Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File:                     qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier:          ipFylvRpym1zPrw2L0FzTxoT/ods8U801btVG73XRQw=
Subject key identifier:   4F:3E:E7:A4:C1:2B:01:96:22:3B:B0:EF:C2:63:E1:90:0A:B6:FF:3D
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer:       /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial:       019355AD223C2067AE81AA2A8B58FB12CE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number:          019E
Signing time:             Fri 22 Nov 2024 21:00:30 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:30 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:30 +0000
Files and hashes:         1: kuBjWSrGZKTHjUTJwZCf1FqQUo8.roa (hash: XOi9pbA/w1hBDXi6IgfFCKNZ1t9CS5fRRnA0Z6a3ktk=)
                          2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: eniwGfxQlR/RzSxAhwqT6Zh+r3MnY51jIZHWenmoiyk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:22:3c:20:67:ae:81:aa:2a:8b:58:fb:12:ce:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
        Validity
            Not Before: Nov 22 21:00:30 2024 GMT
            Not After : Nov 23 21:00:30 2024 GMT
        Subject: CN=4f3ee7a4c12b0196223bb0efc263e1900ab6ff3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:13:9b:34:d0:a1:ce:2c:4f:86:82:6b:1a:
                    4c:9c:07:61:ee:7c:14:3a:88:e4:8d:d8:f4:42:a2:
                    5b:34:e8:b4:d4:62:80:de:aa:ec:86:7b:1a:74:94:
                    00:fe:0c:e9:e6:eb:10:72:0a:73:3e:66:34:4b:0a:
                    f8:bc:9e:60:dc:a0:83:c7:2a:aa:8f:ff:26:e9:2b:
                    81:93:91:ce:46:e6:e6:8c:67:3b:8e:ef:5a:0a:b7:
                    0e:2b:d5:78:04:74:1e:60:45:b6:80:d0:16:48:2d:
                    eb:49:9b:57:85:e8:82:ca:85:f1:a8:11:1c:0e:e8:
                    de:ce:71:78:c9:70:67:74:cd:ec:80:26:1e:97:f5:
                    b6:e4:99:eb:50:cb:da:b5:20:4c:d8:a8:68:19:3c:
                    e5:2f:8f:42:d1:72:7c:99:21:b5:9b:40:6d:e2:67:
                    9e:f2:95:a0:73:db:bf:c7:d8:99:72:f6:c6:d0:41:
                    a6:c9:b1:c0:ae:93:9b:d2:e2:7d:36:1a:40:cc:d3:
                    be:e7:48:41:36:c0:d3:db:8e:44:b8:b3:8b:a2:ca:
                    9a:dc:32:61:d5:5c:3b:94:d2:fa:fa:79:32:19:03:
                    6d:9c:91:57:ec:77:d8:a1:a1:b7:ad:1c:1f:37:86:
                    f8:1f:23:73:87:26:60:78:b6:10:0b:03:bc:55:c2:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3E:E7:A4:C1:2B:01:96:22:3B:B0:EF:C2:63:E1:90:0A:B6:FF:3D
            X509v3 Authority Key Identifier:
                keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:27:69:30:dd:a8:a9:1c:bd:d6:97:1f:5b:84:8f:5c:33:e8:
         33:c3:2c:cd:ea:78:7e:cf:b3:cc:b7:3d:eb:ff:c0:39:ba:9a:
         9f:0c:2b:a2:ea:d7:c2:89:48:67:66:97:5a:23:c2:78:e0:46:
         cf:f0:2c:78:12:66:92:26:f0:ac:ee:2f:e3:6d:e5:c9:57:45:
         a8:ef:10:75:c0:fb:a1:21:7a:9b:0d:21:10:3a:6e:90:2b:6e:
         19:0a:9c:72:57:2b:db:72:3f:65:a5:a9:a1:ea:6f:3a:a1:74:
         95:0e:31:66:03:f3:88:81:8d:c7:6f:55:56:9f:1e:99:cc:93:
         22:0c:fd:2d:4f:46:50:7f:ee:c4:a7:6e:81:78:92:a7:19:00:
         f4:0c:59:72:6a:02:1b:a6:f7:74:4f:6c:2a:68:9c:ff:82:1d:
         37:5d:0f:75:a1:6f:e0:2b:5f:9e:ff:bd:00:97:1d:43:0e:42:
         63:36:45:df:d8:1a:c3:8e:2e:de:b1:be:c8:31:e0:0d:fa:e4:
         80:d6:e0:2d:a0:d7:c8:67:cb:b1:70:ee:01:ae:03:9b:24:98:
         29:b7:11:4d:d9:99:23:4b:a0:0d:bf:0e:1a:25:3c:69:4b:d4:
         81:fb:91:11:97:78:ae:52:a4:20:e4:f8:0a:87:d4:64:b9:56:
         83:e8:c4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:02 2024 by rpki-client on console-fra.rpki-client.org