Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File:                     q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier:          yXghmHhxYjOB6QshkW9+p+BKQKyV1w39AYZr8SgnzJs=
Subject key identifier:   4E:51:27:32:CF:9A:13:84:FD:EB:B2:6D:5D:70:AC:62:BF:0D:C5:84
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer:       /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial:       0193655775117CC7FC8A133259801D4C2BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number:          01EB
Signing time:             Mon 25 Nov 2024 22:00:50 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:50 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:50 +0000
Files and hashes:         1: USnMpU9A54VCZexRIP-q2Taydf0.roa (hash: nMMvBJO6mrh/O3kpbLpBlpZP2BFfmW/UM1VQycijcuY=)
                          2: d6hnYZsVs_JYmiNXcCh1vo_KibM.roa (hash: 8hZ/i6hTowS+KXFTB29YVWwJ+KDBFC7ZmFZQxsDvBpQ=)
                          3: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: Hf3cB7/ppb3XImeUSopAp6GVPq/S5oChJFr1nJAuWBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:75:11:7c:c7:fc:8a:13:32:59:80:1d:4c:2b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
        Validity
            Not Before: Nov 25 22:00:50 2024 GMT
            Not After : Nov 26 22:00:50 2024 GMT
        Subject: CN=4e512732cf9a1384fdebb26d5d70ac62bf0dc584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:76:6b:44:d8:b3:3e:83:cf:34:b0:cb:df:
                    cd:15:4d:fb:a7:8c:b7:3d:ec:9d:09:e8:80:15:44:
                    a9:45:db:bf:d9:21:ba:1c:b3:89:29:e8:2c:48:19:
                    f1:20:d6:83:20:e1:f0:c2:b0:8e:a0:0e:c6:59:42:
                    aa:ef:6a:c1:2e:79:b2:df:26:1c:61:e0:0a:45:ca:
                    22:e4:8e:18:8d:12:3c:a4:f7:b1:93:97:36:d2:a3:
                    ba:c0:00:b3:f5:c1:d8:84:ef:c3:7a:58:be:b0:0f:
                    b8:fe:88:fa:b7:76:f0:44:11:6b:3a:51:3e:51:b9:
                    76:60:d3:5d:78:51:cf:44:93:ce:02:a2:b3:a5:17:
                    23:d1:2c:08:87:ff:42:ae:f2:55:57:e7:79:a1:52:
                    00:b4:6f:94:bb:9f:85:8e:d4:7f:b9:a9:3f:40:16:
                    e2:59:b9:cb:3e:e7:bf:8c:d1:88:fd:bd:76:06:3b:
                    13:d3:d2:44:df:bf:4d:2b:b7:af:0d:21:53:d2:4a:
                    20:43:c2:be:4a:9a:31:5c:ea:0d:87:15:ea:4f:5e:
                    7a:34:a4:75:be:2c:cc:18:5c:5e:5e:7b:5f:28:c5:
                    0e:8f:54:e2:20:6e:d8:10:ca:b1:96:ed:ed:55:2d:
                    32:cd:a4:01:2c:24:5f:a8:95:ce:bd:7d:1b:6a:51:
                    e5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:51:27:32:CF:9A:13:84:FD:EB:B2:6D:5D:70:AC:62:BF:0D:C5:84
            X509v3 Authority Key Identifier:
                keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:db:25:a0:e2:17:c5:a2:86:8c:ee:ef:7c:63:5c:34:90:4b:
         48:64:f7:b7:b6:00:5a:b4:fc:23:af:56:9d:15:64:08:35:01:
         30:62:3a:68:7a:13:4f:fd:07:b8:a0:c2:04:ad:a8:14:37:36:
         c7:b4:ef:88:1e:af:9a:56:a8:cc:b9:cb:9d:6a:83:2e:ee:36:
         bf:d8:54:7f:eb:01:c7:4e:0e:af:57:1c:8b:fe:94:4d:3c:df:
         a0:76:19:4a:5c:ed:3b:97:b6:c8:b6:70:89:fe:2b:c6:d2:1f:
         a9:2e:c8:6b:86:1d:9b:8b:52:2e:2c:98:4b:6b:37:3e:d7:31:
         87:52:da:18:b6:19:64:81:b7:d1:82:49:bf:b4:dd:ee:2c:01:
         5b:9d:be:15:82:9d:ea:79:1f:c8:37:4d:13:c9:ac:08:a7:a3:
         50:4d:dd:3a:ba:74:eb:80:6a:ee:3e:59:2b:24:eb:63:c3:fe:
         31:96:3c:6b:d5:72:96:b1:ca:d7:c5:c0:bc:b6:74:34:4e:ec:
         01:97:3f:7e:0a:bf:e9:a9:f1:0f:c1:cd:48:f3:66:e8:51:37:
         24:ea:02:a4:ac:0d:66:83:2e:83:a0:c8:8f:a5:7a:e0:0e:bb:
         e8:59:9e:64:6a:61:8f:27:c2:eb:5a:9c:a1:1e:6d:0f:e9:de:
         78:4c:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:22:42 2024 by rpki-client on console-ams.rpki-client.org