Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File:                     QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier:          qujKIodCAmBhbo10Z3fAVFEM4TNzUjuqG5UCEjWpfvU=
Subject key identifier:   44:C4:A0:69:EE:F9:45:05:91:C2:01:B8:72:C7:1C:C3:DC:05:4B:0D
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer:       /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial:       0193549B7A964A3C75A9F63FDAB46211684C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number:          0E78
Signing time:             Fri 22 Nov 2024 16:01:35 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:35 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:35 +0000
Files and hashes:         1: 6rOvG-QDiRaqayPbCCbNKvjVBf4.roa (hash: DkpjblNYZ1cxvXK1J4G5wwqAQ4Zy+8Uy8eSjfyWbcts=)
                          2: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: Ni/djGYxkBviDjjkprSG+6GVpE5AIZRRHOYZMkTelt4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:7a:96:4a:3c:75:a9:f6:3f:da:b4:62:11:68:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
        Validity
            Not Before: Nov 22 16:01:35 2024 GMT
            Not After : Nov 23 16:01:35 2024 GMT
        Subject: CN=44c4a069eef9450591c201b872c71cc3dc054b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:3a:52:7d:58:97:43:75:96:26:34:73:1f:
                    b2:65:5e:f9:e2:30:96:ec:33:9a:a3:e7:1e:d7:57:
                    99:37:45:5c:1a:5f:2d:9c:b8:a2:74:b2:ce:91:93:
                    1e:9e:17:4e:53:54:e9:2f:e1:aa:06:78:9b:b4:bb:
                    cc:0f:12:0e:c9:53:ce:53:34:31:5b:30:be:19:a6:
                    21:56:0e:ad:8a:ab:74:1f:3d:af:b2:c6:56:02:36:
                    5d:18:99:3f:81:f0:4f:c2:ed:ac:dd:b1:9a:6c:c2:
                    ae:b3:b5:c8:d5:e3:44:06:de:43:59:7e:bf:ff:33:
                    04:69:3f:17:43:42:b8:12:78:6f:78:36:3f:6b:ff:
                    53:59:92:d3:4a:13:ea:5e:28:b6:7b:13:d2:d6:83:
                    d2:8a:ca:1f:91:fb:9b:7d:80:49:e1:52:73:7c:38:
                    0e:d2:95:22:04:bc:16:06:5d:87:9b:0d:b8:27:8d:
                    da:5b:a5:fa:53:f4:46:2f:1a:2f:09:15:0a:e8:29:
                    10:e2:04:7e:9b:92:9f:d3:50:d1:47:02:0a:11:26:
                    ca:52:56:1d:c7:97:fb:0f:11:ae:3d:f7:ff:3e:0e:
                    08:20:e0:94:5b:8f:33:b3:9d:98:af:0b:63:e1:a0:
                    3b:a4:1f:55:96:b6:66:4f:c9:39:54:30:22:ab:29:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:A0:69:EE:F9:45:05:91:C2:01:B8:72:C7:1C:C3:DC:05:4B:0D
            X509v3 Authority Key Identifier:
                keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:52:ca:24:40:60:27:6f:9c:d4:9d:d2:39:f7:5f:93:ef:
         66:70:c6:0d:e4:6f:e1:88:7b:0d:48:ca:75:20:47:82:18:02:
         bb:f0:01:47:bf:92:89:8f:2e:69:dc:6b:31:90:71:e7:64:f3:
         0c:36:3f:95:e5:e8:40:31:6c:f6:64:93:58:7c:4f:45:c4:5e:
         4d:d2:57:54:e1:c6:24:8b:cf:51:ad:66:72:5f:24:f6:5f:70:
         fd:f8:da:12:f9:be:09:e5:91:75:54:93:c9:c0:f6:11:4e:09:
         63:24:d4:42:3b:94:de:94:f1:7c:b6:0e:92:65:08:f3:3a:31:
         0c:51:ac:71:5c:34:de:53:08:73:a2:c9:ce:7f:88:29:27:96:
         f5:3c:01:31:7a:2f:23:0d:23:e5:2a:2f:00:07:07:2f:07:ec:
         53:44:24:7c:c0:b8:22:e0:73:bf:c9:5b:5b:2b:33:9c:e0:e8:
         f1:0d:58:e3:ce:75:71:ba:01:cd:3f:5a:4d:4b:32:28:16:0c:
         1b:d3:98:36:46:ab:53:fb:29:06:46:14:b8:1e:6a:6d:50:86:
         22:93:5b:8d:86:9d:a4:09:29:37:0d:f7:40:de:fa:40:3e:a0:
         f9:82:07:14:65:3d:db:1c:0f:49:cb:3b:ac:aa:0a:75:09:de:
         b6:39:aa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:24 2024 by rpki-client on console-fra.rpki-client.org