Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File:                     QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier:          cYYWVY5Gcz1N95ZdRGtFlpToYtg6VD6NPZzSwaFtCRo=
Subject key identifier:   E0:F2:55:22:62:1E:DA:E0:13:4C:46:03:C5:23:33:43:6B:28:54:40
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer:       /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial:       019356F6C0F7B60BF1578CDEEA36744CF00B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number:          138B
Signing time:             Sat 23 Nov 2024 03:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:31 +0000
Files and hashes:         1: 2ehH0SulFiVWfUza7QpNXWGq_5I.roa (hash: obmxI9Ed8RmQcaakf7Ou03Y0hgBOSbgsybsepqMHTPs=)
                          2: ERNsfNtYetPeabOLH785PpKZtaY.roa (hash: U5Xvo/bHHXLr+vaUkEr47FG2DTL06s1MQDHSys4KkyE=)
                          3: M_GO1wJVWLv6YWE3ZHQDrzhZMFA.roa (hash: yV1MxvhZAQSm9orY4AWLCqqh4ipQYyfM75LxVWT8xZk=)
                          4: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: 0snQvX7EiUJzTSk9ARGnko4gWEgfzJ2DyYvQOZtV2zA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:c0:f7:b6:0b:f1:57:8c:de:ea:36:74:4c:f0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
        Validity
            Not Before: Nov 23 03:00:31 2024 GMT
            Not After : Nov 24 03:00:31 2024 GMT
        Subject: CN=e0f25522621edae0134c4603c52333436b285440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:e3:04:a6:cb:d4:97:fb:3a:ac:a3:90:a7:
                    89:39:83:5e:0e:45:ad:af:b6:d6:c4:f3:5a:da:7b:
                    63:37:77:53:88:47:ae:06:af:00:0d:74:ca:a6:c0:
                    a3:43:7f:d5:c3:52:e5:4b:9a:b3:75:05:43:d0:29:
                    c8:f6:4e:b2:dd:3d:2f:33:d0:23:ac:de:b4:b1:ad:
                    86:18:cf:61:b8:77:59:d8:1b:42:89:9e:dc:c7:be:
                    6a:70:4d:e3:f9:ac:27:f9:80:18:ae:11:89:07:e5:
                    d4:70:52:6f:36:f9:b6:56:88:d4:27:c8:89:64:b5:
                    d7:46:d3:f3:15:5f:aa:c3:01:91:07:59:57:d4:ba:
                    0b:46:41:79:25:ee:28:98:0b:8b:e1:4d:a2:a9:41:
                    e6:16:3a:18:6a:3a:2e:5a:e6:07:89:0c:06:eb:d9:
                    ba:c6:bb:ef:ef:de:d2:91:87:6e:0c:d8:20:27:91:
                    e4:dc:f4:64:62:09:2a:29:7b:f5:d9:3f:79:dc:45:
                    bb:6e:7e:90:9f:bb:37:91:08:f9:75:10:1c:26:0c:
                    67:44:74:28:7d:a1:db:e8:d2:42:a3:4b:0f:4b:35:
                    31:a9:c2:2a:6e:36:f9:12:af:ca:d0:64:dd:ea:3c:
                    a9:d8:14:14:38:15:55:85:5b:81:62:38:fe:a3:57:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F2:55:22:62:1E:DA:E0:13:4C:46:03:C5:23:33:43:6B:28:54:40
            X509v3 Authority Key Identifier:
                keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:44:f0:16:e6:15:88:f8:ba:a3:bf:84:d9:57:eb:50:74:
         05:91:69:3a:2e:63:06:88:9d:9a:af:2b:4b:d8:81:cb:a3:e8:
         4d:f1:2d:30:f8:41:71:16:6c:ba:f4:ec:a2:3a:29:5e:00:3a:
         68:89:d2:6b:67:18:a0:22:ae:37:71:f9:f1:34:f5:cf:18:c0:
         d5:07:cb:08:b1:8f:91:95:2a:22:4e:a3:41:a5:fb:b9:98:aa:
         db:0d:f7:98:29:20:5a:db:33:62:df:09:ee:ed:c8:05:45:cc:
         fa:23:c9:a2:27:f4:8d:7b:0f:38:14:5b:7b:7e:91:bc:c9:83:
         a0:7a:28:61:da:2d:a7:8f:b9:7e:21:70:46:8a:73:e2:54:be:
         7f:47:ab:78:8b:de:db:2c:9e:bc:0e:0a:16:9a:b1:04:14:14:
         38:c8:79:24:a1:93:e2:4f:d3:44:cd:fb:9f:b5:79:b2:3a:4a:
         10:80:bb:39:15:bd:bf:1a:98:fb:fd:99:b9:79:6c:f2:08:1e:
         c9:dc:97:f1:20:79:98:93:40:ef:34:9a:6c:40:15:2d:2c:96:
         c3:b8:9d:0b:df:60:e0:69:f9:59:4f:a7:3a:74:17:fe:c1:2f:
         3f:97:af:9d:72:03:3d:79:29:46:11:af:4c:df:da:14:69:08:
         c8:a5:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:38 2024 by rpki-client on console-fra.rpki-client.org