Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
File:                     QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json)
Hash identifier:          +rujiIdBK46AkK/+9rqbJ4ey5iZaC2W1k50uqyx75z8=
Subject key identifier:   8D:F4:4D:37:13:3F:CA:4F:E1:79:8C:5B:0C:B2:6C:C3:F0:96:00:45
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Certificate issuer:       /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial:       0193549BCD6E7DCA298903C920C64DD63AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
Manifest number:          09E9
Signing time:             Fri 22 Nov 2024 16:01:57 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:57 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:57 +0000
Files and hashes:         1: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: tACpIc6zcGpTg7B6Fuy5phO8N7Qo1e/yIIjvkDtX2Oc=)
                          2: zmZGG04X6iX6N5WaYt1WHi8mke4.roa (hash: ZOCFDx0qi0qhef+KErg+TtngEqEKkhrDP0X+6BvI1Kk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:cd:6e:7d:ca:29:89:03:c9:20:c6:4d:d6:3a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
        Validity
            Not Before: Nov 22 16:01:57 2024 GMT
            Not After : Nov 23 16:01:57 2024 GMT
        Subject: CN=8df44d37133fca4fe1798c5b0cb26cc3f0960045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:46:1d:15:71:e5:b7:1a:4a:ed:b8:a6:e1:
                    f4:55:77:be:2f:4a:46:e2:48:0c:26:5e:ac:a1:c2:
                    15:de:24:c1:7c:82:96:88:f6:bf:70:e5:f0:2d:f0:
                    62:c6:3d:af:ed:b9:ea:40:e2:97:f1:f7:a7:ae:fc:
                    af:8c:c5:1c:f6:03:e6:ca:56:f1:db:91:86:4e:c1:
                    e9:c1:67:98:6c:c0:78:c7:c3:ee:6a:ee:a1:bf:f7:
                    64:68:3a:80:b5:3e:92:05:b2:9e:bb:f3:58:31:aa:
                    cb:5b:f2:71:08:69:83:54:eb:cf:4f:26:5c:13:f3:
                    38:fb:d1:80:1b:03:d0:d8:b9:50:89:cf:54:11:7f:
                    7a:ee:b4:c9:f6:f9:5a:68:47:d6:fb:87:33:52:f0:
                    55:d6:e3:aa:c2:3b:55:5d:5a:5a:fe:7c:06:53:02:
                    16:19:e1:fe:d4:1b:63:18:84:49:6f:79:fc:d5:dd:
                    9c:89:ba:0b:d6:2d:76:2d:83:f5:ca:43:9a:e0:8b:
                    f8:db:c0:be:16:1f:a0:39:54:73:af:be:79:51:a0:
                    b0:50:76:a8:07:3b:ff:ea:c9:47:7a:84:a2:58:c2:
                    12:e8:22:86:f4:c2:fc:59:e9:c3:86:b2:14:73:95:
                    c7:00:0c:3c:4c:a3:de:92:a4:33:02:e4:b6:b0:cc:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F4:4D:37:13:3F:CA:4F:E1:79:8C:5B:0C:B2:6C:C3:F0:96:00:45
            X509v3 Authority Key Identifier:
                keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b5:31:cc:f8:8c:1e:97:aa:57:3b:5d:b7:03:a3:5b:17:a9:
         5b:13:ad:f4:f9:5f:1f:a3:64:16:bf:0d:f2:62:bf:a5:d7:7c:
         44:38:be:1e:56:46:f1:52:42:ca:cd:db:9d:53:50:33:d8:59:
         ff:e4:e6:d7:15:40:01:69:25:6e:93:04:de:5b:8e:7a:f8:96:
         7b:e1:f5:d3:0f:6d:93:d1:fb:a9:e6:52:6f:53:62:9c:38:31:
         ad:c4:c3:05:99:84:4d:10:8e:7b:9b:90:d9:ea:87:cd:82:19:
         5e:9e:25:04:e8:16:5b:56:e5:53:7d:1e:c1:6d:b7:b0:08:f0:
         58:75:52:ed:48:63:27:79:01:a9:11:31:fb:61:e5:04:67:41:
         a9:e3:56:33:ff:a2:a2:d8:d3:9f:4c:c1:1a:fc:4d:26:00:40:
         5b:65:eb:20:9a:f5:18:65:a2:1e:46:5f:42:ec:bf:23:ea:3c:
         2d:6f:43:05:1d:42:9e:f0:10:30:2b:25:96:76:19:75:e8:42:
         38:ff:b5:4c:c6:dd:27:6c:2e:7a:b9:a2:dd:27:c0:36:30:27:
         e0:81:62:52:f7:ae:4e:11:5b:b8:2a:d4:bf:bd:01:2b:ef:f7:
         4f:0b:66:0f:05:db:19:31:10:ff:6c:ed:a8:61:c4:d6:5f:f3:
         a3:b3:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:06 2024 by rpki-client on console-fra.rpki-client.org