Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
File:                     KQhfxTTBPgiC4mColfPPDFVD7wg.mft (raw, json)
Hash identifier:          A6Hji5q/Oz4N/JyeYmY281yqTScfmsWkTk3xopVC0pM=
Subject key identifier:   C7:58:88:A8:7B:E8:D4:60:08:DA:6E:49:E9:71:29:39:B3:8E:6E:73
Authority key identifier: 29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
Certificate issuer:       /CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Certificate serial:       019356890825453B11F0298BB35942861D23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
Manifest number:          02E6
Signing time:             Sat 23 Nov 2024 01:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:41 +0000
Files and hashes:         1: 6GMizNGhNcGUZM0yDmczb8U6Alw.roa (hash: my5+NCG5luIW3EV5szm2saO5LS9pJKdFlGyvkoNY8IU=)
                          2: KQhfxTTBPgiC4mColfPPDFVD7wg.crl (hash: dgU6CJzWb3VbarrOKl2fCQrsHzj0szXr0yRK775CnnE=)
                          3: mrAggarOK13LGKNhPZXlj26tMrU.roa (hash: W4ZhbDDea2hgg19DP2UBWdDllThxJ4Giw2Vxs/ZdKzs=)
                          4: tUL9e54uvY4D8yoqAKIRlcsugxw.roa (hash: CxkLKMXSR2h2TXdW5qPctHlueh2vk9YLgD30b1wz3w0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:08:25:45:3b:11:f0:29:8b:b3:59:42:86:1d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29085fc534c13e0882e260a895f3cf0c5543ef08
        Validity
            Not Before: Nov 23 01:00:41 2024 GMT
            Not After : Nov 24 01:00:41 2024 GMT
        Subject: CN=c75888a87be8d46008da6e49e9712939b38e6e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:97:b1:d4:51:09:29:3f:25:06:7e:28:80:
                    9b:95:06:bf:4f:af:6e:10:9f:7b:23:52:72:8d:26:
                    55:66:ce:6d:ee:ac:a9:ca:34:a5:26:e3:9a:4e:a8:
                    65:1e:ab:45:22:5b:68:e6:7c:15:55:05:cb:8d:f4:
                    08:3b:a3:ca:74:2a:5e:a2:f7:6e:77:41:32:8c:f8:
                    83:cb:66:c4:27:b5:38:3a:57:ee:cb:de:67:37:c0:
                    0f:06:8b:13:91:74:d2:aa:6b:70:63:50:45:4f:96:
                    28:58:99:7e:ae:45:89:1b:0e:57:0e:5e:96:8f:3b:
                    0c:83:72:24:5c:31:5b:49:44:12:78:63:cc:cc:ed:
                    2c:a2:cb:df:e3:32:4c:22:b7:a7:9f:26:03:24:79:
                    c0:e5:47:13:06:bf:51:0d:d7:bc:98:2b:9c:14:79:
                    42:31:36:a0:b4:94:8e:3d:64:96:a6:d1:ff:1b:10:
                    e5:d5:f6:31:2e:13:fa:d2:25:c5:99:75:52:75:ea:
                    60:fd:51:cd:f0:4e:db:8c:51:a3:b9:0c:9e:e7:d4:
                    cc:aa:a1:44:bd:19:bb:b0:80:79:9d:50:f2:d4:10:
                    f8:8b:ba:c6:77:ff:3d:f8:87:07:c1:b0:c7:ba:61:
                    3b:d3:7f:4e:e9:61:6e:7b:bf:55:00:97:d6:f7:90:
                    30:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:58:88:A8:7B:E8:D4:60:08:DA:6E:49:E9:71:29:39:B3:8E:6E:73
            X509v3 Authority Key Identifier:
                keyid:29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:79:02:80:e6:44:bf:1f:2c:8c:78:ed:74:3e:03:b0:fb:0f:
         2a:9d:65:29:eb:d2:5d:71:c1:a3:73:92:a3:2e:f0:a3:32:bf:
         01:ad:8a:7d:4d:a4:65:72:e1:4b:3e:bc:27:80:b5:e7:18:76:
         69:43:7d:2e:0b:8a:61:4c:ff:49:ac:65:59:1e:b8:b5:8a:b3:
         82:33:e8:5b:c1:2d:7d:37:af:42:6c:76:05:47:12:a5:97:89:
         20:64:d6:e5:4e:05:e3:7e:44:81:06:27:90:36:c9:a6:40:77:
         3c:da:83:e7:5e:11:15:62:70:16:cc:7a:dd:b6:2d:7e:f8:98:
         76:31:71:23:bf:dc:14:88:31:e0:ee:41:f4:ab:87:11:88:0e:
         6d:83:b1:40:2f:80:b8:cb:22:c2:00:ee:87:b0:31:9b:e0:46:
         a5:ee:82:b2:69:9d:27:70:14:b7:4f:3d:31:7e:a7:77:dd:cf:
         ba:37:8c:cf:dd:2e:3f:04:bf:32:97:81:bd:3b:e5:49:77:7d:
         86:a9:b3:7b:63:54:1b:8e:4f:e1:02:6e:db:dd:c3:56:a2:a9:
         41:21:fe:7c:19:f4:f6:57:c2:d2:9b:76:2c:c6:02:2a:86:06:
         d6:a2:b3:18:18:f5:11:da:ad:25:e3:30:9e:01:97:1d:1c:ce:
         7a:41:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:38 2024 by rpki-client on console-fra.rpki-client.org