Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File:                     qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier:          MiCyvKveZP5LY112imC8RNWo3ZVf6jIZ/GzN+5XqzmQ=
Subject key identifier:   C7:4C:2A:D3:25:23:EF:6B:C5:3C:C7:CC:22:1E:50:1C:E3:B6:11:4E
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       019350F477E270BB3AFCBDFFC7B395498177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number:          03F5
Signing time:             Thu 21 Nov 2024 23:00:18 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:18 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:18 +0000
Files and hashes:         1: 62cltH-4eVHTI9n8JceslMlWiNQ.roa (hash: LYFJh4v7Cwh7aPt8GMFj1mWfjf+pmrmpRtqvE7erNEw=)
                          2: F8HNA8jpS6nsI2qqwB3NdgryJrU.roa (hash: 53DH0HXCnd/dowuv23PJ4PQhz+bDGZVix+I3x0I7Ebc=)
                          3: FGB6n3EUCW2arWTfRt93nLZJDlw.roa (hash: OoeTCc+KrbDUwl31/Kzx/9WebhTynupRZzvft8SEmOA=)
                          4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: OY+SWPkWx+ISUKGrn6EODYaOkKn2hQyFW3vqm1vsDko=)
                          5: sclRZkV76KDDNZCkiHw_KYdrrp0.roa (hash: M1dzQUP3nY14BSkEeB8oCFmT/Div7R3MTulKuC6dQqw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:77:e2:70:bb:3a:fc:bd:ff:c7:b3:95:49:81:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: Nov 21 23:00:18 2024 GMT
            Not After : Nov 22 23:00:18 2024 GMT
        Subject: CN=c74c2ad32523ef6bc53cc7cc221e501ce3b6114e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:12:c2:b1:63:b4:5c:d4:79:04:f1:4b:f2:
                    22:b9:10:b1:07:a1:67:d2:38:8f:d6:10:01:ce:fd:
                    1e:e2:0b:e9:e0:12:9c:6f:93:8a:5a:3e:78:c0:6f:
                    cd:0d:6a:37:ab:e1:98:42:ec:81:26:96:cb:af:db:
                    b2:f1:5e:83:9d:a1:a5:12:08:20:d2:e2:f6:ed:40:
                    d3:e8:3a:76:bf:96:8b:ba:0f:3c:3d:0c:ff:85:4d:
                    d6:e5:67:e5:d1:bb:ec:76:45:5b:23:8e:49:3e:29:
                    fb:a8:5d:bb:b9:42:4e:59:5e:98:13:c8:95:5c:21:
                    90:e7:42:b2:49:8b:bd:f8:8d:7b:c8:aa:10:6c:49:
                    fe:4e:42:14:2d:5d:58:7b:96:a0:b7:c0:e6:40:18:
                    28:84:63:b9:a5:a6:4d:05:1c:38:40:d7:35:d4:d8:
                    2c:55:77:e3:9a:2d:bb:bf:44:23:9a:a9:d4:3c:5c:
                    e0:c7:cc:23:5d:9f:24:58:ca:7c:42:b6:7c:5d:48:
                    0f:fb:c3:62:30:ff:41:bc:2b:93:2b:7d:6c:54:28:
                    f8:fd:7d:48:00:33:3d:63:12:34:08:29:ba:78:03:
                    32:29:25:b9:5a:a5:55:c1:1a:37:65:62:ae:47:6f:
                    6a:49:e6:37:d7:54:25:ff:4d:af:0b:62:b6:93:5a:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4C:2A:D3:25:23:EF:6B:C5:3C:C7:CC:22:1E:50:1C:E3:B6:11:4E
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9e:67:d5:9e:63:d0:14:e7:10:76:a8:5c:bb:01:18:87:0c:
         a6:f8:a2:31:0a:ff:5e:92:58:28:de:0b:56:4b:be:2d:79:d3:
         e8:ad:96:34:c9:c0:6c:0b:b2:5c:ba:06:b8:cd:fd:ad:6b:bb:
         0e:20:82:e3:d1:2a:da:b9:5a:01:85:60:0d:d5:0a:90:e3:68:
         d6:19:b8:01:7d:05:8a:96:a3:58:fe:fe:b9:47:bf:93:ee:a5:
         a2:09:7e:64:d9:0d:b4:93:d4:91:1b:f0:b6:0a:4f:3d:dd:d0:
         5d:5f:ae:2b:a2:4a:9b:82:7c:36:55:a6:32:dc:f0:82:ff:51:
         07:d8:6d:77:f2:22:5b:bb:60:4b:48:a0:2c:4c:63:ac:fc:d4:
         c2:73:71:53:93:5a:6f:fc:37:4e:4b:aa:ab:66:8d:cb:b5:ea:
         b0:e3:41:e8:30:9c:0a:9f:e3:fa:5d:5a:22:37:43:75:7f:6b:
         e2:47:61:87:d1:5f:ae:62:35:2d:a9:a6:62:78:4e:75:8f:c0:
         4d:6b:d3:4c:51:89:2e:78:d2:69:59:d9:c5:0e:ac:5e:e0:e6:
         12:82:16:8b:39:06:0a:e5:46:5a:ac:a0:ab:ad:39:3c:50:a4:
         b1:9a:d0:a7:23:55:93:34:b7:e6:ed:39:3d:54:68:8c:e7:17:
         b6:77:02:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:31:44 2024 by rpki-client on console-fra.rpki-client.org