Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
File:                     RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json)
Hash identifier:          8zU82bjfq+sbxVIeT/AGkY1wkyabqvYG5AalIoYG23k=
Subject key identifier:   39:67:6F:37:E5:1E:E0:94:6D:D5:A5:C2:34:73:08:ED:6E:EC:DD:9B
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Certificate issuer:       /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial:       0193579B999863DAB1EBFC53C38C5D01F3A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
Manifest number:          0147
Signing time:             Sat 23 Nov 2024 06:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:35 +0000
Files and hashes:         1: Q7Qtr_r5E4JdawD7HHw4rv0d_ys.roa (hash: fo6B0rrNbwoo760Z//yUvBVHssGfZ0jt82e5QpX+yD0=)
                          2: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: kc8MUcag0okga/C/ZCOTQd0fQSL0PnFH6sl+assJjKM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:99:98:63:da:b1:eb:fc:53:c3:8c:5d:01:f3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
        Validity
            Not Before: Nov 23 06:00:35 2024 GMT
            Not After : Nov 24 06:00:35 2024 GMT
        Subject: CN=39676f37e51ee0946dd5a5c2347308ed6eecdd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:12:28:f3:3e:b8:87:da:62:4e:fd:f0:64:
                    61:bd:90:ae:95:f4:a9:fd:f2:34:08:d7:88:b6:1f:
                    46:3e:b9:f4:9e:03:3e:8f:1b:ae:ad:a7:bd:dd:b3:
                    18:4a:3c:0b:30:6b:07:34:7c:d2:6e:59:9b:e4:d2:
                    46:a5:61:c2:7b:96:15:5d:ed:02:e2:07:2d:9f:e3:
                    0e:ff:f2:cb:3d:52:b3:ea:fd:5b:b8:6f:6c:43:fa:
                    6d:da:a4:30:8f:f0:6b:6d:00:ed:4a:c1:c6:05:b4:
                    a0:c5:a7:25:82:05:58:48:e9:8e:42:f4:a1:40:0b:
                    ed:a2:b1:b5:05:e1:65:3e:be:91:8f:15:34:2a:6a:
                    35:fb:54:97:e4:85:d3:7c:80:68:15:9a:5f:b9:57:
                    fd:fb:cd:3c:f3:7c:f7:ae:f8:72:9a:ac:f8:fe:00:
                    f4:d6:04:5a:f6:53:c6:24:00:ce:c9:88:e0:19:a4:
                    38:f5:2c:33:8a:65:f4:58:56:db:82:32:2c:48:2c:
                    19:82:db:62:b6:14:f4:90:19:7f:a4:67:85:4a:09:
                    a0:b5:8f:06:d9:8c:26:2a:be:70:c0:7c:1a:62:51:
                    6d:9b:4c:78:0f:fb:b4:03:c7:a1:38:8c:aa:7b:82:
                    4c:a8:96:ae:28:49:70:14:55:5f:08:07:5a:a9:7f:
                    13:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:67:6F:37:E5:1E:E0:94:6D:D5:A5:C2:34:73:08:ED:6E:EC:DD:9B
            X509v3 Authority Key Identifier:
                keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e5:55:48:04:4c:dd:a1:3b:63:f3:dc:75:0a:c2:15:f2:df:
         1a:db:57:8c:b0:73:99:ec:6f:aa:75:87:6b:a9:35:7f:fc:a8:
         9b:af:a5:17:ee:a9:db:30:86:96:71:dc:ac:06:df:6e:8e:b8:
         ae:fc:7f:50:cb:4b:b3:df:3a:64:16:ab:cf:56:3e:0c:19:cb:
         50:1f:8e:76:c9:68:a9:2e:b2:73:9c:e3:27:96:de:b5:2a:c3:
         08:ec:f2:3a:91:c3:69:5a:7d:f1:46:02:bf:ce:f3:a4:2e:c8:
         4c:5e:c2:bf:0a:a6:e8:71:02:99:f5:7d:b5:1c:6f:93:7b:b1:
         d4:18:93:ed:b6:0d:7c:35:c7:30:ce:67:f0:f7:e6:8c:b9:de:
         1d:42:53:17:05:28:ad:07:87:82:79:d5:4e:8b:d2:96:fe:71:
         9b:a7:b9:12:36:43:9b:87:14:81:7e:1d:1b:49:bb:3e:10:a9:
         5c:e4:10:55:45:57:79:c4:94:1d:68:bc:f3:a8:f1:1a:61:0b:
         4c:92:82:9f:40:14:98:7c:61:64:19:be:cb:38:69:30:a2:42:
         2d:66:fd:fe:af:b3:1e:90:7d:07:07:a9:95:0e:03:56:03:33:
         89:b4:fd:80:8c:b2:33:d0:90:6e:69:3a:6d:3d:5e:17:75:9c:
         8a:de:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:10 2024 by rpki-client on console-fra.rpki-client.org