Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
File:                     cqdZqCUCUkHhqOASv57Mbyp8Uns.mft (raw, json)
Hash identifier:          1zx+YSc9qR7KIpAlesMx6NFqdfL4e5ZWAed+VpEHA5w=
Subject key identifier:   AE:30:5B:57:01:72:17:97:4B:DC:16:18:35:E9:36:5B:4F:8A:D5:37
Authority key identifier: 72:A7:59:A8:25:02:52:41:E1:A8:E0:12:BF:9E:CC:6F:2A:7C:52:7B
Certificate issuer:       /CN=72a759a825025241e1a8e012bf9ecc6f2a7c527b
Certificate serial:       019365FE665BD5C61D90856882DAF653B72B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 01:03:11 +0000
Manifest this update:     Tue 26 Nov 2024 01:03:11 +0000
Manifest next update:     Wed 27 Nov 2024 01:03:11 +0000
Files and hashes:         1: 8k6GkAOae_jBFbQbLdXCkL41trs.roa (hash: mDxeFwwYKV92WPAg0+nnbr5JYz2pP6RQagd/3AjluUQ=)
                          2: cqdZqCUCUkHhqOASv57Mbyp8Uns.crl (hash: DrooMtViFOLpw22EpakrYf8eLa3HuibmzfCs1emJdAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fe:66:5b:d5:c6:1d:90:85:68:82:da:f6:53:b7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a759a825025241e1a8e012bf9ecc6f2a7c527b
        Validity
            Not Before: Nov 26 01:03:11 2024 GMT
            Not After : Nov 27 01:03:11 2024 GMT
        Subject: CN=ae305b57017217974bdc161835e9365b4f8ad537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ba:79:f6:65:90:f4:5f:90:a9:da:19:40:07:
                    d5:38:ae:e9:03:2e:ab:28:61:c3:12:e2:9d:77:03:
                    dc:dc:8b:7a:51:1a:6f:75:1c:82:d1:9a:cb:c1:e2:
                    20:e7:fb:61:3b:ce:e6:cf:f7:35:d7:16:75:9d:33:
                    1f:58:a8:8a:c6:78:b4:eb:c0:81:84:ed:20:b4:d1:
                    41:51:8d:03:78:c4:b3:3b:11:4d:1f:49:ce:f6:36:
                    72:71:9d:dd:50:38:23:1e:9a:3b:22:3d:3b:07:51:
                    a9:b9:f8:9b:e3:90:61:80:68:e3:e9:dd:5d:7b:e6:
                    4e:ba:95:14:5b:0d:c1:03:bd:95:31:81:31:2b:bf:
                    00:36:ca:69:a5:bb:55:c1:f6:9b:8b:a4:58:91:9b:
                    0b:f6:52:f4:e7:50:08:bc:f3:f0:de:ef:60:82:ad:
                    9d:c9:c1:e3:72:5e:78:bc:96:65:a5:44:b8:21:08:
                    a9:16:0a:4f:25:a1:34:5e:41:45:4c:a4:76:f2:f1:
                    99:45:fa:a2:08:f7:f2:4f:37:40:ef:e2:43:31:50:
                    2a:90:13:8a:56:a6:0d:8c:f8:2b:95:36:61:1e:40:
                    26:bc:9b:a8:52:7c:2d:fd:98:54:66:1a:95:ed:09:
                    fc:d9:2d:92:06:80:00:0f:af:8b:76:cc:3c:0b:7c:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:30:5B:57:01:72:17:97:4B:DC:16:18:35:E9:36:5B:4F:8A:D5:37
            X509v3 Authority Key Identifier:
                keyid:72:A7:59:A8:25:02:52:41:E1:A8:E0:12:BF:9E:CC:6F:2A:7C:52:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:80:59:f8:45:07:88:9f:de:39:69:a5:7e:ec:a9:b8:8b:10:
         ec:47:f1:8d:1f:56:97:5e:e0:1c:80:ab:f1:b9:39:c2:9b:c2:
         88:75:22:6f:62:fb:4a:92:27:18:13:81:73:4b:05:30:d6:50:
         50:d0:e3:bb:b7:b2:48:e8:21:82:bb:96:63:d9:8e:e7:70:70:
         6d:47:c0:3b:9b:5f:87:e4:1a:cc:76:55:a3:c6:a5:76:59:d3:
         62:7a:e6:2d:13:a3:9d:72:32:e9:0d:ac:be:e9:21:50:57:27:
         cd:58:c6:f8:b6:b0:65:31:df:3f:23:fc:f3:c8:d3:10:e3:b9:
         2c:cc:0f:44:dc:1b:3c:47:78:4c:35:2b:98:54:24:a4:d3:79:
         36:04:30:d4:bc:de:dc:ee:74:84:77:3a:f3:1c:20:42:9f:fd:
         de:0f:96:0e:1e:e8:66:54:da:44:96:38:79:87:60:44:27:18:
         a5:26:06:2c:6e:b1:e0:1e:ef:9a:bc:39:80:2a:4c:dd:56:bc:
         b9:4d:1e:6d:ad:62:6f:f2:39:c2:38:8e:24:22:fe:81:3c:6d:
         0e:5d:89:6a:6a:ab:40:d4:ac:35:84:c7:8c:f7:b0:b7:79:ec:
         ff:ca:a8:a3:14:49:62:94:ed:1a:8d:62:cf:3e:09:b2:7f:cf:
         49:b9:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:57:34 2024 by rpki-client on console-fra.rpki-client.org