Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
File:                     Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft (raw, json)
Hash identifier:          cKjCylBh3onMXKejr6LmREtS1kSAm3DWUpf+SglKtW4=
Subject key identifier:   31:3C:B3:D8:51:C7:95:A1:88:07:D6:8B:2A:87:31:34:82:55:0F:E3
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Certificate issuer:       /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial:       0193579BDF685C80776BBD1F7F834CC1666C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
Manifest number:          1018
Signing time:             Sat 23 Nov 2024 06:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:53 +0000
Files and hashes:         1: 07TzuKnh76VoCAzkq24E8kRvxWE.roa (hash: //syDkAat+oL4v4kpk01yJmynvUn91SVrktzd1aat4w=)
                          2: MbBCt1bqvVsc4AU5KO9IZ_baVjY.roa (hash: Ydc9LmcIRnLKkzvkXqWh3i7bkKT4rBCzBs/YtafuKqA=)
                          3: Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl (hash: X2nhC5mTK318NA/J9lpZ60BkLctJZ9zaIf7j9NAkL/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:df:68:5c:80:77:6b:bd:1f:7f:83:4c:c1:66:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
        Validity
            Not Before: Nov 23 06:00:53 2024 GMT
            Not After : Nov 24 06:00:53 2024 GMT
        Subject: CN=313cb3d851c795a18807d68b2a87313482550fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:23:56:82:92:be:79:f9:3a:3e:0c:05:56:48:
                    e3:d2:77:4e:4c:9f:ac:99:e6:30:92:c1:45:24:d9:
                    0b:d8:0d:c8:bd:ad:0e:34:8f:29:c8:ff:44:c0:d3:
                    b4:0f:1e:82:53:11:74:77:95:a9:fc:80:ec:18:28:
                    00:97:c8:cf:95:ec:de:08:ae:94:69:03:8c:d7:c7:
                    26:01:09:e7:04:61:a5:bd:8f:5a:f6:59:43:20:97:
                    58:84:e8:9f:23:07:ae:fe:29:f8:ff:82:6d:24:04:
                    0a:8f:a7:c2:9a:bd:a1:09:5d:7c:f4:b7:fb:67:1f:
                    23:86:ad:94:3f:36:1f:d8:e8:5b:2f:fa:c3:95:ad:
                    3b:eb:ae:7f:ce:11:78:b3:d6:4b:54:99:2e:b3:1c:
                    51:02:88:84:3b:fc:41:8f:8e:c0:3b:55:11:8c:6f:
                    a2:31:bc:5c:cd:d9:e4:80:65:35:6a:5f:3f:ba:78:
                    73:02:9b:cd:9b:4b:ed:ed:9c:9d:c1:6f:71:b4:65:
                    f6:82:14:cf:d5:18:bb:de:51:a8:c1:2e:ec:60:32:
                    9d:40:42:69:a1:13:ec:67:31:89:81:3d:5b:a6:87:
                    df:57:fb:ab:67:a7:d0:1e:aa:a2:f9:d8:4c:86:d3:
                    48:95:76:7d:9a:6b:db:c9:95:b4:43:0a:da:2a:d1:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:B3:D8:51:C7:95:A1:88:07:D6:8B:2A:87:31:34:82:55:0F:E3
            X509v3 Authority Key Identifier:
                keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9e:73:e3:32:a6:bd:e9:9b:c3:e8:13:f5:6e:09:66:3e:07:
         b5:43:c7:da:10:2c:b2:a4:4b:43:59:73:1b:9e:e7:3d:26:2f:
         26:f7:79:55:bc:5c:92:ef:1e:0f:8f:09:11:33:8f:7b:80:0f:
         95:44:9e:05:57:3a:07:6c:9b:e2:5e:cc:68:85:c3:3b:fd:e8:
         bc:c9:2d:06:3f:0e:0f:c4:83:c1:2c:67:43:86:f5:9c:a4:a4:
         7c:91:07:c5:fe:74:22:37:44:b4:ab:c1:5b:d6:4a:fc:6e:10:
         6f:fa:b9:80:c3:27:d4:a1:32:72:94:80:7c:4c:4d:52:7b:83:
         97:61:06:ad:1f:4c:b1:5b:61:fd:4f:f5:0a:c4:10:75:17:82:
         78:06:8a:82:16:c1:05:13:07:35:74:c4:19:50:ed:3d:1d:ff:
         dd:85:5a:4d:10:d2:67:ea:c5:26:10:5d:95:8e:fc:f9:a9:9b:
         f2:f1:d9:3c:54:55:29:d8:86:e1:a5:51:c5:ce:33:dd:c0:49:
         1c:99:96:61:d0:7d:c0:00:64:ce:30:a3:0e:18:71:1b:fb:a7:
         41:cf:f7:3c:da:ae:96:c6:07:0e:6d:f6:e7:7e:58:86:7d:5c:
         a4:9e:bc:57:d5:f9:2b:21:9d:9d:bc:d0:3f:16:46:46:3c:00:
         91:7a:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:27 2024 by rpki-client on console-ams.rpki-client.org