Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          5p1fVPFjSH6/YSkXrdJNM8DrpgA0/2IIlTlNAUuvuS4=
Subject key identifier:   11:34:9D:10:0A:21:F0:84:76:B6:4F:9E:75:C0:01:8C:54:1B:EA:1C
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       0193591C5E5E424E71551BC0F6C0891897C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          13A1
Signing time:             Sat 23 Nov 2024 13:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:51 +0000
Files and hashes:         1: FrZn77q99tsLCHFnZgvBFmObtW8.roa (hash: yFTRm1Rnnozo7d0KyaRXGFH5XMQZh/6oDKYqk0j7o1A=)
                          2: OmyR1bUYd5x18CVOoCLctdVFX4k.roa (hash: 8TO/HEs01VIA15P1yaRmpZwbWh0zAzX0Mnd3CDvELH8=)
                          3: PUTpnKDEPs55Qpi7jMDGver3e_8.roa (hash: GyN7Qxzxjl57af1HwgoJ8J1StKInZYL2l0mSHj+sdrI=)
                          4: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: oOFXRe7WQ4UxW/kOGYhRz6ib7yFxeJIXZ7Fw5Oc37yA=)
                          5: y1uCwd4PZkfNkTE0rihiPC6pPm0.roa (hash: tRwkDCFz9DprmXrK22bmikK/aKMLD7Ig//iRsLlAJPA=)
                          6: zU1xXkUz1FIoPofbU1uq56EnLnE.roa (hash: jTUpbKlDLG+mBAUECt/53wUspIeu5RGngcVYhAJKggE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:5e:5e:42:4e:71:55:1b:c0:f6:c0:89:18:97:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Nov 23 13:00:51 2024 GMT
            Not After : Nov 24 13:00:51 2024 GMT
        Subject: CN=11349d100a21f08476b64f9e75c0018c541bea1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:8a:50:3f:52:23:9b:05:56:41:87:bb:11:
                    4a:31:76:ab:e8:c0:a7:ef:c9:e9:c8:be:e6:48:a0:
                    d2:7b:ef:35:bb:e4:ab:36:58:71:9a:9b:9c:c2:3c:
                    3c:13:cf:76:ab:13:a5:9a:7a:92:fa:18:b0:44:82:
                    52:24:6b:ac:05:f2:3b:35:bb:a4:c4:ba:48:19:87:
                    97:5b:62:33:93:32:25:bb:78:e6:41:5c:11:27:34:
                    1b:77:37:ec:19:fd:ae:23:bc:46:e6:83:6c:af:0a:
                    8a:72:9c:3f:18:ba:a2:a3:f6:86:32:bb:17:04:03:
                    30:5e:3d:bf:2e:01:cc:62:83:1d:1c:cc:06:f9:e0:
                    a8:0a:13:6a:9c:03:d3:e7:59:8d:9b:66:68:bf:23:
                    39:0d:33:d9:55:92:3d:55:02:d9:87:e7:fe:c8:47:
                    46:60:2d:ea:2e:8b:33:34:60:81:8f:85:76:8e:6e:
                    de:75:0f:b9:52:f9:4d:3c:48:89:51:0b:d3:70:f5:
                    40:c3:fb:4a:ef:00:4a:da:ad:01:50:a4:ae:fb:cb:
                    d9:61:cd:3b:29:4c:4a:ca:23:e0:f8:a5:b0:e5:9a:
                    b7:fd:0b:0c:72:4f:83:36:ec:ae:ca:71:4f:bd:dd:
                    67:59:74:83:5d:14:83:91:7b:b6:dc:47:57:8b:75:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:34:9D:10:0A:21:F0:84:76:B6:4F:9E:75:C0:01:8C:54:1B:EA:1C
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ad:e7:04:5c:c1:91:f4:46:45:7c:be:ea:30:10:09:60:19:
         13:95:86:cc:89:87:45:26:64:35:e0:8b:c8:12:dd:21:3a:1c:
         9c:63:f1:f3:e7:66:b9:31:41:d0:ff:5a:52:f0:ab:37:3d:4f:
         c6:c8:22:c3:62:4b:7b:d8:5a:e1:a6:de:ed:78:25:1a:5a:b0:
         84:c9:10:26:2e:e3:b4:4b:3d:82:8a:55:5e:07:6f:e6:54:8c:
         c0:f9:d5:cf:79:21:7d:35:08:33:c8:4a:a5:17:c3:d4:eb:f3:
         83:b6:0a:9b:fc:6a:68:c6:a5:e3:6c:85:78:cb:9c:e9:89:64:
         12:92:66:38:5e:58:69:32:4a:82:9e:c7:c4:dc:60:f2:90:7c:
         50:1d:ea:42:38:cf:00:38:67:cc:84:3e:08:73:8c:31:21:75:
         86:31:cc:6f:b7:bb:9c:7b:68:39:b2:31:a7:2d:eb:6e:08:9c:
         ba:37:59:2f:c7:18:f7:0c:20:9e:25:80:3a:b8:1b:59:95:cc:
         e0:28:f3:5f:5e:c5:74:31:ef:e2:df:61:f3:0a:2c:f0:9b:87:
         d5:7c:93:5e:72:aa:c0:fb:d9:d3:3d:56:59:7e:8c:a3:c0:89:
         dd:52:50:96:64:a5:c6:78:c7:2f:90:3f:a4:47:b1:e0:5c:59:
         c9:40:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:15:34 2024 by rpki-client on console-fra.rpki-client.org