Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
File:                     qreGFvOzntSCDQTOCY6nwgZVMUs.mft (raw, json)
Hash identifier:          jzcsmD4NSUSfXanIv1AEcQBwxAfvmE/4+RBGV8L7Qjs=
Subject key identifier:   AF:73:C7:96:47:4D:A3:8B:7A:58:7B:77:FB:1E:69:82:61:47:97:77
Authority key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
Certificate issuer:       /CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Certificate serial:       01935688C630F0566DD5302F918126A1187D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:24 +0000
Files and hashes:         1: bt19kOEyfs3QGRVlFGR_4LUMLec.roa (hash: 9qpoRsjN16Y+BhKYQU7cprAl1Mg9egcZI8O5yWWEWiI=)
                          2: qreGFvOzntSCDQTOCY6nwgZVMUs.crl (hash: cKUY/rd7OIevWTYyxBhoP0D/A4dbkIucuePtQfEFh4E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:c6:30:f0:56:6d:d5:30:2f:91:81:26:a1:18:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab78616f3b39ed4820d04ce098ea7c20655314b
        Validity
            Not Before: Nov 23 01:00:24 2024 GMT
            Not After : Nov 24 01:00:24 2024 GMT
        Subject: CN=af73c796474da38b7a587b77fb1e698261479777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:69:ff:f2:2f:1c:8a:08:65:9e:b7:be:06:35:
                    89:da:8c:cc:00:d7:c0:05:fe:c0:ee:d1:e1:61:56:
                    bc:79:5d:a6:85:a4:51:f3:32:74:30:eb:49:54:35:
                    f0:f3:7b:d2:0b:25:df:39:d4:d3:8b:f7:25:49:e1:
                    b0:c2:8d:63:a9:e4:81:8e:67:72:80:b5:5c:06:6a:
                    69:49:7e:6e:93:ff:fa:40:40:36:99:51:c3:a6:a0:
                    95:2e:9a:a3:04:a4:46:a8:cd:23:e5:43:f5:45:35:
                    83:84:95:e5:dc:b3:af:b2:63:d7:af:b2:18:27:cb:
                    05:61:8f:10:75:c3:9c:b5:1c:ff:54:e3:1e:d9:a5:
                    73:d8:bc:e8:d2:d3:fc:e1:0f:46:37:b2:d8:54:13:
                    d8:f8:02:bf:94:ba:8e:66:d9:4b:1e:1f:eb:f5:01:
                    20:99:9c:8a:5e:e8:23:83:ce:6c:6a:48:9d:cd:bd:
                    31:b5:b8:d6:fd:e4:3a:7a:ea:e0:9c:ca:35:ab:9e:
                    f3:a3:2c:be:29:17:35:90:ef:99:62:a6:bc:29:b3:
                    ca:8f:11:bc:3d:26:53:61:2c:28:0d:06:4d:9f:fa:
                    1a:48:1f:51:40:f7:db:29:82:81:66:da:c4:4f:f7:
                    8b:1c:bb:cd:ba:9c:8c:ec:bb:15:6a:c1:e1:11:f5:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:73:C7:96:47:4D:A3:8B:7A:58:7B:77:FB:1E:69:82:61:47:97:77
            X509v3 Authority Key Identifier:
                keyid:AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:82:7e:4a:f1:8d:04:9d:c4:b0:c9:33:49:58:99:a3:1f:00:
         f8:a8:12:d4:a7:e9:59:54:59:a8:a1:da:01:0e:e9:d2:ce:9c:
         09:55:aa:56:a8:96:a9:3a:3f:53:7c:55:2b:78:b4:2a:a3:52:
         9c:10:d2:47:cb:2f:15:ff:b0:07:96:51:c5:de:ff:8c:6c:08:
         a3:ad:0e:7f:98:3b:b5:42:9f:63:63:0f:1d:4e:bd:ff:43:cc:
         a3:83:63:be:af:fa:57:4b:20:ff:5d:4c:10:b7:f5:fa:de:bc:
         b8:14:0e:d5:90:0a:dd:cc:fe:96:74:2c:0b:0f:ec:89:16:3f:
         39:ae:73:ba:7b:41:48:d2:d2:5f:55:33:13:5b:c5:79:13:05:
         60:d6:44:40:4d:fc:7e:c6:2c:92:94:c1:35:d7:a3:c4:42:d8:
         4a:81:c5:2b:0e:f2:c1:fa:8e:c7:55:39:5e:44:40:fb:f3:bc:
         6d:26:30:e0:02:cf:3f:00:d5:dd:9d:a4:98:eb:8b:e4:e6:e4:
         64:70:0d:63:bb:c4:dc:84:aa:be:4c:99:9c:d9:c2:a5:88:a3:
         22:67:46:73:7a:35:7c:3d:55:42:2f:bc:77:9e:ad:df:fd:c1:
         1a:af:93:92:7f:c6:48:e2:68:ec:5e:ee:5e:b9:0a:52:e1:c3:
         9a:98:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:23 2024 by rpki-client on console-fra.rpki-client.org