Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File:                     QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier:          kbLhZQjjkrGv/wPzqWFTxZtk2NTGKMVx8GmFygPQm8A=
Subject key identifier:   1A:4A:E2:1D:48:31:0E:93:7D:4E:EF:79:68:E3:9C:97:FA:46:F3:33
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer:       /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial:       01936AB492A8DF0128EF6FD7ABA8E5289BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number:          0C7E
Signing time:             Tue 26 Nov 2024 23:00:39 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:39 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:39 +0000
Files and hashes:         1: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: 9y3zpnVCYqrV4ZqfAjr3uoy6rY6EJB8MvihwbVTryZU=)
                          2: wLJxukTw44pz05fLwYwmNT-WvRQ.roa (hash: dHyhSlyfmpGiaTi4SPBAXON/ilyMaOFe/OsftTxOw6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:92:a8:df:01:28:ef:6f:d7:ab:a8:e5:28:9b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
        Validity
            Not Before: Nov 26 23:00:39 2024 GMT
            Not After : Nov 27 23:00:39 2024 GMT
        Subject: CN=1a4ae21d48310e937d4eef7968e39c97fa46f333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:86:4e:fd:cb:72:80:c6:19:11:13:c2:ee:
                    47:b4:a9:37:55:82:0d:8c:c7:d7:48:67:94:85:bf:
                    21:f1:c7:db:9d:b0:22:cd:29:b4:27:01:1c:7e:2d:
                    38:af:78:15:ab:37:64:46:15:0d:be:e8:00:41:2d:
                    f0:73:b0:cb:66:98:ea:39:ee:13:fb:2f:26:eb:c0:
                    fa:a2:fc:56:3e:fd:16:43:d1:62:41:a4:83:8d:1d:
                    e8:01:7d:94:1c:5c:83:c4:3e:29:87:d6:3f:f3:b9:
                    0d:31:29:9d:13:b4:d2:20:3e:46:4d:75:f8:b7:80:
                    fb:ca:76:17:a7:02:0f:84:be:54:9b:a9:23:69:7a:
                    72:1a:33:64:6f:75:12:4f:ef:4f:da:30:72:db:fc:
                    50:c7:d2:3c:01:2a:ac:9d:5c:e6:13:d8:51:64:1d:
                    b1:3f:09:50:37:30:2f:d9:f9:32:ec:78:26:66:c9:
                    71:b4:2f:46:77:4d:b7:c2:d7:30:f6:9b:bf:a2:47:
                    43:54:96:06:41:a7:61:c8:9a:d7:5a:e6:6b:73:88:
                    b7:03:43:b9:46:e4:0e:74:6e:00:fe:8f:0e:f2:f5:
                    db:41:51:f7:07:77:0d:e4:23:79:c0:22:01:57:a2:
                    69:d0:6d:08:72:6a:79:16:b3:19:46:b9:55:67:15:
                    52:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:E2:1D:48:31:0E:93:7D:4E:EF:79:68:E3:9C:97:FA:46:F3:33
            X509v3 Authority Key Identifier:
                keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f6:d6:c2:2b:40:a1:c9:d7:61:1b:c5:83:f5:cb:be:0b:2f:
         c3:1c:e7:96:7e:b2:bb:2d:ea:ee:32:77:16:42:1c:09:bf:20:
         3c:cb:3d:fc:cf:e1:39:46:7f:67:e5:03:3b:d7:a3:29:e7:5d:
         c5:49:f2:b7:e3:1a:89:7c:cf:a3:53:47:48:dc:64:73:97:79:
         0d:97:95:76:d2:e6:21:eb:57:b2:25:e0:6a:c5:9f:56:08:30:
         e8:52:6f:0c:d7:3d:04:51:2b:90:51:ab:8b:67:5c:cc:70:82:
         a3:69:73:02:47:1b:2d:8c:b7:a0:e8:06:b1:68:87:0d:0f:c9:
         b3:3a:52:b8:bd:08:fe:9b:e6:72:f1:c5:3e:8b:c6:c2:24:df:
         aa:f4:2a:51:57:e4:f9:a1:a4:9f:b6:01:a0:d4:24:7c:64:2e:
         a9:61:dc:e2:f2:ad:d3:3d:e4:7a:bd:77:90:b4:6e:dd:5f:e4:
         db:5e:a4:42:1e:de:62:8b:00:3b:c0:3f:3f:f6:4a:77:57:da:
         79:54:28:5b:e8:2a:e2:ba:38:4f:4c:a4:d1:44:93:36:f9:db:
         77:fb:5e:6b:f8:11:5f:54:6d:f7:4a:1d:ae:93:0f:10:96:fa:
         2b:02:0e:bb:85:f3:0b:a9:f9:f8:36:14:ef:2e:27:09:81:17:
         fc:57:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:22 2024 by rpki-client on console-fra.rpki-client.org