Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
File:                     MQsFJRN4mUz6gIjSO27u1Onmqwg.mft (raw, json)
Hash identifier:          nOCwkSTw3pDUHn3FCN4BoX/vfncbQa+YJjR8/ZK1KSw=
Subject key identifier:   D1:96:61:1E:BB:A7:56:9A:F8:7A:7F:43:DF:26:4C:15:89:C9:37:F1
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Certificate issuer:       /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial:       019353F578EB0002E841BACF44C4A3D78436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
Manifest number:          0AB0
Signing time:             Fri 22 Nov 2024 13:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:16 +0000
Files and hashes:         1: 4EXCVZD6C9Q7Wt8T_H8r5yR3g_A.roa (hash: xxBuCQi+DC79kZ0AmOrMFZc2PUXdFYmBWA6schKqzPQ=)
                          2: Fm7_jeD2Uvx6-nqyjemDWPtp0Vg.roa (hash: eOQespAPfub1ImVA4DmCM904Nt/7hIYmJQ0eE47qF6Q=)
                          3: KZWaFU6hQZsXgpYdfa4Re1vcLpI.roa (hash: 7oHShj7KLwvQSwWn7J3IkAoat9HEol+MpbrllJRGeHk=)
                          4: MQsFJRN4mUz6gIjSO27u1Onmqwg.crl (hash: 9BIsJ3mjtILkPsIjuofZHXQElKorYphDsVHELvGeo94=)
                          5: U931EhvuQISagVxE_aFPb-sTShE.roa (hash: PZtSJLp5gBZApZqYYiVRBzhGlw8LfEFUxs3Ixe6+g5Q=)
                          6: YttsS37YQPuR2CIPOiyxKeUS1nE.roa (hash: C11X+Mdgid9kb0w3F4Sh8rqhEsW+WHO1H540j+O0XCw=)
                          7: q_ZmpDwtjZmC_Fn-ovfVro2pM90.roa (hash: 8MsN0k4U3Qva1FppUGyxWwRIBavmNPQGlQM1IiJViNI=)
                          8: ya4I2oit5Ql7746tNVY3wVkI2Yw.roa (hash: UoAK/lGdT/OZcG2WP0u+o0g9cgnW6nrpGjaN0M7ctZE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f5:78:eb:00:02:e8:41:ba:cf:44:c4:a3:d7:84:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
        Validity
            Not Before: Nov 22 13:00:16 2024 GMT
            Not After : Nov 23 13:00:16 2024 GMT
        Subject: CN=d196611ebba7569af87a7f43df264c1589c937f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:5d:b1:9f:a5:e5:18:74:fd:cf:87:56:3b:
                    81:34:ab:d9:7c:7e:7e:41:8c:e7:91:98:78:00:9c:
                    86:8b:46:12:55:c2:54:3f:c3:e1:0d:f6:62:e6:26:
                    95:0e:cf:98:5d:f2:4b:f2:0c:bc:07:02:9b:53:ef:
                    0b:20:95:36:75:fc:b8:ee:5d:a4:6b:3f:33:9d:1b:
                    9d:9b:9f:8d:62:65:28:a0:89:37:bb:be:e3:a2:9b:
                    fb:65:3b:0d:0f:8b:d2:99:d4:e2:e6:63:47:63:52:
                    1e:38:75:8b:1d:36:02:99:82:79:51:de:5a:99:b3:
                    30:84:59:e2:c2:2d:3d:db:34:4d:f5:25:8f:3c:0d:
                    a8:3b:6e:21:e5:f7:8c:11:1b:53:92:f8:92:57:8e:
                    99:e7:2a:c2:ce:28:0e:49:24:54:1e:33:39:36:a2:
                    62:e6:14:89:3b:83:2c:9b:97:28:8a:81:49:40:97:
                    eb:76:88:26:1e:53:70:d6:a6:c1:db:bc:b3:f5:b0:
                    b0:29:0d:db:b1:a7:d1:95:19:f5:28:77:f7:a9:1e:
                    b5:db:f4:86:06:6f:76:43:11:10:c7:71:1a:04:70:
                    f7:05:3a:4d:a6:ea:b6:03:b0:cd:4b:27:57:4c:b2:
                    f1:e2:06:24:70:ee:48:29:c5:74:c4:99:54:ee:69:
                    d6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:96:61:1E:BB:A7:56:9A:F8:7A:7F:43:DF:26:4C:15:89:C9:37:F1
            X509v3 Authority Key Identifier:
                keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:0f:88:62:97:a5:ec:33:08:8e:80:63:df:83:02:a0:88:
         9d:ba:e4:6c:2d:71:94:3b:c5:14:a4:f9:bb:4b:61:13:0c:da:
         89:8b:11:b5:4b:19:d0:e1:bc:e0:7b:c7:e0:60:73:00:15:9a:
         56:5a:dc:ea:2d:f0:cf:6b:ad:83:03:a9:ea:43:06:d6:9d:8d:
         86:70:47:99:be:1f:07:8c:1d:e8:df:23:4a:5f:e3:cf:ad:9e:
         e8:d3:97:47:74:7c:2a:5d:6f:a4:10:7c:44:ed:58:7c:dd:06:
         f0:46:df:95:69:89:d0:f5:18:7d:53:d2:b9:7d:79:72:cc:e9:
         f5:39:36:4e:b9:18:fb:89:d6:53:67:8e:be:73:93:cb:db:25:
         c0:12:0f:e4:5d:67:a5:63:98:71:49:37:52:bd:3e:31:d3:72:
         74:a0:cc:5d:6d:90:bd:cc:ce:40:89:d2:29:cc:4a:52:a5:96:
         57:31:77:ba:3b:85:a1:73:08:df:9f:70:7f:27:c8:c8:e6:40:
         ff:5f:e3:9e:6c:7d:21:5e:0c:ad:c5:25:82:75:5f:4b:e9:c8:
         c2:0d:d4:26:56:b1:02:2c:e7:30:16:e4:50:21:73:02:7b:a6:
         94:19:16:2c:4a:f9:bb:b2:60:9e:f8:04:f9:89:83:a3:3d:34:
         85:4c:be:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:54:15 2024 by rpki-client on console-ams.rpki-client.org