Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File:                     qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier:          luYW2mzQXb2oQ4H2jfl4y1QqUWPpGvaeuz3m9DcjMcs=
Subject key identifier:   E7:77:50:51:53:D7:48:AE:9A:1A:4F:B1:10:86:4B:E5:0D:BE:F4:9D
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer:       /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial:       019356F7389EA6905832539B2ED69D6D31EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number:          088D
Signing time:             Sat 23 Nov 2024 03:01:02 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:02 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:02 +0000
Files and hashes:         1: ZjCGvlLkw2t_wLaqNJCYTKXL9hA.roa (hash: EWl148q0OfqpWzNpfLi+VIAjAgKEcWGhe27d2VIgcDI=)
                          2: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: W5UHQ5zzvEEr2sb5Sk/Y7UZG7bFxr5PqrkatIKhBYBA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:38:9e:a6:90:58:32:53:9b:2e:d6:9d:6d:31:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
        Validity
            Not Before: Nov 23 03:01:02 2024 GMT
            Not After : Nov 24 03:01:02 2024 GMT
        Subject: CN=e777505153d748ae9a1a4fb110864be50dbef49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d6:b9:90:ef:00:19:72:40:cd:77:db:96:b5:
                    53:71:a2:2a:2a:6c:c5:15:07:25:a4:cc:35:1e:ac:
                    14:ae:b9:f0:ba:7a:bf:64:e3:70:c1:e5:8a:66:50:
                    1e:6d:f9:c6:75:f5:ce:af:4f:d2:71:48:4e:a1:e2:
                    45:2d:5b:6e:e0:10:7b:b9:10:aa:f9:0c:3b:7d:36:
                    3a:b6:fc:60:29:15:7f:42:82:90:0f:7f:5a:2f:19:
                    c0:6b:d6:8e:ee:7e:7c:f4:6e:70:c3:58:b4:ea:dd:
                    5b:09:bb:d5:2c:1f:53:38:5e:8d:b4:40:ec:f9:a8:
                    f6:08:47:ba:42:a4:a3:e0:e0:0c:f1:52:9a:ba:98:
                    e8:00:b9:22:7c:d7:df:d4:b8:ad:59:52:89:63:7d:
                    fd:c5:81:84:f1:10:d0:a7:74:81:68:03:e5:a5:ac:
                    87:22:39:bd:be:d7:5a:01:f1:fb:e8:87:62:50:99:
                    65:a5:e6:34:67:d7:12:b7:73:c3:2e:47:1e:e2:06:
                    95:1f:86:47:8e:9d:c9:8d:59:42:ca:14:5f:7d:fa:
                    80:38:10:b3:98:83:77:28:07:73:a4:bd:a3:bb:61:
                    08:4f:d2:28:e2:d7:b3:d1:60:dc:fe:1d:cd:8c:f1:
                    74:ab:8e:f9:54:25:89:49:be:a2:7a:20:ff:75:de:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:50:51:53:D7:48:AE:9A:1A:4F:B1:10:86:4B:E5:0D:BE:F4:9D
            X509v3 Authority Key Identifier:
                keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:9d:cd:17:1e:87:16:46:aa:46:3d:e0:3d:9a:83:a7:1f:05:
         d1:3c:68:e2:53:a9:53:ba:0f:98:b1:99:5e:d8:6c:3b:83:cf:
         6f:32:6c:25:46:55:82:bc:0d:42:ed:37:ec:b9:4e:ec:27:36:
         a4:f2:a5:a8:82:a0:26:6e:d0:a2:f3:d4:6d:66:b6:b7:db:b1:
         9c:fc:46:7e:7b:94:9f:ac:83:e5:8d:c6:30:22:f6:ef:d5:f3:
         cb:30:44:30:ef:f5:5c:33:cb:18:6a:ae:03:70:a3:93:e1:ba:
         82:db:7d:c8:1b:d7:93:5b:37:87:18:bf:d2:04:de:f9:26:d8:
         c4:c4:b4:cc:b5:25:b0:26:f1:1d:49:92:d4:31:00:d2:1d:84:
         fd:3c:8a:10:de:32:f3:6c:81:a6:8f:b3:b9:5c:9c:df:90:d4:
         f8:e0:49:6d:50:c9:d2:c5:0c:c8:fb:a8:6c:bc:d9:19:10:90:
         0c:27:c3:37:b6:5d:1a:18:4a:f0:f8:cf:ac:0f:4c:a4:32:0b:
         13:6f:47:3f:0f:ca:23:4d:66:9a:3a:0c:44:32:e6:bb:7b:f7:
         80:b6:eb:43:c0:b5:7a:e4:ac:59:a2:44:c7:3c:b4:02:cc:b5:
         45:eb:fd:35:9d:70:69:76:fa:b6:97:9d:7b:4b:f2:c6:e2:8f:
         eb:55:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:01 2024 by rpki-client on console-fra.rpki-client.org