Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
File:                     Qqq-41QockWGZCkvpZLj914autQ.mft (raw, json)
Hash identifier:          HTTwme1AYRkNeXvZMcZssE5u5dcs6rQFksJOE6kK4RU=
Subject key identifier:   8B:D1:84:79:4E:AA:14:0A:F0:82:CA:4D:15:E2:07:76:7F:97:CD:59
Authority key identifier: 42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
Certificate issuer:       /CN=42aabee3542872458664292fa592e3f75e1abad4
Certificate serial:       01936A7DD377A06F8B70C6CB62C7E822861B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 22:00:51 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:51 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:51 +0000
Files and hashes:         1: Qqq-41QockWGZCkvpZLj914autQ.crl (hash: VJnTrOTvo8rO4Irzn2BuEiAU54StwJhdQ9FbNVW3gAs=)
                          2: ofNRcwyCMtjVmNCOCgIetigP4lY.roa (hash: LjSLdjhWroR9QvWTs4hVLFQ36ffVFgfxeBdax/nvpuY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:d3:77:a0:6f:8b:70:c6:cb:62:c7:e8:22:86:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42aabee3542872458664292fa592e3f75e1abad4
        Validity
            Not Before: Nov 26 22:00:51 2024 GMT
            Not After : Nov 27 22:00:51 2024 GMT
        Subject: CN=8bd184794eaa140af082ca4d15e207767f97cd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:c4:f2:57:0e:12:0a:d9:b0:5c:5e:70:3e:
                    ee:b3:01:8f:9c:3f:45:8b:ab:fb:13:42:9c:a1:c9:
                    21:4d:36:dc:62:69:a2:42:4e:85:68:87:c1:52:c5:
                    30:6c:3f:c4:7c:5b:19:20:c6:db:71:9c:68:78:44:
                    3f:a7:ad:09:0c:d2:31:6c:a7:a3:20:89:47:ff:ea:
                    87:66:b1:ad:5b:c9:3d:0c:05:91:71:4d:eb:76:4d:
                    49:d2:f1:58:6c:18:9f:e4:6d:3e:41:1b:cd:0e:dc:
                    8c:2e:1f:79:ad:cf:cd:69:1f:11:a4:cb:e9:19:db:
                    a6:39:c1:cc:75:74:95:8c:58:9b:f9:98:1c:92:b4:
                    d3:b8:17:ed:63:a1:68:ec:10:ac:e6:b5:ca:4a:ea:
                    e7:99:b1:3d:d5:80:c5:b3:65:12:9c:54:76:c5:ef:
                    03:7f:9a:dd:9f:dd:04:e8:a7:ae:1b:60:c5:cc:6b:
                    2b:de:8c:c7:48:99:0f:e7:46:17:5d:86:be:b9:e4:
                    fc:97:37:f4:70:94:8d:a5:b0:3e:8f:af:17:13:55:
                    8e:a8:76:80:38:0b:24:0e:da:b4:59:d5:e6:bf:77:
                    ca:cc:0d:6f:6e:78:01:d1:85:0c:7f:22:8a:99:e9:
                    71:5b:68:df:70:f1:6a:46:ad:ff:2e:85:5f:76:3f:
                    2a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D1:84:79:4E:AA:14:0A:F0:82:CA:4D:15:E2:07:76:7F:97:CD:59
            X509v3 Authority Key Identifier:
                keyid:42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:dc:c6:7c:cb:95:08:c0:1f:90:fb:35:5a:87:7e:7c:a8:dd:
         0b:0e:c4:8c:ca:85:71:2d:e2:f1:2f:1b:2b:a6:8e:00:1a:92:
         9c:97:31:a4:16:75:12:6d:07:73:5a:da:eb:3d:87:c6:17:25:
         ea:e4:77:53:f2:07:2a:81:40:9e:21:f7:bd:8f:d3:1c:c9:a9:
         21:dc:67:78:24:b2:cd:62:b3:64:db:97:c4:a9:1d:bb:4a:12:
         93:b2:17:ed:d1:86:e0:8b:9d:a2:fe:97:6d:be:f2:21:c0:7e:
         e4:ff:2d:9d:aa:0f:95:e9:b0:e3:b7:ba:e8:7f:07:13:e6:dd:
         2e:5c:a0:29:cd:f7:8a:23:e1:9b:ed:3f:b5:07:ec:d8:a5:51:
         67:3b:96:29:65:25:1d:53:11:00:29:e7:44:5f:9f:2b:b8:26:
         d9:64:de:51:6f:01:f1:a7:a6:13:e6:34:f6:9f:cf:3e:c1:75:
         d7:34:bc:9c:db:88:ae:66:7d:21:6b:e0:48:a9:94:5c:b0:78:
         0e:72:da:9a:e0:7b:21:aa:02:1b:de:0e:ab:8d:76:b3:70:50:
         e4:ee:fb:dc:d0:3e:eb:6c:79:2e:9f:89:b7:9b:2d:5e:b2:23:
         3c:63:bc:59:2f:ad:92:cd:48:45:1c:92:1b:fc:9d:8f:31:7b:
         83:3c:5f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:17 2024 by rpki-client on console-fra.rpki-client.org