Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File:                     QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier:          ngAiDyTKQipC8ijIF/C/rpKJJpxHqAMpcuUOwk7TivI=
Subject key identifier:   7C:2A:1F:61:98:BA:C1:4D:B5:CB:CB:32:07:24:5E:34:18:DA:9F:B7
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer:       /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial:       019352ACCD04649E05013F5F09CDF83D0EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number:          08CB
Signing time:             Fri 22 Nov 2024 07:01:16 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:16 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:16 +0000
Files and hashes:         1: AW1Cm4DIdPFIEoTBFdL_6BB7K2A.roa (hash: T9DGw2DG8KSQQ5pY0rh4QOETlmDdlBALgiGc9ZNC04w=)
                          2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: zU+hcys42Vby2Xj3A4sufcJY3dACsAOYKs1uiA8zvoI=)
                          3: phKERRguDNs8sQS0Ctn-RMIXq0g.roa (hash: 1zGNeniRacKcoyN3DnpGYTP+6ee3AJez079a8Gp+EJQ=)
                          4: vc7HZe9D3Ir0L5b8ocmnY_aeiSg.roa (hash: rvLgnRURJqH52muTZhK2IWq5PFu/2ABCGoxAWztEDHs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:cd:04:64:9e:05:01:3f:5f:09:cd:f8:3d:0e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
        Validity
            Not Before: Nov 22 07:01:16 2024 GMT
            Not After : Nov 23 07:01:16 2024 GMT
        Subject: CN=7c2a1f6198bac14db5cbcb3207245e3418da9fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:0f:3f:28:9b:53:19:f9:0f:f4:2f:52:c0:
                    b6:10:b0:92:64:d1:71:db:9f:cb:2f:74:bb:ed:08:
                    40:d4:43:93:92:21:f8:d7:8e:fa:46:08:8f:64:25:
                    65:3f:02:97:7a:50:9d:4b:1e:c5:92:34:e6:d3:da:
                    3e:8a:02:48:f9:f4:70:d1:ae:28:58:06:3a:fc:f4:
                    84:6e:21:fa:1f:fd:6d:ad:46:8a:fc:90:56:be:48:
                    ab:a5:ed:17:62:2d:b8:9e:87:c7:ae:44:53:38:a5:
                    cd:ab:35:ed:56:64:d6:c6:08:d3:70:ac:0d:46:28:
                    ed:ca:5c:0d:96:30:8b:f0:df:6d:46:61:9d:fe:ac:
                    0b:09:49:16:d7:71:c4:75:d5:e5:9f:6b:b3:9e:29:
                    ea:69:95:2a:81:b6:66:74:b3:71:0d:b3:5e:d6:df:
                    9a:59:08:5f:b0:20:06:f5:18:9c:0f:98:20:92:c8:
                    c8:65:97:da:16:07:96:af:f2:c5:10:1f:3a:d2:26:
                    81:66:88:89:bc:da:e8:b4:6a:6e:01:4f:e3:6c:29:
                    e2:03:ee:1b:48:f4:27:8c:c0:a7:2a:94:c0:f3:25:
                    6d:a1:19:85:78:10:f6:0d:6e:9a:74:ae:b7:a1:2b:
                    5c:d1:4c:56:6c:72:d5:62:04:db:94:a1:52:85:d8:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2A:1F:61:98:BA:C1:4D:B5:CB:CB:32:07:24:5E:34:18:DA:9F:B7
            X509v3 Authority Key Identifier:
                keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:e4:14:aa:a3:ba:09:f8:d3:a1:b1:fa:3a:60:22:d5:1b:
         80:05:52:0b:92:db:f1:18:5f:62:73:bf:b6:42:e0:fc:db:ea:
         33:bc:3a:2c:fa:3a:37:45:da:ec:f4:85:bd:2c:24:bf:51:39:
         35:75:e8:80:7a:ac:79:38:d1:43:fb:d9:ec:c7:3a:06:2c:e3:
         29:37:0a:7e:70:84:7c:ea:ab:6a:2c:55:f3:97:4e:f2:99:f0:
         d8:ce:c2:cc:d8:18:c4:43:15:51:9f:33:d6:9d:3b:0c:fc:1f:
         54:bb:6c:35:25:55:c0:b2:41:73:b9:85:8c:fd:1e:21:15:e1:
         5e:3d:ac:b1:95:e2:26:a3:c6:a0:5e:74:e2:cb:3b:cf:5a:c2:
         6b:92:cc:15:b0:29:f6:a3:28:c6:74:e3:fb:6b:b5:9f:e8:55:
         22:9e:f8:c0:63:bd:bb:a4:4a:b9:57:c5:a0:23:6e:9b:08:a8:
         f0:ad:07:c3:22:07:f1:3e:96:8b:47:e9:df:91:93:5e:05:29:
         85:86:6d:89:48:c5:6a:23:e0:2f:02:0f:93:0b:19:f1:56:63:
         21:2f:57:69:37:6e:7b:a9:0b:84:7c:73:e8:47:49:1a:80:9c:
         b8:53:ea:38:c7:54:7d:02:53:9f:78:94:d1:6f:73:29:66:27:
         81:0f:eb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:44:15 2024 by rpki-client on console-fra.rpki-client.org