Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File:                     qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier:          T0z0Snyo2otgleCV1Q19dPSEJtIoLKXsOOo3aCTmI6w=
Subject key identifier:   49:25:08:CC:65:BC:CF:EA:90:8A:82:DB:69:F8:9B:2F:BA:DE:90:92
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer:       /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial:       01923AA83FF6F118B2939045B2B2BF80F747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number:          12E0
Signing time:             Sat 28 Sep 2024 22:02:37 +0000
Manifest this update:     Sat 28 Sep 2024 22:02:37 +0000
Manifest next update:     Sun 29 Sep 2024 22:02:37 +0000
Files and hashes:         1: 9BEEETKo1aN3TSL5pUaKdh8GnaQ.roa (hash: Ck4IhA/LVj6yeY7ypf62CEmT7z98j+tSvQrn7SZ/UfQ=)
                          2: DGd_nQA9s6gY7y5x6kYUhNc4dS8.roa (hash: p4/HEMZHHkoyE5xPXbF7RGfBm23kEjnk41tuDSFDOhQ=)
                          3: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: u3p1RJK8ByGcAcNTZ+KLA4vmNFKW62/st+Q1peqfLpE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a8:3f:f6:f1:18:b2:93:90:45:b2:b2:bf:80:f7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
        Validity
            Not Before: Sep 28 22:02:37 2024 GMT
            Not After : Sep 29 22:02:37 2024 GMT
        Subject: CN=492508cc65bccfea908a82db69f89b2fbade9092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:dc:28:16:e2:de:38:6b:c2:58:d8:43:83:
                    b0:bc:34:e0:56:8a:e6:0d:04:60:80:a0:ee:43:2c:
                    a7:9c:e1:70:4c:2a:af:3d:93:c1:77:f4:68:f4:d6:
                    06:b3:91:17:02:ca:c2:87:91:ec:4f:c8:24:8c:9d:
                    18:9a:1b:35:ec:ec:71:35:f4:a4:05:07:9c:e9:73:
                    05:54:f1:e6:87:23:3f:c0:04:c9:51:a5:27:29:01:
                    6d:30:1f:5f:c7:22:26:13:ad:9f:d8:c2:9d:aa:6b:
                    28:ab:f5:7c:39:19:e2:b0:8d:2b:be:8c:dd:95:6e:
                    19:a6:ef:de:c6:2a:04:f4:45:8c:70:1c:63:27:07:
                    bb:e4:c3:3e:f3:66:86:1b:ac:52:aa:21:e2:99:8d:
                    01:4f:98:f3:d8:a5:67:ed:a7:7a:a4:5c:5d:e8:85:
                    cf:31:25:71:f2:b3:ce:aa:2f:85:f9:4f:cd:6a:68:
                    e4:87:95:75:d1:b4:db:12:59:78:8f:52:f6:7d:d7:
                    3b:38:37:d8:f2:b4:ac:22:9b:10:1c:b6:e6:09:42:
                    8a:c5:9b:99:83:47:69:7b:9c:e6:82:37:a3:b0:d3:
                    4e:10:3a:b4:7a:fa:b1:a0:24:b5:50:5d:0b:43:e2:
                    11:4c:64:b6:4d:a1:6d:07:fd:35:94:78:8f:20:c2:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:25:08:CC:65:BC:CF:EA:90:8A:82:DB:69:F8:9B:2F:BA:DE:90:92
            X509v3 Authority Key Identifier:
                keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:3c:2a:88:b3:06:62:18:75:f4:ba:a9:74:0d:b9:e5:ca:a2:
         1b:0d:89:62:40:6b:a3:10:78:bc:86:1d:ed:ec:6b:54:99:02:
         8d:e9:26:2e:a5:ae:29:fd:b8:ae:ee:b1:ab:d5:f1:3d:2b:84:
         df:ff:78:5c:29:61:f0:2e:7e:7a:11:40:48:e3:06:ac:14:e7:
         de:c0:bc:3b:bc:31:2c:96:be:a2:59:ab:dd:01:b3:0c:fd:e3:
         d3:37:9c:f2:a0:87:d0:fb:5a:3e:7c:64:bd:3e:ed:8e:e0:ed:
         92:48:f7:a3:47:3c:cd:b5:d3:61:e5:f1:51:ea:4f:5c:74:54:
         2d:12:90:85:9f:48:56:eb:f9:fd:91:a1:b1:70:3a:a8:ef:45:
         0d:f4:bf:99:25:5a:22:cd:ea:ca:6a:a4:ff:c6:75:e8:07:50:
         54:c3:d9:0a:91:50:9e:81:1c:45:05:4b:2c:7f:57:11:da:87:
         05:77:3c:fe:d4:23:f2:42:a6:9e:73:6f:b6:18:07:9e:c7:84:
         7d:d2:66:8d:29:1a:8b:70:49:bb:7a:bc:51:28:d6:ff:b1:b9:
         10:97:fd:11:bf:63:c2:e0:c8:6a:0f:b6:27:b9:3c:30:33:aa:
         01:40:a9:69:9e:39:cd:5e:3b:7b:22:79:9f:3a:aa:6f:2e:54:
         c7:f5:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:06:15 2024 by rpki-client on console-fra.rpki-client.org