Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File:                     qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier:          Qph/JBiW0cwCpqKk9L0aWDjSRPJJRxXr/pdnHhCZccU=
Subject key identifier:   92:DA:66:C5:53:44:19:C6:85:AC:DE:51:FE:F9:91:FE:12:D1:6B:0F
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer:       /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial:       019365FC7346B98634489DBC36CFAF04950E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number:          130A
Signing time:             Tue 26 Nov 2024 01:01:03 +0000
Manifest this update:     Tue 26 Nov 2024 01:01:03 +0000
Manifest next update:     Wed 27 Nov 2024 01:01:03 +0000
Files and hashes:         1: PjXKe2FdG9-RFDCI3YachS_tX1k.roa (hash: bMsUnyeu+xluIH9n7cJ+K5NOm1MHwtBa5yL3FSQ+JKg=)
                          2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: Y7AsgAw7oLxriQ5wN9ckZZfvrmz/C9viakwjvcv0G74=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:73:46:b9:86:34:48:9d:bc:36:cf:af:04:95:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
        Validity
            Not Before: Nov 26 01:01:03 2024 GMT
            Not After : Nov 27 01:01:03 2024 GMT
        Subject: CN=92da66c5534419c685acde51fef991fe12d16b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:10:40:10:03:03:a5:67:1d:f7:18:74:6b:34:
                    7b:fa:fa:6d:66:c6:b7:b3:65:c4:38:0e:4a:c2:1a:
                    7d:e6:e2:7d:a4:e4:9a:19:a7:13:2c:c2:dc:61:5d:
                    40:37:5d:dd:98:77:20:07:14:3f:64:e6:09:10:95:
                    b8:cc:14:ee:d3:da:66:c1:7d:67:65:e0:fe:e8:74:
                    c7:4c:2e:21:3d:aa:9c:b0:72:11:4f:9c:4f:9a:02:
                    8c:a8:08:07:d1:28:a2:9c:02:01:36:54:a2:0c:2a:
                    63:4c:27:74:cd:59:34:67:20:70:32:2f:c2:2e:f1:
                    0b:88:53:ac:37:13:22:f2:3c:93:65:c2:92:b3:e0:
                    ae:7a:15:89:af:61:f6:ff:7d:19:2f:19:f9:5d:a9:
                    5b:b1:cc:18:8b:98:84:70:03:cc:6d:ae:2b:f8:04:
                    e4:be:ed:ff:26:7f:91:e1:c3:02:22:a5:6a:27:0f:
                    3b:70:3e:0f:a4:8c:4d:b7:17:b0:b2:f7:f5:f0:f0:
                    2d:84:ec:a3:57:7e:03:45:53:af:c0:c0:50:e2:fd:
                    c3:d3:1f:d4:20:60:32:81:aa:3c:c1:e8:80:0d:75:
                    2a:d0:ae:58:1c:2f:97:f9:8f:fd:b5:21:4e:9f:26:
                    92:b1:b2:19:25:03:ad:48:ac:8f:67:49:91:23:7a:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DA:66:C5:53:44:19:C6:85:AC:DE:51:FE:F9:91:FE:12:D1:6B:0F
            X509v3 Authority Key Identifier:
                keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ec:3e:e4:01:6c:56:37:12:a1:c8:8f:21:6c:8c:ad:30:b7:
         0b:e8:16:9c:de:2b:88:1a:de:45:2f:f5:ef:43:b4:bf:05:e0:
         3b:29:d1:f4:4d:d1:b8:2f:b1:8c:88:1d:da:80:3d:3d:dc:5c:
         64:24:99:4d:98:67:0c:b8:5f:6d:49:b5:79:32:dc:e0:1e:01:
         01:4f:84:82:ce:f6:09:9c:9c:e4:6e:d0:fa:74:b7:67:98:53:
         f3:98:d6:66:74:e0:a6:3d:4f:71:b6:0a:13:58:16:dc:61:03:
         06:fb:b9:96:47:1b:26:66:96:4d:e7:35:da:d9:bc:51:03:ca:
         7f:28:0c:e9:ad:4a:bf:6f:59:53:b6:10:31:db:54:ac:77:56:
         6b:1d:ff:56:58:9a:e9:b4:51:57:8a:eb:82:49:4f:91:a0:38:
         1d:8d:52:51:bb:9c:62:9c:17:26:37:f9:51:4f:f2:a8:ee:9f:
         9e:15:c7:75:b6:bd:fa:34:74:67:72:44:32:15:9d:1e:83:ea:
         cf:d0:e6:7b:1c:e9:f4:bc:7d:e7:89:75:ff:4f:14:f1:9a:74:
         0b:f6:d7:fc:15:a4:83:98:36:3d:a8:e1:0d:fd:ef:48:f6:b4:
         5e:d5:e6:0a:06:93:00:ca:23:f3:6f:32:44:4e:1d:ce:a6:63:
         31:a9:97:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNl/HNGuYY0SJ28Ns+vBJUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVlOWRhMjIyNzM0NWMxOGFiZDdlNzUyNzJmODFjMjli
MzBkMWIwHhcNMjQxMTI2MDEwMTAzWhcNMjQxMTI3MDEwMTAzWjAzMTEwLwYDVQQD
Eyg5MmRhNjZjNTUzNDQxOWM2ODVhY2RlNTFmZWY5OTFmZTEyZDE2YjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xBAEAMDpWcd9xh0azR7+vptZsa3
s2XEOA5Kwhp95uJ9pOSaGacTLMLcYV1AN13dmHcgBxQ/ZOYJEJW4zBTu09pmwX1n
ZeD+6HTHTC4hPaqcsHIRT5xPmgKMqAgH0SiinAIBNlSiDCpjTCd0zVk0ZyBwMi/C
LvELiFOsNxMi8jyTZcKSs+CuehWJr2H2/30ZLxn5XalbscwYi5iEcAPMba4r+ATk
vu3/Jn+R4cMCIqVqJw87cD4PpIxNtxewsvf18PAthOyjV34DRVOvwMBQ4v3D0x/U
IGAygao8weiADXUq0K5YHC+X+Y/9tSFOnyaSsbIZJQOtSKyPZ0mRI3rTSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLaZsVTRBnGhazeUf75kf4S0WsPMB8GA1UdIwQY
MBaAFKqF6doiJzRcGKvX51Jy+Bwpsw0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMt
NzYyMGRiMjc5OTYyLzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMtNzYyMGRiMjc5OTYy
LzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuw+5AFs
VjcSociPIWyMrTC3C+gWnN4riBreRS/170O0vwXgOynR9E3RuC+xjIgd2oA9Pdxc
ZCSZTZhnDLhfbUm1eTLc4B4BAU+Egs72CZyc5G7Q+nS3Z5hT85jWZnTgpj1PcbYK
E1gW3GEDBvu5lkcbJmaWTec12tm8UQPKfygM6a1Kv29ZU7YQMdtUrHdWax3/Vlia
6bRRV4rrgklPkaA4HY1SUbucYpwXJjf5UU/yqO6fnhXHdba9+jR0Z3JEMhWdHoPq
z9Dmexzp9Lx954l1/08U8Zp0C/bX/BWkg5g2PajhDf3vSPa0XtXmCgaTAMoj828y
RE4dzqZjMamX/w==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:14:37 2024 by rpki-client on console-ams.rpki-client.org