Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File:                     Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier:          lW+vKFD745uMnkFiU0z8f7NG5YtCdFNGgFSzCVEXXm4=
Subject key identifier:   14:60:C7:88:85:15:11:6C:78:88:7C:40:16:22:DC:FF:7D:DB:0C:E5
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer:       /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial:       019358791AF6076A50C8AB9C94FF263DB597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 10:02:31 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:31 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:31 +0000
Files and hashes:         1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: brd0o00AxrcA1lraPNLwB2PjzxPjWOdgj50nhThTxsQ=)
                          2: u5z9O7Zz-kokPqmRRThfu5AD5Ps.roa (hash: OSUc6I0QF5Vbn2BVPcBOj6e9w5PjOKAzkqQ8POb2QNw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:1a:f6:07:6a:50:c8:ab:9c:94:ff:26:3d:b5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
        Validity
            Not Before: Nov 23 10:02:31 2024 GMT
            Not After : Nov 24 10:02:31 2024 GMT
        Subject: CN=1460c7888515116c78887c401622dcff7ddb0ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:96:ed:49:76:6f:46:cf:6f:f5:21:8a:d8:
                    86:91:83:bd:a6:04:7b:27:df:03:8d:a5:40:6b:ba:
                    af:5a:a3:c9:27:58:70:3a:24:1e:a0:63:eb:0f:d4:
                    ca:35:54:d6:f4:c3:db:a3:cf:18:7c:1c:d0:ad:20:
                    f1:e4:83:c9:48:ef:af:8e:f0:b8:ab:61:35:ad:91:
                    68:f7:8d:a8:d2:01:6e:26:35:09:46:7d:d4:6b:21:
                    ce:c2:9e:b5:4e:cf:f8:f0:00:ee:03:ee:08:bd:50:
                    14:d7:47:b4:7b:6d:ea:b7:e9:bf:d6:6d:f7:9c:c9:
                    f8:1e:9f:d8:c9:aa:68:3d:24:5d:38:e1:39:60:5b:
                    5f:a2:49:69:00:6e:d8:fa:bd:77:ad:74:73:4c:a1:
                    64:c3:40:87:84:b0:ec:84:31:81:93:28:8f:70:75:
                    dc:0d:ac:c6:21:e4:39:cd:88:c6:e9:bc:53:c5:ec:
                    19:2a:39:e3:dc:4d:64:e6:e2:81:08:05:fa:d5:a2:
                    1d:f5:d0:bd:e6:a3:60:e8:fe:d1:3f:b1:4d:62:61:
                    07:06:77:f1:24:c7:99:c2:33:17:87:de:a7:d3:d5:
                    9d:f6:6f:7d:d9:48:82:6c:27:98:bd:60:19:7b:18:
                    78:ca:25:d3:1b:cf:95:56:5f:2a:d6:88:47:48:d5:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:60:C7:88:85:15:11:6C:78:88:7C:40:16:22:DC:FF:7D:DB:0C:E5
            X509v3 Authority Key Identifier:
                keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:38:be:57:32:98:f9:6c:44:d1:27:4d:6d:ec:0f:76:e3:6c:
         97:db:dc:d5:c2:31:ac:5f:d8:76:66:e5:ed:ff:24:e1:f0:4f:
         ce:07:ef:5f:69:7c:e3:f7:31:0c:f5:e6:c0:88:24:9e:b2:db:
         1d:14:38:f5:cc:c1:a7:0a:4a:fb:63:b4:19:e3:b8:cf:e2:99:
         e4:51:3f:58:c5:23:53:46:9f:87:a0:2a:46:70:2b:c0:13:98:
         f7:b3:01:ff:76:43:04:2a:af:27:fe:8a:95:6e:98:9b:cc:fc:
         78:0b:14:2a:c5:50:61:37:62:6e:aa:65:16:ae:8d:72:20:07:
         47:c2:71:5c:02:2f:3d:3f:e9:a1:3e:1b:81:75:19:4b:0a:da:
         19:ea:47:8c:af:32:19:a0:57:13:c9:43:d1:76:ba:89:2c:a6:
         df:dd:ce:f9:92:1a:f5:5a:0f:d1:77:3e:ae:9a:05:ad:a2:db:
         f0:71:cc:59:bd:29:d6:63:24:f5:f8:2f:e6:37:03:47:48:a2:
         24:45:df:22:d7:bb:fc:5c:57:f9:fd:2b:8c:57:3b:a2:be:b4:
         fc:f0:0b:cf:8c:37:23:ff:e1:61:17:34:6d:c0:5d:12:9c:dc:
         6e:bb:bd:11:22:61:ab:a6:97:db:33:95:36:64:49:2f:bd:b0:
         12:9a:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:34 2024 by rpki-client on console-fra.rpki-client.org