:fe:a9:f5:39:9c:15:e3:fb:bb:19:ad:78:
         ec:7d:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:17:01 2024 by rpki-client on console-fra.rpki-client.org