Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          5OsImX5k3SJ0ThHZBqi/Ox7Li3+SK+6tgwcQ2k0K5PU=
Subject key identifier:   43:23:B2:DF:B2:9C:6F:94:92:61:64:70:66:39:9F:9A:D2:7F:CC:B7
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       0191F96BBB29FF365B3089B7595AC7A71B40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          0977
Signing time:             Mon 16 Sep 2024 06:01:12 +0000
Manifest this update:     Mon 16 Sep 2024 06:01:12 +0000
Manifest next update:     Tue 17 Sep 2024 06:01:12 +0000
Files and hashes:         1: MXV6hwQ3kkRnXccCtafjJ0OHCd8.roa (hash: JvVO48OvhWspiBB9IZKljgUZp9eDK6W9XLbXxwEeEXQ=)
                          2: TDENfbCQc1e2jsXb36WH3ZHMPeE.roa (hash: NzqI5XAfVeOZqRpSUShDi2gMsGCBkM/lsKDpJfnz4Po=)
                          3: Vqr0kDebybaZx4sL0R7y67vb1vw.roa (hash: huNBA8D+PO3A9+aC+YtefNci8YOwzp68nqnLsZUFqbc=)
                          4: WaS6M2hhcTNRLCEtQDDcjBHJ_7A.roa (hash: kH4kudVYtsIGlmaiMJBrP/8zibEZ4/EipTi76iPNPKU=)
                          5: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: k7SbigStFeMIVjXKuclxpMsIvk/kGRKfJC7z0Y4iu5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6b:bb:29:ff:36:5b:30:89:b7:59:5a:c7:a7:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Sep 16 06:01:12 2024 GMT
            Not After : Sep 17 06:01:12 2024 GMT
        Subject: CN=4323b2dfb29c6f949261647066399f9ad27fccb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:84:df:35:a0:03:2d:6d:ba:76:d8:53:7f:61:
                    00:fd:95:5f:19:d0:a7:0e:16:3c:09:b7:0a:5b:13:
                    00:be:f6:b7:b1:a3:79:6d:e0:a5:55:4e:aa:96:e5:
                    b0:07:18:2b:37:4a:a2:81:2b:51:25:cb:81:16:28:
                    87:fa:72:d0:be:43:75:a6:bc:ea:6e:a6:35:00:9d:
                    d3:a7:1e:64:45:d3:5b:d9:01:d1:83:54:ff:af:7e:
                    fa:52:62:f6:f0:e6:3d:28:b2:7c:c3:e7:60:9d:91:
                    44:64:82:61:10:18:dd:cd:0e:90:3a:a3:69:fc:8b:
                    b2:3a:fe:9c:27:30:b7:11:b6:88:c8:68:01:6b:d6:
                    60:68:d0:28:09:a1:10:70:bc:38:74:5c:b7:a5:33:
                    f3:5a:28:16:c3:ef:7d:5c:b5:dc:04:3a:14:4b:4d:
                    72:d2:30:0a:e7:41:5b:a4:54:66:8d:ab:9d:e7:5a:
                    29:45:40:ba:cd:40:d8:57:36:ef:99:8b:b1:e2:2e:
                    cc:f2:0c:8e:0c:20:89:2d:32:bf:f1:03:f1:52:bd:
                    59:41:b7:d2:81:bf:bc:67:39:16:22:58:7f:4d:01:
                    8d:11:74:40:1f:ef:3c:89:0c:9e:e2:68:eb:d2:6c:
                    6f:50:e7:a1:02:5e:a3:e3:15:23:96:3f:77:99:34:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:23:B2:DF:B2:9C:6F:94:92:61:64:70:66:39:9F:9A:D2:7F:CC:B7
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:c3:ad:8f:2d:ec:cf:f9:2c:37:e1:0d:18:4e:37:c2:4e:3d:
         4b:40:a9:44:6d:d2:b8:40:98:33:9c:15:8d:20:08:94:1b:f5:
         90:6b:4b:8b:ce:ba:b2:51:72:29:22:f2:e8:d7:63:35:30:d4:
         5d:05:ec:af:2e:a8:e1:e5:4f:ad:51:38:72:71:54:c0:41:18:
         ad:c9:51:3c:03:8f:ce:84:2c:5f:8b:65:d5:c2:2e:2e:4f:1f:
         a6:86:13:9a:b9:f0:19:61:e4:4b:94:21:b3:a7:9e:88:d7:a0:
         76:01:36:22:83:03:04:19:44:03:15:b0:8f:06:9e:f2:41:1a:
         b7:7c:8e:46:78:eb:d5:39:e1:fc:1e:03:ad:eb:54:e5:3a:3d:
         69:bd:78:a1:3a:0f:50:a9:92:37:6e:a3:11:1a:75:c1:3d:15:
         2f:1e:bb:77:04:df:d1:15:67:0d:eb:9a:31:87:b2:f1:f7:0b:
         2e:71:dc:8e:cc:a2:e5:8d:f6:a4:ee:16:16:a2:f3:bf:76:03:
         ba:ec:5e:c6:18:10:4b:ea:c6:e7:09:89:44:91:4c:21:9b:6e:
         be:b7:2f:7c:c4:58:d2:02:15:52:4e:c9:d2:32:32:05:0c:ca:
         ba:8b:2e:83:0e:84:13:ae:88:96:ad:d0:73:1e:d4:02:fb:fb:
         8c:16:b9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5a7sp/zZbMIm3WVrHpxtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWM4MDBhYTFiNzhhMTdhNDNlMTlmZDk5MzgzNTVkMDQx
MWU5NGEwHhcNMjQwOTE2MDYwMTEyWhcNMjQwOTE3MDYwMTEyWjAzMTEwLwYDVQQD
Eyg0MzIzYjJkZmIyOWM2Zjk0OTI2MTY0NzA2NjM5OWY5YWQyN2ZjY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ITfNaADLW26dthTf2EA/ZVfGdCn
DhY8CbcKWxMAvva3saN5beClVU6qluWwBxgrN0qigStRJcuBFiiH+nLQvkN1przq
bqY1AJ3Tpx5kRdNb2QHRg1T/r376UmL28OY9KLJ8w+dgnZFEZIJhEBjdzQ6QOqNp
/IuyOv6cJzC3EbaIyGgBa9ZgaNAoCaEQcLw4dFy3pTPzWigWw+99XLXcBDoUS01y
0jAK50FbpFRmjaud51opRUC6zUDYVzbvmYux4i7M8gyODCCJLTK/8QPxUr1ZQbfS
gb+8ZzkWIlh/TQGNEXRAH+88iQye4mjr0mxvUOehAl6j4xUjlj93mTSlEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMjst+ynG+UkmFkcGY5n5rSf8y3MB8GA1UdIwQY
MBaAFKscgAqht4oXpD4Z/Zk4NV0EEelKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMt
NTBjYmNiNWIxOWMyLzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMtNTBjYmNiNWIxOWMy
LzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx8Otjy3s
z/ksN+ENGE43wk49S0CpRG3SuECYM5wVjSAIlBv1kGtLi866slFyKSLy6NdjNTDU
XQXsry6o4eVPrVE4cnFUwEEYrclRPAOPzoQsX4tl1cIuLk8fpoYTmrnwGWHkS5Qh
s6eeiNegdgE2IoMDBBlEAxWwjwae8kEat3yORnjr1Tnh/B4DretU5To9ab14oToP
UKmSN26jERp1wT0VLx67dwTf0RVnDeuaMYey8fcLLnHcjsyi5Y32pO4WFqLzv3YD
uuxexhgQS+rG5wmJRJFMIZtuvrcvfMRY0gIVUk7J0jIyBQzKuosugw6EE66Ilq3Q
cx7UAvv7jBa56g==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:18:07 2024 by rpki-client on console-fra.rpki-client.org