Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File:                     QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier:          nuv0Ouyvrx1e/YslN8yGeNxAmuFHJg/jSa0B4qjA2zY=
Subject key identifier:   D1:21:34:0F:86:21:95:C4:92:99:BD:06:F9:6C:54:C8:AB:72:0C:FB
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer:       /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial:       019369D9EBE500C92945B75C87DB38A0A6CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number:          1033
Signing time:             Tue 26 Nov 2024 19:01:49 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:49 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:49 +0000
Files and hashes:         1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: y5rOVHfJroiX/D/vdD5dQMsix16HTpddPp12cm3NXNI=)
                          2: wgXW4wkodn_BFnqC9jH4tEFiaSs.roa (hash: opvZSyfmnwohB+7vMm6LivOLkFUDjaY3RbUaMyQLLXI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:eb:e5:00:c9:29:45:b7:5c:87:db:38:a0:a6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
        Validity
            Not Before: Nov 26 19:01:49 2024 GMT
            Not After : Nov 27 19:01:49 2024 GMT
        Subject: CN=d121340f862195c49299bd06f96c54c8ab720cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:52:90:71:65:67:39:5a:6c:44:24:3d:4d:
                    f1:cc:75:9b:ae:cd:23:af:25:b9:fc:48:ee:bc:6c:
                    43:5e:fe:7d:6a:31:62:39:36:d8:15:55:64:a3:5c:
                    dd:aa:a4:9e:98:cf:77:01:0d:39:40:b5:b5:e9:99:
                    35:d2:1b:88:86:18:fc:e5:a9:c1:0a:cd:a7:02:07:
                    81:80:c9:d4:b0:3d:38:7f:ef:23:a8:78:3f:b4:c6:
                    35:58:74:81:9a:c3:07:41:97:ae:86:d8:01:c5:88:
                    4e:d0:45:15:af:b6:05:e1:85:dc:5c:b0:36:6b:2d:
                    93:35:ad:d2:d3:a4:d5:ac:c9:19:56:65:ce:9e:4a:
                    36:f0:70:ef:c9:86:96:45:60:8a:f7:0d:aa:46:a4:
                    5b:dd:aa:af:d1:ce:c3:6e:c1:d8:70:55:e8:56:c3:
                    c0:75:4e:05:6e:b9:3e:ea:5e:9b:c4:6e:a8:22:ae:
                    60:0f:19:58:0d:56:25:12:4d:62:c1:6c:c4:95:48:
                    bf:49:14:5e:8d:54:a6:bd:e1:0b:cc:ea:b3:38:5f:
                    1e:e6:d8:55:8d:42:db:1e:6e:af:02:5e:17:a6:f7:
                    38:59:e1:fd:6d:89:c7:41:61:64:94:27:c4:d7:d2:
                    3b:3c:c0:94:ac:f1:2d:36:21:20:6a:32:23:98:65:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:21:34:0F:86:21:95:C4:92:99:BD:06:F9:6C:54:C8:AB:72:0C:FB
            X509v3 Authority Key Identifier:
                keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a3:9b:2e:42:bf:bf:28:4e:02:63:fb:c0:01:50:3c:b8:5f:
         3e:c7:0f:e7:26:d4:e5:91:24:a4:23:ec:05:7f:a3:22:75:68:
         9b:1d:a5:47:95:3b:2b:df:78:0d:02:e9:50:2b:c4:43:2f:49:
         b0:f5:66:03:c6:57:9d:f3:ea:de:4f:87:25:45:b2:9e:31:5b:
         50:87:4a:41:08:d3:4e:5d:5c:e7:71:f9:eb:d2:87:8c:64:4f:
         4a:ee:5a:04:48:b1:e5:be:40:20:e3:3e:24:a7:71:b8:9e:3d:
         d3:63:4f:49:a0:87:11:82:5a:fe:88:f5:1b:ae:cb:78:a0:45:
         88:65:e4:46:3c:94:6a:0a:4d:21:33:8b:34:d2:c7:8a:e8:22:
         5f:66:d4:fc:cb:c3:5b:fb:86:57:ac:aa:f7:fe:d9:ae:06:45:
         a4:31:96:e4:67:f3:48:29:c5:46:7a:ac:37:06:78:74:65:35:
         a4:4d:c8:b5:5e:6d:39:6e:21:69:e0:99:e7:17:ab:aa:57:f3:
         39:d9:52:64:d9:f1:ff:f4:1b:12:4b:fa:5a:53:66:97:4a:b6:
         72:24:3f:a9:b8:2c:f4:9b:a2:8f:b7:c1:99:f9:59:8f:8c:bc:
         0e:01:fe:83:f2:e7:e8:6c:96:3a:71:ef:b6:96:72:44:6a:7b:
         ec:dc:e2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:03 2024 by rpki-client on console-ams.rpki-client.org