Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File:                     QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier:          d86COgLlhLV14eDCiAVDjQfGdMqNYwevo1e0KxkNRRc=
Subject key identifier:   42:8F:3A:28:28:3D:ED:06:66:32:D3:C7:B9:30:81:2D:F4:FA:9C:5E
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer:       /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial:       01935199870F47FC05BD4027B8C9B68D9DF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number:          10BE
Signing time:             Fri 22 Nov 2024 02:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:36 +0000
Files and hashes:         1: 1Q8A5EuGcU3tOHuCyi07W-I_rRM.roa (hash: Cz1clAtPJBsU2YI4vjxv/9ZTua8nSqJqLt3b0F7odAo=)
                          2: CZHhAV2krkEDqW4m67HRTIvcas4.roa (hash: G7C2GZ1/XSXeEq1uCuRxtCsq4rzVqO7dHsni3cl+9jo=)
                          3: O-__0NXDzQFVCd8cuIy_brDwwSA.roa (hash: D5DpCD68QKAkLi3h5PCtGLZiXnduo7g6LYQTLUdg08s=)
                          4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: Y2RENF1sYHyiCc+QchJFR2vzD3wR8O3VBhAVLFDWdNg=)
                          5: ZZHTrcZtMyPT5Zn8uRN-UvF2pl8.roa (hash: IVW9PIGkrTyLPNC5ByOXCkOGUUEYZpsuzzpmGF46dlk=)
                          6: or4JqpUqVfuyDErnrAkinjF0LRU.roa (hash: MAkxgFBeaSG5HNGqaCtBIWDGTwRhTD+aOYyxBsnrbBE=)
                          7: pd3mdOT8agiACSepSs9mrkMBjb0.roa (hash: jqUdQcoKLTm4rxSGiLxF/uMtXKISzq6uTnjKhbm/bG4=)
                          8: tBGrkKjwjsXKTKSAQ85_BaNmAR4.roa (hash: ZXotWny2AIx11o7E6So+NW89Pv4fMzvhWH6Qcn3Wvmc=)
                          9: wC2CIDmq7XPKcBvPGFiPRucATOw.roa (hash: 2HpbHTFpj0DvUZsG87H8lcThDqRm6rWFqT0+IxWyTfY=)
                          10: xatcrhFoun4L5mgNf4fubWFHTZk.roa (hash: BslNuDSr3pZx4kYGbe1xX8/Qmx8dvXuE2v/g6HGJkIo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:87:0f:47:fc:05:bd:40:27:b8:c9:b6:8d:9d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
        Validity
            Not Before: Nov 22 02:00:36 2024 GMT
            Not After : Nov 23 02:00:36 2024 GMT
        Subject: CN=428f3a28283ded066632d3c7b930812df4fa9c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:66:a2:46:c1:eb:18:2e:e1:59:07:2f:8a:
                    eb:6c:b1:8b:84:40:b8:ee:49:4e:7e:db:0e:f0:a4:
                    67:1b:c7:80:49:11:7a:ac:48:d0:42:52:fd:d8:2f:
                    ad:83:3c:89:d6:9e:eb:22:0d:d7:4d:d6:7b:9d:4e:
                    d4:de:3b:77:62:65:5d:30:ee:c2:34:16:72:8e:1f:
                    a7:69:4a:ac:e0:99:72:63:ac:77:36:c3:d9:d2:48:
                    58:f5:83:78:ca:c0:e6:55:d3:09:41:e0:8c:e1:94:
                    0b:24:c5:f1:d3:eb:13:6c:9a:2b:aa:9b:2a:6f:fe:
                    b5:50:5f:8a:b8:9e:90:75:f2:30:2e:87:a4:8c:c2:
                    4d:ed:af:29:b0:f3:63:df:79:34:5d:66:93:42:f7:
                    f0:30:60:b4:45:cd:b2:60:ae:18:43:a6:d5:42:d8:
                    82:80:3b:33:82:39:fc:5d:bb:51:e7:3c:af:ab:40:
                    76:02:27:46:f4:75:ed:7c:ea:33:3c:be:c4:30:20:
                    ee:61:00:80:b1:d7:1b:62:e3:05:90:56:52:3d:35:
                    12:51:65:e8:22:41:76:fd:54:72:b6:0a:3c:90:d6:
                    37:55:44:ef:d5:62:48:b8:fb:ca:66:de:be:a0:3f:
                    85:f8:87:0c:69:ef:6b:b8:50:30:7e:ee:17:8f:47:
                    5e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8F:3A:28:28:3D:ED:06:66:32:D3:C7:B9:30:81:2D:F4:FA:9C:5E
            X509v3 Authority Key Identifier:
                keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:06:39:4f:0f:62:15:8a:07:d7:08:ba:27:fd:5c:27:bb:0a:
         21:8e:38:61:a8:3b:46:2f:a6:f8:7f:38:ec:e6:66:69:25:11:
         a3:8d:92:96:e2:22:98:02:25:f7:bb:20:ba:7b:b4:33:7c:17:
         11:99:f3:ad:7d:76:8a:ec:e6:fc:b7:7c:42:9f:20:4d:a0:7a:
         6c:bc:c6:50:be:37:d8:f0:15:fa:7f:9d:93:6c:52:13:25:ad:
         3b:43:32:29:f8:91:3f:f3:ff:55:04:f6:72:65:11:6e:65:65:
         9a:91:6f:28:68:aa:7c:ac:eb:43:7e:ca:63:d4:0c:f5:1a:d7:
         20:43:45:e4:62:e7:97:dd:e4:2c:74:df:82:61:d8:68:57:92:
         e7:04:b9:b1:70:f5:93:c0:28:a8:db:ee:8d:bb:a3:bd:e9:80:
         fd:07:e5:15:f2:78:fd:74:c9:4a:4e:e4:12:9d:b2:52:9f:5d:
         5e:86:88:69:c8:25:cd:3a:47:a2:d9:e7:b0:c3:b9:93:3c:08:
         c2:0c:c8:75:10:f6:c5:b3:28:da:f3:b9:6b:f6:6c:cf:3e:e2:
         80:c6:e8:b9:aa:d5:3a:1c:60:03:c3:9c:1b:e8:c1:d7:dd:a4:
         8f:dd:f9:11:e8:8e:77:47:ad:9a:9d:39:b1:e9:4a:f8:5a:f2:
         41:17:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:04 2024 by rpki-client on console-fra.rpki-client.org