Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
File:                     Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json)
Hash identifier:          stAPWqIKPYvRdx+h9kAWor1XU1FpLxNe0+svJLXpYLo=
Subject key identifier:   01:9F:A0:DA:2B:6C:62:DD:73:3C:8D:8B:D9:D8:90:4C:0C:ED:74:71
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       019352079A994B6F5F24DE642253D7740768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
Manifest number:          1384
Signing time:             Fri 22 Nov 2024 04:00:50 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:50 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:50 +0000
Files and hashes:         1: 37TI2ftkNXuUIIOyu-E5izw4hNA.roa (hash: xVKqVmx6HsByPUPx8vKkRcas8/aRkAZmAcXuNjKeJeM=)
                          2: HJCT8FQAmoYJWV7p00o2o5JDJRo.roa (hash: WQOwr4f9A9rh1CxIOLN8kIBNCPy0wKlUdThtQyhJsvg=)
                          3: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: GSLWCelYLS0bm/BPWW1BSJjp3TS8TdevblinEhBJdU0=)
                          4: Xo8yQKafdeSC5Tw2_3L8XC0DGYM.roa (hash: s05mP7z8edhZXz+Y4NC7pxyNuI9paTqfo73/o4ORik8=)
                          5: ZNZKnx_i6rBAJDd9L6kBejCFWE0.roa (hash: MhjJFWZjv9KQBqPQmA8wCbIzxFRm/qm1jGY1Govvs58=)
                          6: Zk_fQegroyfFjyI2DKQrDmUFCtY.roa (hash: Vrm4aN4HCfJCevtqOVhiBD4uQhfYICmQ16QXLRzo/5I=)
                          7: _BlSsQBVFSgZYy3Btv4tx6WvA-I.roa (hash: 9u4K0VZSMQzHMJ/XE2OlhU8ZzmUImcnfgxMYAGTa+FE=)
                          8: boqnAyftTJxYkrklggQuSaE7RzI.roa (hash: 72hznPwDwrXx1Z8EBDRnMrqo1g3yNxuei7ijr4gtpsY=)
                          9: pq8Dr3gOshYrKSakILJyfcjbVPU.roa (hash: PxAinov5865x65Tzu+OsEh0SJUQi9KQfkW/3DN5vdHU=)
                          10: pyIY-_E3i41yZBb_hgnDSnBlxIs.roa (hash: WQl6ZdDv9IxTIqY3Tg6sZT11JhgPVOlg7No0015dKHc=)
                          11: t9SGmO99Vazc1LKIleSZT8nHNJU.roa (hash: CzF+GcN/zs2ZAPBUilrEZ+hfdqh+UB4LnmttiKLOSjc=)
                          12: uK1OjqhBL8SWIjv72uQYXPZHYRU.roa (hash: MGgxkZiBcFC12cihPls/oWLHcSoQDvjlpFNTGWc6ZyA=)
                          13: yl05YBiRTm0zCaHrrmmZnoZb6As.roa (hash: yU8/o/Nh7NIRLTZYOdS/PIdJvzEeQG0oHssxoBKNURU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:9a:99:4b:6f:5f:24:de:64:22:53:d7:74:07:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Nov 22 04:00:50 2024 GMT
            Not After : Nov 23 04:00:50 2024 GMT
        Subject: CN=019fa0da2b6c62dd733c8d8bd9d8904c0ced7471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:25:77:1b:f8:66:15:93:ff:aa:78:2a:ff:
                    0f:85:27:96:8f:99:05:30:82:9d:29:74:28:e8:2d:
                    c1:28:54:da:3b:ef:3c:60:49:e4:19:84:dd:32:7b:
                    12:2d:18:d0:58:e5:38:c2:a1:7c:56:f2:3e:94:05:
                    c7:e8:80:aa:54:0e:50:e4:5e:de:9a:a5:77:d0:de:
                    dd:de:01:19:ce:85:7b:b6:0e:f3:a8:be:c9:d7:e6:
                    9b:58:f6:08:23:40:00:27:28:ee:d1:3f:9e:ca:e2:
                    70:e6:dc:6c:71:99:77:f0:f0:c6:d5:6b:ed:ca:70:
                    ca:45:27:7a:1d:5e:9d:ec:91:f7:99:25:ac:5b:7c:
                    b1:ee:1d:7d:05:fb:2b:c5:cb:71:17:96:e5:32:b1:
                    bf:ee:d1:65:b6:46:6f:e0:9e:bc:e7:f5:59:2a:71:
                    f1:8d:49:ca:7b:fc:8e:a1:9e:f9:e0:4a:44:06:4b:
                    98:b8:f2:ae:f3:77:5f:18:c3:74:5f:94:3a:0f:5d:
                    6c:89:63:55:f7:a2:5c:e1:92:a9:41:77:de:b7:58:
                    f0:56:02:ea:a0:1c:f8:f3:f3:3c:c7:cb:30:6a:0f:
                    30:df:54:1b:35:35:c1:34:13:60:99:7c:66:98:5d:
                    c0:63:14:4f:f7:5f:52:24:96:44:8c:0f:13:d0:b5:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9F:A0:DA:2B:6C:62:DD:73:3C:8D:8B:D9:D8:90:4C:0C:ED:74:71
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1f:8f:71:46:bc:00:ff:9d:c4:5d:ce:c7:36:94:b1:7d:f9:
         05:6a:01:eb:29:94:1a:f7:f1:4e:9f:ee:74:3a:e3:fc:b0:52:
         cd:c1:d8:2e:a8:82:26:1a:b2:ef:5b:6c:47:d2:f4:d6:1f:9d:
         d7:78:38:cf:2e:5a:20:12:9e:8f:7c:7e:c3:37:59:03:1f:66:
         10:16:83:af:51:a6:b1:4a:81:c2:85:4c:f3:92:86:3c:ab:10:
         13:64:a9:36:1c:29:00:6c:63:c7:31:11:e3:39:0e:8c:52:92:
         b9:4b:4b:23:5e:88:c7:7a:79:fb:06:2e:0f:7d:da:54:46:8d:
         2a:4b:dc:42:bf:15:d0:0e:77:f4:67:e0:af:0c:5a:c9:f5:93:
         c7:b5:5b:13:ff:f0:ae:e2:b5:bc:64:f8:3d:17:d7:ef:52:d8:
         81:2c:29:79:51:8c:ba:73:de:ac:5f:b5:27:47:5c:cf:87:c8:
         de:22:db:34:01:15:c9:fe:14:ed:36:00:5e:a4:c3:a5:b8:2e:
         68:d2:bf:6a:23:fc:52:b4:89:f6:b9:61:fd:4e:32:09:46:86:
         68:3d:6d:90:d8:9a:26:40:a7:f2:16:44:ff:69:3f:c7:0d:5f:
         d5:7f:44:32:1f:f4:f7:28:3a:54:0f:11:f3:34:1b:43:50:97:
         9a:67:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:21 2024 by rpki-client on console-ams.rpki-client.org