Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          AjXa24CcaNugw4SAk9/g0teYOedZA9T4Yw5DZZsEwYE=
Subject key identifier:   BA:14:C0:59:5D:F3:AD:7D:0D:B3:D9:C6:02:DC:69:0E:F8:CA:FA:6F
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       0193549C7C6B0C13127279AE13CB3B755E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          109E
Signing time:             Fri 22 Nov 2024 16:02:41 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:41 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:41 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: YxRwNdyMtpLW9+oy3ZduQOVMaKNBJauTvzfv1cz3MFE=)
                          2: G5dXIZOvDl6VRhZ6sO_ypDt71wg.roa (hash: wtkx4u7+uJuzY/Var52g30Sul31M23a4ANAq9wcayBk=)
                          3: _Xb9_PmqVayfGVYFWF9LiHBxOho.roa (hash: rFvbstSl2qHAcxz7TocteOFlyKDRFjbyacLWolfz2MA=)
                          4: eTc_cExB7oA-s_D66voABq54SoQ.roa (hash: ho3rrnaJt7tIZ4fcmKlB5H0ZPrfdA3fJgYPJfGNCEcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:7c:6b:0c:13:12:72:79:ae:13:cb:3b:75:5e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: Nov 22 16:02:41 2024 GMT
            Not After : Nov 23 16:02:41 2024 GMT
        Subject: CN=ba14c0595df3ad7d0db3d9c602dc690ef8cafa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:f2:e0:05:3d:b3:e7:79:88:17:76:83:70:
                    4f:88:b4:06:59:bc:00:cd:ec:af:fb:94:a7:fb:49:
                    ad:9f:81:8c:cc:41:84:4e:12:4d:fd:62:a2:60:5e:
                    ed:c3:64:a9:f7:f7:41:b7:77:68:20:0d:c8:69:9c:
                    6d:26:ae:c4:17:11:48:18:ee:1f:da:49:66:2e:09:
                    ca:de:38:3d:93:78:e5:2f:72:f2:a4:5e:2b:a8:70:
                    77:d2:b5:99:f7:a1:a8:9f:75:9f:65:22:8a:d6:88:
                    8e:05:61:2d:e7:53:58:dc:5d:43:21:fa:f5:4e:4d:
                    02:4e:2f:67:af:34:3c:0a:06:3e:d1:2d:4b:ff:b2:
                    b0:cd:eb:24:c9:79:0f:a3:20:66:de:f1:02:40:4f:
                    0f:00:00:ac:1a:c1:0b:db:64:9a:1e:ee:20:e5:d7:
                    00:4b:c7:73:58:53:af:00:c1:32:eb:0e:34:99:b6:
                    d5:82:d5:58:ab:1d:cb:5d:48:36:a4:55:87:23:fc:
                    53:69:35:e2:82:61:e4:f9:06:e9:03:f3:78:50:54:
                    e3:84:b7:3e:40:58:e4:bf:9b:9b:a1:04:b5:6e:80:
                    67:29:f2:4d:02:41:48:1d:c6:5a:5c:2d:22:0e:ff:
                    69:a4:65:f3:66:f1:f8:15:93:8d:51:1b:cb:e5:62:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:14:C0:59:5D:F3:AD:7D:0D:B3:D9:C6:02:DC:69:0E:F8:CA:FA:6F
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:99:23:c8:f2:4b:e2:e9:56:5a:ac:06:06:dd:82:9a:b0:
         de:8b:10:6f:2b:70:bc:39:0d:72:5e:c3:43:5a:01:c4:53:fc:
         97:11:1e:dc:1d:62:ce:9e:4c:c0:8e:9b:ae:61:85:d3:36:32:
         6d:63:6c:17:b6:a8:e5:57:ef:b7:d0:c7:d1:02:c9:03:7d:4c:
         12:a3:73:2e:91:7c:b8:3f:c0:7f:91:12:a0:b8:87:1d:74:8a:
         44:d4:63:59:75:39:67:17:18:27:c7:57:ad:0e:a2:25:2b:dc:
         e5:30:d3:e3:0c:4e:c5:15:38:fc:4c:de:30:3c:01:f5:5c:b2:
         0d:5f:26:b1:6b:9b:d9:8b:fc:ac:6e:c3:17:12:19:68:47:f3:
         93:ef:b2:a6:98:6d:db:f6:4f:34:6a:f1:79:9f:bf:f0:09:f9:
         1a:d8:4f:74:ca:15:23:d5:cb:6f:1a:e5:40:a8:a3:80:6f:b9:
         53:89:73:75:26:38:b5:d9:0e:3f:30:b6:cd:1a:1c:e1:d1:33:
         62:35:7b:a1:80:97:f1:d2:4c:ed:98:45:4f:cc:04:54:36:2b:
         d2:eb:98:7c:27:c5:b8:5e:3c:7d:5b:98:a9:15:88:87:9c:c6:
         e3:c6:96:96:13:e3:7a:82:32:bb:9f:e1:6c:3a:f7:29:f7:f6:
         d1:95:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:02 2024 by rpki-client on console-ams.rpki-client.org