Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
File:                     qnARDTDVLoppaViLP2IUFrzfZEs.mft (raw, json)
Hash identifier:          FEg2aukg4/AQW+25M7AYrWutr6FGpj1kDLew5vLeMco=
Subject key identifier:   50:46:04:76:CB:92:0B:83:0B:CA:3B:F0:8D:1E:C1:FE:40:42:08:2D
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Certificate issuer:       /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial:       019355E3C62BB589D0A4C07CFA3410169EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 22:00:10 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:10 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:10 +0000
Files and hashes:         1: Qnq23wv6DoJv5KugvXMWtp_LhPw.roa (hash: SGnJmLHbkVgR4u5UetoIwP5TS7QIa2iqO6EY0luFmMw=)
                          2: TO9yaxWyrVivXtK2jROgIUKfquo.roa (hash: 3tUtXRpfp4dJE5QMDSJVNx8TAKQgBZnQqtPs36Kt+8M=)
                          3: qnARDTDVLoppaViLP2IUFrzfZEs.crl (hash: dICuOVpYIFv2e82DSUg7UpZ9wUX+M1mSj4S38UIHcOM=)
                          4: zLmRneftg7EdpYYdYq2fKxs_q8E.roa (hash: gNTa92St/389DotHM7vQx6e7pbDOYfgFoE5QgBsQX9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:c6:2b:b5:89:d0:a4:c0:7c:fa:34:10:16:9e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
        Validity
            Not Before: Nov 22 22:00:10 2024 GMT
            Not After : Nov 23 22:00:10 2024 GMT
        Subject: CN=50460476cb920b830bca3bf08d1ec1fe4042082d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:29:c5:b1:1f:27:6f:5b:4b:6b:bf:92:76:
                    b3:16:30:70:c9:33:db:35:d0:e0:93:e8:94:7e:b5:
                    ac:2a:9f:a7:24:73:0f:91:e0:25:f1:cb:f3:71:d1:
                    12:be:02:99:48:ed:b0:de:aa:5b:2c:2c:58:83:57:
                    c4:db:2f:a7:ae:70:c8:bb:95:04:f4:41:0d:e9:18:
                    43:f1:0c:0e:ab:b9:11:88:38:2a:6e:e3:0b:39:6a:
                    b8:19:ce:28:60:46:ec:f1:b4:ae:a3:d9:17:82:1b:
                    a8:f3:4a:62:02:80:ec:45:ec:bc:b1:ec:3e:df:a0:
                    1a:c1:63:f6:05:d6:12:f0:c6:05:18:ae:7c:2f:e6:
                    6c:ed:f5:04:7b:a7:6d:ff:8d:02:c1:e0:a3:2a:8c:
                    9d:7a:6b:32:e5:1e:34:e2:81:df:c4:b7:41:50:af:
                    5d:b8:9e:6f:78:ff:73:a5:17:eb:55:cf:b6:9a:e4:
                    f2:2b:14:66:c2:2e:95:ad:12:6d:eb:64:4b:a7:3d:
                    29:15:be:e1:71:b8:eb:e5:63:ed:2a:5c:ac:62:c5:
                    b3:c4:b0:c7:75:dd:21:71:72:b3:b9:f0:48:fe:66:
                    7d:5b:cf:2f:9c:15:a8:bd:4d:10:e6:b7:2b:f2:12:
                    8c:c0:a9:8b:41:3a:d1:b2:76:5c:7b:6a:92:59:db:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:46:04:76:CB:92:0B:83:0B:CA:3B:F0:8D:1E:C1:FE:40:42:08:2D
            X509v3 Authority Key Identifier:
                keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:67:e4:d6:67:07:a6:6e:ab:3c:f5:01:a7:a9:c3:da:bb:1b:
         0d:05:a1:81:b8:9c:bb:83:c4:6c:20:a6:d2:f2:db:9a:c7:a6:
         1e:ee:42:1e:b5:c3:a0:5d:1d:37:65:e0:eb:b6:fa:e9:ec:e7:
         62:0b:d0:01:8c:e4:a7:76:d2:6d:64:2a:b8:2c:56:c8:9e:a5:
         99:bb:10:f6:9e:06:62:b6:27:8b:c4:d2:d9:13:23:25:42:9e:
         80:76:53:aa:05:64:ef:60:0b:43:ab:8d:19:d3:b4:40:44:ca:
         21:5d:d5:3f:dc:31:9a:2e:cb:75:83:58:49:ce:47:11:97:86:
         48:63:09:1c:19:15:b4:98:00:b0:2a:da:e9:8f:a3:66:21:de:
         7d:2f:f5:ac:4e:60:ae:7b:8d:e3:2e:12:0b:07:fe:e1:e9:b5:
         e5:49:5b:7b:3a:a5:a0:c5:ac:79:de:50:18:f9:7b:71:69:95:
         74:57:fa:86:24:b5:b3:45:c8:f2:93:21:18:2e:50:e8:38:ca:
         e1:8d:b5:6e:d3:c7:e5:49:a9:fc:07:5e:21:a1:8d:56:7d:91:
         f5:35:7c:dd:01:ee:6a:b8:5c:ff:7b:2c:25:7b:a0:46:01:c5:
         c7:46:9c:47:a3:5d:e5:b6:bc:6b:04:94:ce:6b:56:62:df:68:
         b4:87:ed:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV48YrtYnQpMB8+jQQFp6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNzAxMTBkMzBkNTJlOGE2OTY5NTg4YjNmNjIxNDE2YmNk
ZjY0NGIwHhcNMjQxMTIyMjIwMDEwWhcNMjQxMTIzMjIwMDEwWjAzMTEwLwYDVQQD
Eyg1MDQ2MDQ3NmNiOTIwYjgzMGJjYTNiZjA4ZDFlYzFmZTQwNDIwODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolQpxbEfJ29bS2u/knazFjBwyTPb
NdDgk+iUfrWsKp+nJHMPkeAl8cvzcdESvgKZSO2w3qpbLCxYg1fE2y+nrnDIu5UE
9EEN6RhD8QwOq7kRiDgqbuMLOWq4Gc4oYEbs8bSuo9kXghuo80piAoDsRey8sew+
36AawWP2BdYS8MYFGK58L+Zs7fUEe6dt/40CweCjKoydemsy5R404oHfxLdBUK9d
uJ5veP9zpRfrVc+2muTyKxRmwi6VrRJt62RLpz0pFb7hcbjr5WPtKlysYsWzxLDH
dd0hcXKzufBI/mZ9W88vnBWovU0Q5rcr8hKMwKmLQTrRsnZce2qSWdsS3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBGBHbLkguDC8o78I0ewf5AQggtMB8GA1UdIwQY
MBaAFKpwEQ0w1S6KaWlYiz9iFBa832RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5BUkRURFZMb3BwYVZpTFAySVVGcnpmWkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mYjdlNjctNTQyNS00YzRmLWI0NmEt
ODI0M2FlZjZmZTVhLzEvcW5BUkRURFZMb3BwYVZpTFAySVVGcnpmWkVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9mYjdlNjctNTQyNS00YzRmLWI0NmEtODI0M2FlZjZmZTVh
LzEvcW5BUkRURFZMb3BwYVZpTFAySVVGcnpmWkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGfk1mcH
pm6rPPUBp6nD2rsbDQWhgbicu4PEbCCm0vLbmsemHu5CHrXDoF0dN2Xg67b66ezn
YgvQAYzkp3bSbWQquCxWyJ6lmbsQ9p4GYrYni8TS2RMjJUKegHZTqgVk72ALQ6uN
GdO0QETKIV3VP9wxmi7LdYNYSc5HEZeGSGMJHBkVtJgAsCra6Y+jZiHefS/1rE5g
rnuN4y4SCwf+4em15UlbezqloMWsed5QGPl7cWmVdFf6hiS1s0XI8pMhGC5Q6DjK
4Y21btPH5Ump/AdeIaGNVn2R9TV83QHuarhc/3ssJXugRgHFx0acR6Nd5ba8awSU
zmtWYt9otIft0g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:25 2024 by rpki-client on console-fra.rpki-client.org