Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File:                     QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier:          JT4OF78Pv1n/OO4jvLHaHjpdDRPP8n2osVV2cwA65FQ=
Subject key identifier:   28:E8:A6:D0:8B:A0:B9:42:75:5E:C2:4B:29:AC:AC:A3:72:89:E2:7B
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer:       /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial:       019234DB851788A7DC3BC2900BE61645A090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number:          122D
Signing time:             Fri 27 Sep 2024 19:00:54 +0000
Manifest this update:     Fri 27 Sep 2024 19:00:54 +0000
Manifest next update:     Sat 28 Sep 2024 19:00:54 +0000
Files and hashes:         1: AwgHOO97IxH12Fkwi0qfc9bi2ZA.roa (hash: vVBkE8+IxSR6quTO4XirhU5FqvP1/6MWYuaOM/opzFI=)
                          2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: Uv1++7V0IyiWgcVlMooqQqYAmt24Sv6Got7fiU3FVj0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:db:85:17:88:a7:dc:3b:c2:90:0b:e6:16:45:a0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
        Validity
            Not Before: Sep 27 19:00:54 2024 GMT
            Not After : Sep 28 19:00:54 2024 GMT
        Subject: CN=28e8a6d08ba0b942755ec24b29acaca37289e27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:45:2d:bb:07:a7:05:66:2a:54:a9:b1:d7:
                    63:68:7f:d5:0a:2b:10:9b:0d:a4:26:86:4f:0a:af:
                    70:a6:30:97:e3:99:cb:b3:c7:a6:53:44:aa:97:77:
                    ef:1e:c0:c3:59:15:50:1c:54:a3:c8:14:68:2c:bf:
                    a7:48:61:32:e3:31:05:7f:d4:b6:08:b4:45:bc:a7:
                    2a:ff:82:b8:a3:ef:95:37:88:7f:c6:7b:97:8e:8c:
                    c8:99:cd:f6:8f:62:cc:be:5c:b6:b2:e4:f3:1b:22:
                    1a:fa:0a:e2:46:f5:23:41:50:bc:ea:37:0e:75:c6:
                    21:9e:e9:5a:86:ca:15:85:4b:96:cf:e5:96:e9:03:
                    a3:60:ec:fc:1d:17:bd:48:fb:76:cc:36:57:83:47:
                    cc:c5:90:d6:db:60:ee:41:84:ac:22:de:fd:ce:d2:
                    f4:25:e4:f0:59:48:0c:c3:19:3b:f5:1d:ce:38:a5:
                    20:20:f2:41:05:d9:39:10:92:a4:43:a2:ef:da:d5:
                    bd:2b:0e:bf:09:f1:a9:d3:79:f5:89:aa:c2:39:d4:
                    65:38:a8:df:96:4c:e3:2d:f7:d9:9d:35:53:57:8e:
                    d2:ba:ed:48:92:71:3c:7b:82:8c:bb:a6:55:12:50:
                    dd:53:d1:b3:08:b1:a6:84:33:e2:96:86:d9:e3:bb:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:A6:D0:8B:A0:B9:42:75:5E:C2:4B:29:AC:AC:A3:72:89:E2:7B
            X509v3 Authority Key Identifier:
                keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:48:9f:14:6c:75:92:17:a5:40:5f:9c:8c:ae:cd:ac:89:a4:
         b2:e2:23:d1:7d:b0:41:88:86:b6:2a:01:69:41:9f:dd:1d:44:
         0b:98:97:06:ef:2d:8e:91:68:0c:30:13:7f:a9:4a:05:f3:68:
         e3:39:38:ff:37:3f:a1:98:06:85:20:7e:93:70:9d:f2:0d:bc:
         93:51:90:ad:18:d0:83:f5:4d:6d:21:2a:a3:96:97:e6:eb:c1:
         b6:29:e9:b9:4c:48:93:eb:f3:4b:3d:07:b0:bb:8d:cb:b7:68:
         09:36:48:b5:12:e8:65:0e:c2:24:14:98:8e:ef:fb:a2:d6:5d:
         3a:8e:b4:a6:df:ad:cd:d9:16:e6:6a:0a:3c:8e:9b:fc:fc:2d:
         7a:52:7c:22:5f:d3:ef:51:55:fe:7c:78:5e:e9:a0:d0:3b:d9:
         92:b4:bd:a0:97:87:fa:44:ca:c4:f6:9e:c3:ef:e2:bd:4b:2e:
         3e:41:e6:df:14:5e:3d:a5:9d:db:57:9e:3a:e4:3d:0f:49:6f:
         12:f0:86:8e:de:06:f0:dd:0e:22:c6:41:8d:2d:c9:f0:11:02:
         53:a0:5f:d3:6e:23:c5:80:fc:50:02:00:50:18:e5:45:2c:09:
         90:47:25:ca:93:38:80:bc:24:e4:70:97:15:e8:1a:6a:da:e4:
         ce:08:de:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:15:35 2024 by rpki-client on console-fra.rpki-client.org