Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
File:                     qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json)
Hash identifier:          87VqdoMg/vIzWZsRSNVBIxsjxyuZ5WANvrE3qtgpexI=
Subject key identifier:   AB:99:D2:A7:46:1A:36:A9:67:41:86:54:F7:76:C2:AE:58:2B:97:BB
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Certificate issuer:       /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial:       0193568932AEFAB33CEACFAA8188E722A8A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
Manifest number:          08CB
Signing time:             Sat 23 Nov 2024 01:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:52 +0000
Files and hashes:         1: GPyQee34Y8mZFlQIteSfIuhRr2I.roa (hash: 8Re8HGn4121lQ42XjCWTd43/gNTaXC8Glhn1w0sMF58=)
                          2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: t2KVjNJUEXE6sQ4EuaYaDdYYnFfUKPADtcDyjH/0CIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:32:ae:fa:b3:3c:ea:cf:aa:81:88:e7:22:a8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
        Validity
            Not Before: Nov 23 01:00:52 2024 GMT
            Not After : Nov 24 01:00:52 2024 GMT
        Subject: CN=ab99d2a7461a36a967418654f776c2ae582b97bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:79:18:66:d9:f2:9f:fd:b7:f0:f8:e1:00:
                    eb:81:d0:29:7f:50:7b:16:1a:69:89:f7:df:1e:5f:
                    ac:6d:78:3e:60:9b:b4:55:af:9b:c2:cf:c7:25:e9:
                    d8:af:c5:be:96:d0:0b:9e:db:f1:22:bb:a6:be:8c:
                    01:ad:23:c2:1f:8b:3c:b6:ed:ee:20:a9:9a:9a:46:
                    ea:ef:96:ae:e0:21:a8:37:ec:6c:2a:33:8a:9d:d9:
                    e6:41:cc:b0:3e:0d:03:a1:ee:b3:97:19:98:23:ee:
                    69:f0:23:0a:9b:7b:d9:93:ee:9f:3b:1d:7c:03:a8:
                    29:c0:32:99:d3:d4:34:b5:7a:46:ab:a8:91:94:a9:
                    76:bb:b2:f1:c3:bd:91:cd:65:77:cf:54:5d:ea:02:
                    3d:c9:8e:57:05:ac:f6:4d:66:4a:cf:2d:fb:8d:2a:
                    3f:0a:d2:74:04:fd:6d:41:d6:c8:7d:3c:ab:16:f0:
                    e6:36:85:43:15:6b:d2:05:10:91:84:24:57:a0:ea:
                    d0:ab:01:6e:c7:e0:1b:85:aa:00:80:54:c1:2c:aa:
                    37:91:52:d7:5a:e3:0e:50:24:40:73:79:28:a7:2c:
                    4d:2b:cb:a4:21:fc:c6:9a:3f:cd:a4:1e:14:b0:54:
                    55:67:26:f5:ba:a6:8b:0a:3f:f2:e0:f0:c2:f8:01:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:99:D2:A7:46:1A:36:A9:67:41:86:54:F7:76:C2:AE:58:2B:97:BB
            X509v3 Authority Key Identifier:
                keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:28:6d:6c:ba:f6:c4:0e:d5:de:64:85:8f:9d:1e:89:70:ae:
         c7:c4:f5:62:93:e9:c5:f8:42:91:f0:a3:9e:f2:a9:13:6d:10:
         e5:0c:38:59:6d:37:e5:45:7c:21:22:aa:6a:0a:fb:0a:b0:c9:
         0d:70:e5:23:42:e9:aa:a0:38:19:c0:75:06:a0:e6:69:e8:c9:
         8f:c2:ba:af:3d:76:54:61:40:e7:35:58:eb:91:f6:c9:68:33:
         19:1a:c8:41:ca:45:c3:9a:82:9c:4d:3b:fe:03:f2:f1:3b:b7:
         09:a8:5c:83:40:6e:87:3c:21:5f:88:b4:b1:db:f1:9d:a4:d8:
         67:3d:2e:91:3b:ca:1d:8a:f1:5d:5f:d9:6c:5a:ab:9d:45:c3:
         6a:55:ad:02:9f:4f:20:32:42:1e:47:4f:a1:4d:fb:90:68:27:
         68:f0:24:74:2f:57:47:b5:1d:81:99:bd:17:77:22:04:69:27:
         8b:e1:34:68:cb:22:3f:25:69:dc:e5:02:c8:22:e9:cc:5a:5b:
         70:4f:66:16:b2:87:84:94:1b:37:a6:cf:57:27:12:42:63:7f:
         c3:fe:31:ac:f2:68:3e:ad:ba:bc:41:96:77:30:d3:79:2e:ed:
         0f:12:ef:70:bc:6e:f2:29:83:7a:13:17:66:b8:47:24:b4:e9:
         65:ac:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:02 2024 by rpki-client on console-fra.rpki-client.org