Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
File:                     q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft (raw, json)
Hash identifier:          Rh++52g0IDdff8VLCBmDE4GhZMcVzNjec8i94Suzr9k=
Subject key identifier:   F8:8F:4B:5A:3D:D3:50:3B:A8:A6:C7:91:67:58:2E:C4:50:62:B2:43
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Certificate issuer:       /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial:       019364443EAD7C1DB4170A2ED97478A6EFE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
Manifest number:          07DE
Signing time:             Mon 25 Nov 2024 17:00:14 +0000
Manifest this update:     Mon 25 Nov 2024 17:00:14 +0000
Manifest next update:     Tue 26 Nov 2024 17:00:14 +0000
Files and hashes:         1: I1U-6aSOTWLBVgHx0hOJ1qtko7o.roa (hash: noaHGgBGnHWmVCJCAnKWph7dPLV9cU70lHDLDny4dL8=)
                          2: jml-I2K61BTAdNBiKV2UEirjgmk.roa (hash: C8G/CF6bKvK7bamIrbxc4T8rrkwj+xuA2PX6HVDAaog=)
                          3: q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl (hash: JwI5VcyriggMW63J1xxLivGXLjXkA+jLS4TTzHpzt3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:44:3e:ad:7c:1d:b4:17:0a:2e:d9:74:78:a6:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
        Validity
            Not Before: Nov 25 17:00:14 2024 GMT
            Not After : Nov 26 17:00:14 2024 GMT
        Subject: CN=f88f4b5a3dd3503ba8a6c79167582ec45062b243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:35:15:d5:4e:8e:81:1c:5f:7f:25:bf:07:
                    30:9f:ef:2c:5f:96:d1:62:6e:a0:43:c6:6b:ef:04:
                    99:a0:2e:ee:dc:1b:59:1b:b4:87:50:18:1b:e6:dd:
                    eb:3e:76:cd:f5:d3:2c:08:3b:62:6c:06:2e:51:ed:
                    02:f2:65:c3:2d:13:10:b9:4f:fe:8a:98:bc:d2:d1:
                    4a:60:70:25:ac:78:ef:62:3b:0a:dd:42:57:24:b0:
                    a4:17:75:1b:65:1f:43:a9:4a:47:e6:43:bb:6e:1b:
                    4e:40:b3:b5:ca:91:3a:c8:22:27:46:d4:db:dd:0d:
                    83:de:b4:8c:3f:8f:9f:02:be:dc:65:05:c7:bf:a8:
                    f6:34:15:92:73:bc:f6:d2:a6:62:da:bc:f2:7d:1d:
                    50:9d:f5:06:ad:14:60:aa:cb:2a:c6:c8:ad:d3:76:
                    b9:f8:b9:3c:e6:c9:67:b9:b7:f9:77:5b:ef:6f:49:
                    28:83:c7:34:0b:19:43:ce:2c:83:61:7d:6f:0c:be:
                    97:b7:90:23:6c:b2:0e:65:20:f1:c2:b6:36:6f:ab:
                    cc:c3:6c:2a:c8:75:cd:46:a0:49:7b:a1:a1:68:48:
                    91:84:3b:fb:34:bf:99:c8:1b:3c:13:1b:f6:97:08:
                    43:5a:a2:77:41:74:14:6d:a0:e2:3a:a3:be:04:a8:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8F:4B:5A:3D:D3:50:3B:A8:A6:C7:91:67:58:2E:C4:50:62:B2:43
            X509v3 Authority Key Identifier:
                keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e7:08:8f:c7:67:7d:4b:72:f9:b4:5b:2d:1c:f9:74:d6:0c:
         f9:f7:2e:0a:b9:75:cc:3d:98:05:82:0f:96:df:94:d9:7f:8f:
         77:2b:77:9d:67:cd:01:37:4c:4c:85:b7:40:bb:a0:a6:0f:bd:
         36:4d:c8:a5:e4:df:3b:e0:7a:2c:15:28:18:62:ff:7c:2c:c4:
         ee:05:23:62:6f:c1:b1:5c:d9:5b:33:69:8e:42:31:99:1d:86:
         cf:03:44:a6:cd:ba:8e:db:69:47:a6:8a:3e:1a:5f:b2:b3:3e:
         15:75:bf:86:19:2a:c1:83:3f:f3:5c:b1:d4:09:0c:bd:d2:13:
         2d:a4:98:08:33:27:38:df:e6:c9:4f:93:0a:2f:ca:97:55:2d:
         e9:a4:58:60:4f:a4:97:bb:a6:e9:85:15:8f:5b:42:90:13:17:
         68:94:85:ee:af:45:4a:60:31:5f:af:ff:ef:8d:4d:52:13:d8:
         92:df:a1:af:cb:ad:83:df:a9:a4:2b:85:ba:49:33:45:77:be:
         fc:d1:6a:d6:5b:e6:44:46:aa:9f:dc:ce:19:c1:1f:c3:6e:8d:
         26:b5:84:b1:a2:5a:1b:3d:1e:cd:cc:cc:5a:d0:8d:8f:b0:6d:
         15:87:cd:f1:2f:f1:15:c0:74:44:cb:7d:78:80:64:65:2b:f9:
         84:77:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:03 2024 by rpki-client on console-ams.rpki-client.org