Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File:                     qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier:          TuHb0Agm6lAwrsyYGUk62C48lkeJUApYBG4Ke8GRqIc=
Subject key identifier:   59:B2:D6:C8:F8:C0:48:6C:6A:81:BB:21:56:82:BE:A9:A7:9E:E6:91
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer:       /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial:       0193512C052F5769BDA022CF87E44CF64865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number:          0270
Signing time:             Fri 22 Nov 2024 00:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:59 +0000
Files and hashes:         1: KN9uI1in7Rmxa8HsRJep2umNYyE.roa (hash: crqDDQtsssivLMlh3BryM/t/6EhYdNgQzMt8o99nqug=)
                          2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: 6To79CijciTk+X7fFww8cvNHkWcut7PYgnR+/Fo7ly4=)
                          3: xGaxZRX_Vf6Qjn6zYZvL3C1FxJw.roa (hash: Los677b7v6v/XkB+oJyDBa65LjiqXTVZFjLEgSsa6zE=)
                          4: zJZth_wgvVqVuni_vKJ7au6-dpk.roa (hash: 0k6U75xuayKqUa3WEvxDnCEf0PMn23XzUDddlPYIZ2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2c:05:2f:57:69:bd:a0:22:cf:87:e4:4c:f6:48:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
        Validity
            Not Before: Nov 22 00:00:59 2024 GMT
            Not After : Nov 23 00:00:59 2024 GMT
        Subject: CN=59b2d6c8f8c0486c6a81bb215682bea9a79ee691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:83:0f:4e:14:7a:90:cd:be:9f:59:b7:6e:
                    3b:1e:1e:74:93:5e:5a:73:ad:17:82:67:f1:74:7b:
                    0f:02:5b:8c:01:16:42:3a:68:f2:98:7f:fa:56:e7:
                    8d:08:40:d7:2f:3b:00:7c:e2:06:31:ce:c5:c8:d8:
                    03:a5:ec:dd:9c:6a:18:28:2e:3e:85:3d:c5:72:19:
                    52:6e:01:1a:fe:3c:c5:d7:1c:4e:7a:8c:5c:3e:ff:
                    84:69:86:ac:7f:0a:c5:49:37:f7:04:24:09:a2:ac:
                    8a:2a:5a:4f:59:b3:c1:1c:66:4b:b5:f7:e8:5d:fa:
                    3d:63:30:85:91:8a:1d:46:27:6a:65:a6:b5:a5:7d:
                    8c:99:2d:a5:fa:77:9a:03:be:35:56:dc:d7:ab:e6:
                    6e:80:4d:9f:a1:c2:cb:ef:12:5c:e2:e4:e7:e4:ad:
                    33:79:ee:09:ec:bc:66:f6:a9:75:c4:bf:55:ac:0e:
                    70:ea:5f:4f:39:ae:70:38:28:19:45:55:6c:8b:17:
                    9b:8e:9e:16:f5:ad:a9:6e:11:c6:84:db:a9:a6:bb:
                    9e:a6:4d:22:f8:24:25:50:9c:2f:99:c7:59:9a:7a:
                    25:ae:c7:1e:d4:22:7a:a1:13:eb:92:4e:34:c9:da:
                    22:d5:f5:a2:14:c6:75:9f:93:0d:03:d4:d5:cb:82:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B2:D6:C8:F8:C0:48:6C:6A:81:BB:21:56:82:BE:A9:A7:9E:E6:91
            X509v3 Authority Key Identifier:
                keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:16:58:bb:d8:c9:c4:77:6b:9c:24:a2:9a:1e:11:65:3d:
         d9:95:ae:d6:95:93:e6:2a:69:f8:43:57:52:fa:e1:dd:29:29:
         bd:77:0a:b9:b4:b0:6b:1a:d3:24:68:eb:65:89:22:38:09:11:
         b0:67:29:15:71:f5:05:ad:53:d7:16:05:58:3d:11:cc:88:0c:
         08:bd:2d:2e:fb:95:7a:d1:10:59:d3:7d:09:f7:12:6c:eb:0a:
         2c:0a:94:74:4b:fb:c8:46:9c:52:29:64:16:a8:6f:79:46:76:
         92:82:a0:60:eb:f4:f8:6c:29:45:54:46:04:7d:2c:d2:97:69:
         60:07:e8:d6:67:f5:f7:87:35:33:82:c0:a4:57:e3:9a:5c:01:
         03:46:03:19:62:7a:e7:ee:b8:a6:03:b7:81:bf:80:5b:8c:54:
         b2:c2:3f:dc:10:be:7a:0d:24:d8:60:a4:d9:02:29:51:4d:23:
         fb:6d:c1:8e:fe:6e:d7:23:ff:7b:a6:8c:31:f3:f5:f5:4b:c9:
         f9:78:61:6b:83:ca:94:68:48:0e:51:7e:46:3e:fb:cd:6f:62:
         0f:b9:35:23:ee:fd:da:81:8e:03:e1:20:53:77:d7:3e:62:eb:
         63:87:b2:d5:36:f4:3d:a9:b1:20:bc:c8:60:7d:af:da:03:17:
         5e:11:c5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:29:36 2024 by rpki-client on console-ams.rpki-client.org