Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
File:                     _QsmgyFXCqBCF7NThHwQv3MSVLU.mft (raw, json)
Hash identifier:          xEaLyYDNNX1FptqJqWqcESi9Y4VSpqS7KbpUu8/qaUQ=
Subject key identifier:   0F:D2:84:7B:80:04:9F:36:54:73:5E:7E:2A:DC:0F:34:E6:EB:5E:D2
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Certificate issuer:       /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial:       019356F6BFFEF1F45566D0EF0068E91CECE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:31 +0000
Files and hashes:         1: _QsmgyFXCqBCF7NThHwQv3MSVLU.crl (hash: Gc4B9olnB52eKfuFq6ciYGJXorhPOdbePDxcnm1ec6Y=)
                          2: eCZBsP9agNs7B7UY1iicu9oAQ54.roa (hash: HowDrosF/aKtIYlVJaXPKtpZSpGx8HZI6rfIVUFcmSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:bf:fe:f1:f4:55:66:d0:ef:00:68:e9:1c:ec:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
        Validity
            Not Before: Nov 23 03:00:31 2024 GMT
            Not After : Nov 24 03:00:31 2024 GMT
        Subject: CN=0fd2847b80049f3654735e7e2adc0f34e6eb5ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:1e:b1:91:3f:18:09:f6:47:82:0d:5c:97:
                    af:8f:80:9a:b5:e8:6b:ea:f6:99:e3:cf:f1:74:22:
                    f5:ae:42:e4:fa:6c:54:00:55:82:17:da:5c:3f:fd:
                    91:c4:3a:04:6b:69:ef:c4:af:38:34:86:a9:10:a5:
                    f9:c3:84:a5:63:d3:95:8f:bd:5e:01:91:ba:96:e8:
                    70:0f:0b:4a:69:8c:95:24:1c:ac:0e:de:cc:36:5c:
                    b4:14:2a:7a:4e:e3:07:98:e7:1f:66:78:73:fb:d4:
                    39:22:93:f3:48:29:37:aa:c6:41:21:dc:14:22:08:
                    08:86:1d:ff:8a:b0:13:20:fe:0c:cd:ff:f2:d9:cc:
                    1d:ec:68:a8:e1:46:5c:d9:d3:75:10:2e:84:a7:4e:
                    d1:95:79:3b:fa:90:5d:68:b7:b7:22:30:f9:68:f2:
                    37:01:55:54:9f:8b:88:8f:56:56:a8:02:d4:ae:b2:
                    80:60:1f:82:a2:0d:ff:0f:f3:2b:5e:a2:3d:b7:cf:
                    e0:e1:0c:a5:b9:57:a1:d3:7f:8b:d5:18:f3:c0:75:
                    d0:2b:55:4b:4f:93:21:ce:6b:9b:e1:3b:f2:de:0b:
                    ac:af:04:c8:e2:84:e4:a4:f7:eb:a8:03:e4:f3:0d:
                    c3:e7:77:c7:8d:07:de:25:83:f6:9a:a4:08:6a:27:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:84:7B:80:04:9F:36:54:73:5E:7E:2A:DC:0F:34:E6:EB:5E:D2
            X509v3 Authority Key Identifier:
                keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:3b:77:22:73:d8:4b:a5:cb:7d:c7:ee:a6:06:b6:09:2c:92:
         36:21:e3:62:74:a9:4a:9d:2f:b3:b1:b5:8f:9f:d9:1b:16:d1:
         7c:d1:a1:f9:2f:4c:14:65:7e:50:3d:f0:3d:f9:5c:e5:21:3c:
         a3:34:2d:f3:46:c1:42:fa:79:18:96:48:96:54:a1:7f:5b:2e:
         a7:c0:45:12:aa:d8:c5:c9:ef:55:f8:ef:9d:7a:40:74:14:10:
         34:ca:12:b9:bf:bb:6f:d4:01:3c:84:08:d3:15:83:74:f9:f2:
         f4:3b:94:98:d3:15:b6:ff:b8:da:72:9c:bd:3a:cd:ca:ad:dd:
         7f:47:56:e7:57:11:a3:37:55:ff:c4:bc:80:f2:f2:b8:6e:75:
         70:7c:ff:ff:e2:14:66:94:8d:86:39:f0:76:73:1b:14:13:ce:
         af:39:d7:86:4a:a2:c9:50:66:ae:dc:0e:b9:2a:61:12:94:3c:
         bb:50:4e:0a:7f:74:63:47:47:0c:84:ad:73:77:62:5e:54:a7:
         7b:b7:43:ce:5e:1c:77:8b:67:9f:3e:88:ce:10:5c:20:3a:35:
         f4:d8:ef:38:4d:ec:f6:7e:46:3d:4b:b0:9a:c1:a4:d8:36:c0:
         12:78:ec:ee:8d:1e:ba:7e:15:6a:21:da:f3:72:f4:9d:ff:ba:
         d7:75:9f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:31 2024 by rpki-client on console-fra.rpki-client.org