Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File:                     qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier:          u5n4MJrV4P52W+gjY0uGpRpdX7B2+v+rWiZqHx5zSpY=
Subject key identifier:   C2:12:0F:8F:66:C3:47:6F:67:2E:0E:14:62:BB:F8:9E:42:A8:5A:8B
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer:       /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial:       0193553F09D3D34122F68AD9D215E0ECB2D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number:          1303
Signing time:             Fri 22 Nov 2024 19:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:14 +0000
Files and hashes:         1: oJtlSUklYwlcuIQQPn9xtxCqyFA.roa (hash: HYXPibD15zwOoE4+CcQ9qe6AUc9C3OIS0iXJP0me7ts=)
                          2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: a3sLCbcDrbK21T9elK90NT5yAyIHeN8F1ONoKM14l20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:09:d3:d3:41:22:f6:8a:d9:d2:15:e0:ec:b2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
        Validity
            Not Before: Nov 22 19:00:14 2024 GMT
            Not After : Nov 23 19:00:14 2024 GMT
        Subject: CN=c2120f8f66c3476f672e0e1462bbf89e42a85a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:65:cf:68:2c:dd:92:d7:af:e4:1a:8d:26:
                    88:f0:68:b4:9c:b4:5a:39:2d:02:83:38:a1:a0:35:
                    6d:56:3b:fa:5a:22:d0:a6:8d:e5:98:88:17:30:61:
                    e3:83:d8:29:ca:09:d7:9b:ac:84:f1:f1:9d:78:32:
                    37:98:cb:07:8d:4b:6c:d2:a8:a2:b5:96:ed:a5:0f:
                    ea:a4:31:6c:d5:b0:c5:21:fd:dc:22:af:cd:f3:28:
                    2a:f3:2c:02:32:7d:2e:45:9d:17:a1:12:94:32:2d:
                    9f:1c:84:08:07:0f:65:89:7b:04:42:04:c6:13:60:
                    57:cb:89:14:c2:96:10:4a:d5:4c:8d:ff:ce:c1:61:
                    da:2a:39:f2:21:cf:98:a2:d2:a6:97:60:a9:2d:f1:
                    61:cd:2d:61:14:b0:28:0f:93:e1:7c:42:7e:9a:cf:
                    b7:ae:77:dc:83:14:31:31:70:40:42:0f:05:e6:01:
                    33:11:a9:e0:25:83:89:ef:ea:03:43:d0:37:4f:e7:
                    55:cd:cc:08:b2:b9:c7:4a:84:13:f0:58:1a:21:a2:
                    e3:4d:57:58:03:1b:96:6e:8b:91:5a:7a:f9:9d:f0:
                    05:da:d7:2a:a7:f8:b7:ee:20:48:a0:9c:94:7e:f9:
                    f8:81:97:01:da:77:3e:74:c8:e2:cb:92:c1:97:99:
                    fc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:12:0F:8F:66:C3:47:6F:67:2E:0E:14:62:BB:F8:9E:42:A8:5A:8B
            X509v3 Authority Key Identifier:
                keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:12:b7:48:d6:98:2f:80:39:01:7c:31:5e:81:d3:b7:91:f9:
         25:c1:db:ac:09:d0:b9:5f:83:10:db:5f:55:80:22:67:51:65:
         89:ee:47:b4:34:b5:31:4e:ff:15:ff:38:35:09:ef:fc:de:9d:
         f2:cc:3e:af:1e:47:e7:83:f5:aa:c1:85:f0:2d:80:0b:98:b5:
         26:da:cb:4c:70:92:9f:dd:af:0e:c7:dc:76:73:df:ff:01:f7:
         ac:63:b8:19:2b:90:97:21:d7:5b:72:35:1b:cf:f0:99:d3:9a:
         10:17:46:c4:63:9e:1d:15:e1:94:14:4d:2c:63:58:8a:10:3a:
         9d:88:ab:66:4f:9e:0f:70:b3:d8:d5:95:df:f8:7b:7b:a9:e8:
         25:7c:4c:a4:ae:51:e6:7a:33:d7:5f:2e:5e:d3:31:d3:c0:0e:
         73:cc:d8:6d:ab:c2:f7:97:3e:ab:70:6c:5f:53:22:0f:50:e5:
         45:93:67:b5:11:16:09:e8:09:52:a1:7f:9e:ba:a6:07:5f:6f:
         26:86:8a:41:ae:32:d0:94:bf:6b:fc:ce:f3:62:5a:f0:b6:8c:
         9f:59:ca:d4:55:3f:37:b4:9d:28:ee:bf:8b:0a:85:91:17:ae:
         40:83:46:a5:fc:fb:56:6e:72:c6:92:9e:c1:ca:d8:8c:32:d7:
         a1:86:e3:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVPwnT00Ei9orZ0hXg7LLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmIyNDQwYTdjN2EyZGZjZjJlNDIxNmRhOGEzYmRlNjhi
OWI4OTgwHhcNMjQxMTIyMTkwMDE0WhcNMjQxMTIzMTkwMDE0WjAzMTEwLwYDVQQD
EyhjMjEyMGY4ZjY2YzM0NzZmNjcyZTBlMTQ2MmJiZjg5ZTQyYTg1YThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgdlz2gs3ZLXr+QajSaI8Gi0nLRa
OS0CgzihoDVtVjv6WiLQpo3lmIgXMGHjg9gpygnXm6yE8fGdeDI3mMsHjUts0qii
tZbtpQ/qpDFs1bDFIf3cIq/N8ygq8ywCMn0uRZ0XoRKUMi2fHIQIBw9liXsEQgTG
E2BXy4kUwpYQStVMjf/OwWHaKjnyIc+YotKml2CpLfFhzS1hFLAoD5PhfEJ+ms+3
rnfcgxQxMXBAQg8F5gEzEangJYOJ7+oDQ9A3T+dVzcwIsrnHSoQT8FgaIaLjTVdY
AxuWbouRWnr5nfAF2tcqp/i37iBIoJyUfvn4gZcB2nc+dMjiy5LBl5n8swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMISD49mw0dvZy4OFGK7+J5CqFqLMB8GA1UdIwQY
MBaAFKkrJECnx6Lfzy5CFtqKO95oubiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDIt
ZjJjNjdlY2EzZTViLzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDItZjJjNjdlY2EzZTVi
LzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRK3SNaY
L4A5AXwxXoHTt5H5JcHbrAnQuV+DENtfVYAiZ1Flie5HtDS1MU7/Ff84NQnv/N6d
8sw+rx5H54P1qsGF8C2AC5i1JtrLTHCSn92vDsfcdnPf/wH3rGO4GSuQlyHXW3I1
G8/wmdOaEBdGxGOeHRXhlBRNLGNYihA6nYirZk+eD3Cz2NWV3/h7e6noJXxMpK5R
5noz118uXtMx08AOc8zYbavC95c+q3BsX1MiD1DlRZNntREWCegJUqF/nrqmB19v
JoaKQa4y0JS/a/zO82Ja8LaMn1nK1FU/N7SdKO6/iwqFkReuQINGpfz7Vm5yxpKe
wcrYjDLXoYbjwA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:43 2024 by rpki-client on console-ams.rpki-client.org