Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File:                     QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier:          0152xPMDmeq3OMGawAYnbEnZNhfSToZJaVFUfb9JVcI=
Subject key identifier:   9E:33:90:3A:00:DA:6F:FF:75:AD:BE:39:D2:59:B9:63:18:34:A1:5A
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer:       /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial:       019356F68F79F45A32C4B7FD096B2474B9A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number:          0CA4
Signing time:             Sat 23 Nov 2024 03:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:19 +0000
Files and hashes:         1: 18VodbP9Lhu9d0hfiD7HShK88II.roa (hash: Gaglq0Z267OwhIPM/wYMvotPJJ391A4FZXbsrV9oOTA=)
                          2: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: EvooYPMj8tE0J9Tg3/kScrBjVnWdqzHIWTniBVCNTCk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:8f:79:f4:5a:32:c4:b7:fd:09:6b:24:74:b9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
        Validity
            Not Before: Nov 23 03:00:19 2024 GMT
            Not After : Nov 24 03:00:19 2024 GMT
        Subject: CN=9e33903a00da6fff75adbe39d259b9631834a15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:91:18:0f:09:ad:a6:8d:19:7c:42:60:e5:
                    a3:38:1f:fa:45:46:ae:ac:5d:da:ee:e3:83:19:cf:
                    db:f6:a5:a4:87:27:3d:d6:2c:41:aa:9c:30:bc:d0:
                    02:0c:3a:7f:24:45:32:42:74:0f:09:61:56:23:61:
                    c8:14:91:a4:92:7c:e2:e9:de:88:21:e9:32:e5:42:
                    2f:83:89:0f:01:c7:67:ad:98:bb:f7:48:ef:09:01:
                    af:a7:81:21:2a:ae:2b:5a:1a:56:24:2f:6b:b6:78:
                    7c:cf:d1:6c:a1:97:59:78:ea:1a:5c:a7:0a:42:e5:
                    0d:ee:6f:31:42:0c:34:ac:1a:b8:d3:91:aa:bb:93:
                    ce:99:ae:97:63:cf:9f:2d:2c:a5:1c:c2:e8:df:4f:
                    75:e2:b8:8a:e7:ea:eb:91:27:b6:56:4b:23:e0:36:
                    b7:5a:5e:f1:30:34:96:d7:c9:a2:ad:c0:7f:ba:4a:
                    ea:4f:27:9f:de:c8:27:fe:bb:3e:fa:60:17:29:3d:
                    59:db:b3:70:4c:1e:e2:97:2b:b4:b8:72:1a:f5:47:
                    36:e4:d4:75:90:db:04:e3:24:1e:76:88:d8:5c:1a:
                    c3:2b:99:d2:e0:54:0d:64:18:b9:e7:0c:40:fa:cf:
                    d9:1b:18:3b:14:c5:b4:74:8d:84:38:48:4e:63:5d:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:33:90:3A:00:DA:6F:FF:75:AD:BE:39:D2:59:B9:63:18:34:A1:5A
            X509v3 Authority Key Identifier:
                keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:26:80:57:23:65:7d:96:2d:0f:4a:fc:66:d8:9d:83:5b:f4:
         ae:0b:16:d8:29:05:7d:19:59:20:17:37:b5:bf:bc:23:ed:a1:
         57:9f:7a:6a:c0:45:0f:fa:24:55:4c:de:a4:e1:df:f1:91:c4:
         77:5e:d2:9e:e2:d6:01:38:92:7d:02:12:55:18:c8:46:10:32:
         ed:38:a3:55:af:36:74:32:98:19:8f:d6:64:a6:88:60:f0:3a:
         0d:4d:48:ec:4f:b6:76:94:05:67:d1:12:e9:6b:65:71:4b:7d:
         01:c7:02:49:f5:e3:7d:34:b5:f1:28:e0:45:a5:0b:46:ee:8c:
         54:c6:c2:b6:d3:22:c1:81:4a:98:44:44:45:8c:3c:92:60:a4:
         23:b7:52:e3:a7:0b:44:3f:30:94:7b:40:56:0f:f9:dd:f5:42:
         8b:6c:7f:7d:7a:82:84:27:be:5d:fc:57:48:91:b4:d8:a5:39:
         65:58:79:ac:ab:e1:67:66:c4:63:2d:ce:69:64:25:b1:a0:c7:
         f4:87:ec:70:9f:56:4b:60:5d:03:67:b0:e9:75:7e:a2:84:43:
         dd:ae:ee:b2:4d:66:0d:64:ca:22:44:1d:47:59:86:47:1b:c7:
         35:bd:4a:2a:6d:67:c3:c5:c2:a8:1e:9c:eb:99:0f:7a:41:90:
         f6:16:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:05 2024 by rpki-client on console-fra.rpki-client.org