Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
File:                     qqthEeAEwqBE8Wi40oJzz2dE86g.mft (raw, json)
Hash identifier:          VJEh1CX2iJT92vYTEajODD6v3NanveTJymefFl1GpXg=
Subject key identifier:   5E:36:8F:F9:64:83:93:54:E5:40:66:3A:F3:49:C7:8B:FC:E1:B9:22
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Certificate issuer:       /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial:       019355E42EDB1462904AAD8A7AE72CCACC3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 22:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:37 +0000
Files and hashes:         1: 1-cAkiMKkhCBK3XaB2OIp80BtBr8.roa (hash: Q3aZVuoyBjYxoICNJvnGAVN8NK6bWrTBQefMg2yxJWM=)
                          2: 3wY-hrQIzTr97RzYdkoioHMunp8.roa (hash: ceNAtP0jh+MQzbRfrmE7ZhsXbLtPk8qwTTsnuRYbKCk=)
                          3: 9_83djMRpTb-ez3oZqaG00v4PQM.roa (hash: ZtrkrMNJa4IzxViWHSt0lnz/8x9hKzdTCBt3DpwjdiM=)
                          4: E7DYYxKISUVbfuceOOQunjtypnA.roa (hash: sWcn0bxF4NA60GzuOXxWvNY2kz1cBGrzn/RTdyb0P7Y=)
                          5: IhaLf8FMgMeXAzDcxPWZE58neMQ.roa (hash: 0ZltV+x4pUuiHaZ+lMR1SLb2X9Dq+eH4rLWb3H04aDk=)
                          6: KGppzkyUQEhSxv_6lrvH7UK6abY.roa (hash: Y5+iH7b4Pavmuq38O8738V2sJ10hyGkbIrw+xnvSOwc=)
                          7: hSbc4PwY-BshQfEmID_l75pdDQM.roa (hash: bl5WGqYVUpIejA9BRWTfEuTu3J5iUH1matNZOw3BznM=)
                          8: qqthEeAEwqBE8Wi40oJzz2dE86g.crl (hash: +DS9mPFSBL2t4T6V8N3iICt3QbEHx8iPTRXeoll7+3E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:2e:db:14:62:90:4a:ad:8a:7a:e7:2c:ca:cc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
        Validity
            Not Before: Nov 22 22:00:37 2024 GMT
            Not After : Nov 23 22:00:37 2024 GMT
        Subject: CN=5e368ff964839354e540663af349c78bfce1b922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:56:c9:72:0d:4c:87:9e:0d:43:01:e1:2f:
                    d9:c9:d2:b0:3f:f9:b1:d0:a6:2f:66:12:b4:2e:05:
                    f7:47:9e:97:fb:11:74:44:26:cc:dd:40:ef:75:14:
                    8a:6a:0f:b7:bd:6a:29:d5:ae:85:76:8b:c0:10:2d:
                    eb:a7:8f:d4:73:f4:ef:03:01:61:31:25:c6:d7:dc:
                    2e:61:d1:02:f0:eb:bf:78:69:67:06:4a:0d:3f:27:
                    e2:fe:f2:5c:a9:36:86:34:bf:9e:65:8c:31:2c:52:
                    52:70:e4:32:13:c7:7a:bb:79:e2:7e:20:4a:35:6d:
                    f4:82:33:da:97:05:be:9e:74:7a:43:06:14:9f:43:
                    89:cf:1a:0c:3e:4f:e9:e4:da:96:fb:1a:41:13:98:
                    ff:4b:44:59:d8:ff:aa:95:3d:06:3c:00:26:b4:7f:
                    90:4c:76:06:96:86:62:03:4a:d0:02:ad:3a:62:99:
                    33:59:96:ce:a0:1a:92:11:b0:d6:08:de:05:cc:30:
                    1a:9d:2d:f6:8e:9e:42:84:5e:fb:6c:2c:cd:66:f6:
                    34:7a:e3:31:f5:bb:73:e8:e4:f0:11:88:27:8f:be:
                    77:84:d8:a5:39:95:de:78:ec:67:48:c1:b8:c2:5a:
                    81:ae:1e:17:b9:6e:5f:30:42:7c:bb:80:99:73:69:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:36:8F:F9:64:83:93:54:E5:40:66:3A:F3:49:C7:8B:FC:E1:B9:22
            X509v3 Authority Key Identifier:
                keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:10:b1:12:52:4c:bf:9f:07:fd:8a:0f:71:3b:41:97:2a:30:
         eb:63:10:fb:d9:45:68:6c:ec:74:3b:60:55:bc:3e:f9:f8:a6:
         7c:a9:e2:46:1b:af:bb:31:8f:37:a3:39:bd:e3:87:bb:f7:49:
         8e:48:95:6c:3f:c7:d7:aa:6e:33:40:72:fc:a1:c8:e1:48:08:
         d3:42:07:3d:47:34:23:b5:ef:5f:d1:7d:6e:c1:0a:7d:8b:70:
         d0:98:e0:fa:f0:0d:e6:cd:d0:4b:13:35:cb:b5:42:3e:8c:11:
         17:9f:dd:f9:d9:df:14:0a:e2:27:08:26:65:bd:5a:14:0c:2c:
         f0:eb:91:bf:73:e5:0d:a3:f8:24:36:b2:47:e7:06:ff:a4:9a:
         90:17:53:c3:6b:06:6d:2c:1f:4a:cb:ac:ac:90:d0:d5:dc:33:
         45:45:70:25:cb:87:8e:3c:b9:49:f8:af:da:eb:85:52:e5:6e:
         02:ba:8e:33:85:33:b8:4c:19:01:6a:72:3d:a9:57:4c:b8:e2:
         d4:f5:f8:0e:d3:37:1b:e0:09:21:a8:91:23:7b:26:d7:6f:68:
         90:75:22:ab:45:b2:6c:7e:89:d8:d9:e1:b0:bf:cd:ee:d5:5f:
         1c:7c:45:a3:ce:5a:d3:ab:90:f8:6c:9e:63:7b:43:91:52:67:
         79:51:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:10:53 2024 by rpki-client on console-ams.rpki-client.org