Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
File:                     qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json)
Hash identifier:          nCew+dJ6XBsIqBVUV8GH428r+Fjf1yk4T2PqbcAyvCg=
Subject key identifier:   C9:64:70:E7:A7:F7:8D:7D:39:13:3C:91:D0:0F:27:28:0B:9C:3A:AF
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Certificate issuer:       /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial:       019352071E2664C111A93363F75588B5DD82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
Manifest number:          07F0
Signing time:             Fri 22 Nov 2024 04:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:18 +0000
Files and hashes:         1: 5Q07-loC8Yo_46xHmztaIrZFiKM.roa (hash: hIzc9IF421BMYwUUnKbBK9/WCdBWd18li2W89Ps53Js=)
                          2: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: gv5EMbVBe+xSvTKgF4pzLojTdwZSNfp8BAyEyY3udkI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:1e:26:64:c1:11:a9:33:63:f7:55:88:b5:dd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
        Validity
            Not Before: Nov 22 04:00:18 2024 GMT
            Not After : Nov 23 04:00:18 2024 GMT
        Subject: CN=c96470e7a7f78d7d39133c91d00f27280b9c3aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:c3:76:ab:63:5b:4e:c4:1a:1f:5a:d2:34:
                    3d:63:39:c6:e8:41:c7:04:51:14:02:4b:a6:9e:f3:
                    2e:0b:fa:1e:30:02:35:98:67:5e:48:ea:2c:e8:35:
                    52:61:0f:b0:ed:c8:35:d6:c3:8b:ef:2b:c7:41:95:
                    b6:7b:e9:f5:6a:7c:33:da:7b:73:9d:4b:88:94:64:
                    3b:ed:fc:c8:27:65:64:39:9e:05:7c:f8:6e:eb:e6:
                    ad:21:f2:9e:bd:14:ea:6f:41:ba:22:2a:f0:04:e1:
                    9e:18:b9:85:34:62:25:7f:d3:4f:c9:7d:6c:b7:ba:
                    1a:1a:17:ba:19:ff:bb:71:3e:34:aa:5c:57:7a:df:
                    07:71:64:87:a7:8a:56:b8:9d:44:ac:ed:a0:5c:b7:
                    15:34:b7:12:28:18:d5:6d:6a:20:35:46:1a:f1:e3:
                    27:30:39:c0:ee:10:99:3d:61:cb:61:3a:b2:7a:86:
                    2a:d4:c9:21:59:7c:4e:f7:9a:ac:71:4f:c5:f4:38:
                    77:f2:3e:f6:cc:0e:4e:c3:4a:e1:dc:0b:dc:e5:15:
                    99:21:91:81:0f:00:75:89:06:07:ae:4d:08:8a:13:
                    cf:0f:34:f9:2d:ce:02:15:b3:58:ca:b5:0b:f6:ec:
                    54:a9:98:54:8e:79:2a:23:fa:31:55:9f:ee:b1:d9:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:64:70:E7:A7:F7:8D:7D:39:13:3C:91:D0:0F:27:28:0B:9C:3A:AF
            X509v3 Authority Key Identifier:
                keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:a8:03:5b:37:fa:ce:d8:6d:57:1d:e0:a4:aa:78:d9:c3:
         dd:ab:0a:8f:7c:fe:be:a4:d0:e5:64:87:c4:d3:d7:e6:2a:b7:
         3c:28:67:67:e6:39:c4:1c:6f:a1:75:e2:89:d1:03:0d:ba:40:
         32:ad:1d:6e:55:1f:3c:2a:7d:0d:c1:c4:b7:43:08:58:06:90:
         20:83:ed:9e:94:d9:d7:d7:99:61:53:88:65:af:a7:d4:11:00:
         06:07:b5:ee:72:ac:03:a5:2b:55:0c:71:fa:52:c2:33:c6:ca:
         da:d5:33:d9:82:76:fa:df:12:64:d3:7c:d5:2c:f4:11:bd:f6:
         38:58:dd:25:75:dd:ec:7c:87:db:47:2e:d8:68:66:da:70:42:
         77:93:31:28:52:81:99:70:96:72:32:28:cb:67:26:b1:7d:9a:
         05:00:da:eb:47:72:32:e3:53:98:82:ef:af:c5:68:6f:bc:8f:
         fc:af:0e:ac:d9:c7:79:af:19:16:6a:55:68:11:5e:78:22:a8:
         cf:1d:f0:a7:b5:09:87:1c:90:b4:c1:b7:ba:a0:3f:b1:ce:f1:
         2d:e5:00:09:a8:7e:ee:cc:48:5d:e7:7f:a0:79:31:3a:49:aa:
         a3:51:fd:61:8e:05:d3:89:cf:2f:e6:99:22:77:a0:a6:ab:ee:
         a6:16:1b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:52 2024 by rpki-client on console-fra.rpki-client.org