Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File:                     qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier:          +baql4Kp6506EOTGboEY5t8HlUAlgN43cA3w/5FELwU=
Subject key identifier:   DD:ED:33:B9:14:F1:6C:BF:35:EC:61:97:47:C5:BE:D5:56:8A:D5:28
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer:       /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial:       0193655767C68B3E2AA17ABE37BDFEA5882D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number:          0E55
Signing time:             Mon 25 Nov 2024 22:00:46 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:46 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:46 +0000
Files and hashes:         1: 9TNeA-M30sGItgtZGpB5lxQMkEg.roa (hash: giKCCGwKVw4SKpaRfbykEe36hHaaotoWCNuEty4ylNM=)
                          2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: F+T4YZf6UqXxDZdNGkGZP6Z9V7tt8JuYxS9jHCE7r2M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:67:c6:8b:3e:2a:a1:7a:be:37:bd:fe:a5:88:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
        Validity
            Not Before: Nov 25 22:00:46 2024 GMT
            Not After : Nov 26 22:00:46 2024 GMT
        Subject: CN=dded33b914f16cbf35ec619747c5bed5568ad528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:ce:5f:bb:6e:77:f6:ba:3f:b3:b6:d5:9d:
                    50:ed:23:a7:04:2d:22:05:93:78:9d:69:b0:6f:d3:
                    42:d1:9a:a4:d9:01:38:a5:ae:fe:69:76:f2:09:cf:
                    8b:e7:a8:b3:ee:93:ab:e9:75:4f:50:e1:8b:06:50:
                    4c:8a:99:11:44:24:20:bb:4d:d4:63:61:22:80:18:
                    fe:ad:c1:1f:5d:fd:6b:a5:12:2f:dd:b3:6c:34:87:
                    6c:1f:73:a3:45:7d:c3:60:2a:4f:68:a6:0c:2e:fd:
                    8b:c3:85:2f:94:37:e0:5f:3b:d6:ca:4c:a1:1a:7f:
                    4f:7e:d1:4c:4d:f5:c0:80:15:7b:05:b9:fe:8b:cb:
                    46:78:a0:97:29:bd:a0:2d:06:ca:2e:2f:62:d2:34:
                    ea:bd:da:56:df:4b:6b:37:a8:b5:ea:bf:f3:3c:f2:
                    90:dd:91:c7:a1:3d:94:ac:3a:f6:ca:58:18:c7:c6:
                    ea:5c:40:2c:06:89:87:9d:70:1b:4d:b4:3a:d4:f2:
                    32:a3:53:3a:b4:22:15:98:fe:29:43:97:ba:08:4c:
                    09:6c:6c:58:71:54:a4:0f:ec:90:2f:e3:c9:1e:dc:
                    b5:95:c9:44:72:cd:31:db:82:96:28:a6:2e:5b:ed:
                    a3:b2:c7:60:81:c6:8c:dc:e7:f4:09:6e:53:b8:84:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:ED:33:B9:14:F1:6C:BF:35:EC:61:97:47:C5:BE:D5:56:8A:D5:28
            X509v3 Authority Key Identifier:
                keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:f6:4e:1b:84:68:52:e3:e7:0a:75:6f:1d:8c:f8:00:f9:
         9e:07:34:6a:a2:05:8a:b0:bd:50:7b:e3:fd:4b:ea:27:9c:2d:
         9d:5d:83:9d:03:56:08:87:c5:7b:6b:f2:82:0a:2f:4d:ba:fc:
         cf:0e:e9:80:4b:65:69:ff:51:25:6b:d1:15:f6:f1:9b:3a:9b:
         e9:21:78:10:f2:ae:ee:83:a8:7c:1f:42:7e:70:9e:83:ef:6f:
         14:6b:35:ec:9d:7b:2c:03:87:57:78:2f:91:38:70:4f:6c:23:
         98:1b:39:c2:1e:d8:f1:a0:36:53:a6:75:8c:e2:fb:d1:e6:b7:
         20:a4:84:bd:92:e0:14:be:42:62:04:fe:a6:d9:89:c7:b0:58:
         8a:9a:4d:b5:3f:df:4d:9e:f5:fb:41:35:6c:5c:40:56:2e:0e:
         67:40:98:79:3d:96:45:66:d8:0f:8c:d1:3c:f4:c9:f4:3a:39:
         72:ad:23:a6:20:a4:df:9a:c5:03:c8:a4:80:2c:5f:01:95:e1:
         f4:39:0b:b4:e2:97:24:46:d3:57:52:91:2d:36:63:33:94:80:
         8f:fc:3e:ac:57:73:fb:d8:8d:1c:39:2d:8e:7d:12:4a:de:5e:
         9d:53:4a:da:1c:b4:04:82:f8:31:1c:ea:35:2f:1d:3f:25:f8:
         5e:ad:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:12:22 2024 by rpki-client on console-fra.rpki-client.org