Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File:                     qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier:          cCzHDbTnGeauNpIREOViu80PuhSgT+PmNciJ1wTaEAQ=
Subject key identifier:   61:2E:A9:35:9B:E0:1B:69:22:0E:6B:9D:A4:CA:A5:E0:10:17:4A:A8
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer:       /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial:       0193553F2A2F29D990C5332E13E64C27D42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 19:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:23 +0000
Files and hashes:         1: 1-HpsrpmMdTDHdfBKxbTpNc4byDw.roa (hash: Uphk+8aKqnGpFHYuk6i+WYE7+NxG7F7J9fYuqXCZa2M=)
                          2: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: MjFNqnEeeC7dUkahYdXAcB/i7GTOmSf5SlLTjaEfhwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:2a:2f:29:d9:90:c5:33:2e:13:e6:4c:27:d4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
        Validity
            Not Before: Nov 22 19:00:23 2024 GMT
            Not After : Nov 23 19:00:23 2024 GMT
        Subject: CN=612ea9359be01b69220e6b9da4caa5e010174aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:5d:20:48:b0:a7:45:fb:cd:a8:b2:03:06:
                    3d:a9:29:e9:96:b9:d2:2c:8b:32:02:70:59:56:f2:
                    38:57:74:f8:80:7e:d4:c5:1e:d4:02:82:a9:6a:6a:
                    de:e1:da:bd:55:39:80:ef:ef:4a:15:16:f1:9e:7b:
                    62:a5:54:ab:bc:a9:5e:71:ea:6b:18:b7:a3:48:2e:
                    0c:a7:da:e9:cc:ab:80:23:3b:38:6d:4e:a7:3a:b5:
                    8e:7d:1a:15:85:f7:e7:1f:16:fd:35:15:85:d9:84:
                    91:df:17:9a:c1:c3:ef:8c:90:9c:7a:f7:d9:82:0e:
                    8e:28:a5:c0:9a:9b:0d:18:40:bc:d8:76:d1:05:b7:
                    a7:4c:87:af:04:54:da:b3:0f:53:d9:b6:72:e5:aa:
                    10:8a:56:c5:fa:7b:fe:30:a6:68:e4:78:b6:fd:25:
                    2c:eb:6a:83:d2:0d:2d:ff:50:47:e8:ab:61:b0:12:
                    0a:44:98:27:76:56:94:5c:5c:f5:bc:a0:2d:2b:1f:
                    f6:38:19:6b:52:6a:95:65:58:26:7b:ac:3d:52:f1:
                    85:20:68:b7:54:dd:41:a6:f9:a0:66:1a:95:47:e1:
                    a9:4a:0c:71:e4:5f:20:84:28:ca:2a:56:83:60:c1:
                    c9:eb:ab:93:08:e9:23:14:a9:99:32:b4:77:08:52:
                    93:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2E:A9:35:9B:E0:1B:69:22:0E:6B:9D:A4:CA:A5:E0:10:17:4A:A8
            X509v3 Authority Key Identifier:
                keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:95:8c:aa:53:e8:ef:dd:ec:ea:7e:6d:f4:80:13:20:62:4a:
         24:19:40:5f:03:36:af:32:ef:85:73:81:1a:8f:85:3c:27:7a:
         b7:c7:40:f7:1c:6d:4f:21:01:7b:95:bf:1f:2d:93:75:bc:c8:
         fd:0b:e0:cb:f4:7d:3f:de:d6:c2:17:3d:0e:1e:5a:39:f3:fb:
         2c:85:a7:f9:f8:27:43:67:b5:14:bc:3b:f3:15:56:ca:1a:ab:
         df:26:6a:e0:78:1e:24:91:39:b2:34:7b:af:65:cc:bd:f7:66:
         8f:df:97:e9:41:64:ad:e8:41:30:52:6d:6b:69:18:42:92:dc:
         8b:df:9f:ed:ae:ef:60:a5:ef:81:9b:06:45:e2:53:89:5c:3b:
         4a:20:84:ee:d7:a8:19:ba:1c:dc:2f:a0:5e:d1:f6:51:7e:3a:
         77:23:af:ea:b2:26:a8:2a:a9:72:b4:d9:b2:2b:c7:86:1f:b1:
         8a:58:83:77:db:4e:11:fe:86:a8:38:db:a6:f9:eb:80:44:89:
         ba:72:7c:f3:ae:ab:42:95:c8:b7:1e:b5:de:df:16:29:ba:a5:
         72:05:9d:fb:46:99:bd:99:91:78:d3:11:a4:31:ac:91:5e:ae:
         00:e4:11:32:b2:54:1d:0d:20:c9:2e:d2:62:86:c4:cf:e8:55:
         53:67:6c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:08 2024 by rpki-client on console-ams.rpki-client.org