Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
File:                     qS3HvbydCXM23mJDtVCrFzN16jk.mft (raw, json)
Hash identifier:          qIh9VG69qmELFtcO0BCav5kaXObCQC5JHTV/1P9WYxM=
Subject key identifier:   6E:58:EA:C5:74:BD:96:0A:1A:CE:6C:4C:DF:D1:48:66:43:8A:4A:B4
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Certificate issuer:       /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial:       01935199A3798FF7247F509D09DC41FE5DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
Manifest number:          0A91
Signing time:             Fri 22 Nov 2024 02:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:43 +0000
Files and hashes:         1: 6g1CGOa_mnC4Uf3tzOgbb3BFaKo.roa (hash: OxAe5C1Rxvuyof2ydke4NtWJxHsAz4R+pI5U9Mij9iU=)
                          2: EpGe8SiyX5cy-ZZBFTZdiIQs3Pw.roa (hash: qRqccTgcv71wLMXE6MDtoNkxN6gPkPEnl9enw6ez/lE=)
                          3: OnMOQq4xudR6xbXWbPKyHBG6BYU.roa (hash: ix86ZPxbLYgBe8sTnBblxomJnEvCYCPhUZ0bD0h+7q8=)
                          4: qS3HvbydCXM23mJDtVCrFzN16jk.crl (hash: pLeXRX2kWv1cxOzekPaN+/jZhwdBMbOpOwR1XIr76mA=)
                          5: rkB4nGb4Ynwp24rpgwHkctXc9dQ.roa (hash: qT1kBsWBq0hKBdU8+mLYx8xcTUzsuxoxO0/FrEJrlWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:a3:79:8f:f7:24:7f:50:9d:09:dc:41:fe:5d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
        Validity
            Not Before: Nov 22 02:00:43 2024 GMT
            Not After : Nov 23 02:00:43 2024 GMT
        Subject: CN=6e58eac574bd960a1ace6c4cdfd14866438a4ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:6e:ac:e6:87:20:b4:e5:eb:ba:9c:7d:87:
                    e5:ae:e9:4e:52:36:bc:d1:e1:a9:43:c7:45:35:5f:
                    30:a8:2d:ee:b0:54:ee:2a:0b:c2:ca:32:58:da:52:
                    96:d9:f3:b5:2e:61:d5:3e:e8:38:44:6b:89:a3:73:
                    56:a3:ad:43:95:64:6d:38:b7:1c:fb:9c:45:7b:99:
                    4f:f3:02:3f:bf:1a:23:77:da:49:57:82:12:ca:a7:
                    7f:3a:87:9d:d7:ab:fd:3d:df:d2:69:dd:d0:20:a1:
                    65:4e:a3:70:8c:41:05:d0:2f:79:ce:9c:a9:69:cb:
                    30:93:09:93:40:8c:cf:e9:a6:2a:bf:f7:91:23:24:
                    99:af:cf:95:16:80:69:55:78:de:f7:e9:c1:f3:58:
                    e9:f9:0b:67:3c:93:36:45:84:e8:40:31:18:62:22:
                    a1:ec:c6:3a:69:9e:ba:d7:be:35:ed:2f:87:13:1f:
                    f4:0a:41:19:0d:85:59:ed:0b:5e:28:30:0e:85:bf:
                    b2:81:85:22:c8:ec:97:59:ef:bf:4e:e6:74:0a:8c:
                    ed:7c:c8:e4:b9:3a:79:ca:a8:38:10:9b:7e:d7:96:
                    ea:10:a7:20:c2:e8:38:b3:4c:92:87:66:67:47:67:
                    99:8c:4b:27:fe:02:cb:82:69:90:54:d2:c5:4b:97:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:58:EA:C5:74:BD:96:0A:1A:CE:6C:4C:DF:D1:48:66:43:8A:4A:B4
            X509v3 Authority Key Identifier:
                keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:14:62:19:e1:93:e8:f6:c7:d0:cb:4b:0d:14:36:b0:7c:83:
         e5:56:47:38:a5:c8:9f:f6:20:4c:79:18:58:5e:23:8b:c6:4d:
         3a:a4:42:f9:bd:78:a3:ee:bd:c1:95:cc:26:97:f1:c9:bc:ca:
         e0:47:a5:1e:46:0d:2f:01:c6:d9:d9:21:68:9e:91:e5:26:21:
         11:15:da:a9:9b:58:7f:66:d7:cf:ec:db:8d:7e:c4:59:1d:d4:
         d7:e9:2d:fe:70:01:04:04:b5:42:9c:a0:75:b3:40:59:54:31:
         8a:7b:92:09:44:50:1b:8c:9a:d9:2a:29:b2:ed:5c:1a:d7:98:
         4d:ea:e3:cb:26:35:1c:26:59:1b:81:4a:8c:91:54:59:51:a0:
         aa:67:6c:07:04:a8:93:f9:b7:eb:d0:56:c5:bb:31:ea:fe:b5:
         27:cc:ed:7d:e1:53:c5:ee:91:49:bf:dc:24:73:e0:e5:85:7d:
         04:24:d4:b4:98:e3:e8:ea:b0:90:db:28:3f:b5:e0:3b:01:22:
         2e:0f:bd:de:8c:5e:d2:34:0e:3d:46:e7:31:5a:d5:c4:19:2e:
         fb:3b:99:da:66:32:b3:39:2b:74:ff:5b:01:4d:0e:12:bd:a1:
         20:6b:da:5d:b2:a3:cd:b9:17:a5:85:52:79:07:04:dc:99:ce:
         de:da:a0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:39 2024 by rpki-client on console-fra.rpki-client.org