Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File:                     Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier:          8uayuN3Eg8THFYIU4wJQV6o0ozTHLAZDEx/ubCOBBmk=
Subject key identifier:   EE:FF:4E:71:37:33:AA:FA:36:4B:CD:A5:62:62:79:EF:FB:29:F6:3A
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer:       /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial:       0193568B18E5977504B694296FAC26DBC0DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number:          0B20
Signing time:             Sat 23 Nov 2024 01:02:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:56 +0000
Files and hashes:         1: ICVYsxsxs8sHl_gF4LQLzpKR4fY.roa (hash: aPTwl+y1VHEC6N1GGG6dMVEHeZ9mR0+4yqluC7UL8a0=)
                          2: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: x9b0G5/4oiQu8pz1fBpZxekjgZ/lFxOZtDQbMDfekkY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:18:e5:97:75:04:b6:94:29:6f:ac:26:db:c0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
        Validity
            Not Before: Nov 23 01:02:56 2024 GMT
            Not After : Nov 24 01:02:56 2024 GMT
        Subject: CN=eeff4e713733aafa364bcda5626279effb29f63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:45:2a:69:67:8a:59:11:63:0b:9d:06:8f:87:
                    bc:5e:28:99:b3:d8:3e:a9:0c:69:d0:b3:ce:ae:a7:
                    15:4a:27:f6:ee:78:28:0c:b9:b0:e4:95:26:e6:2f:
                    36:92:b7:43:f2:5d:61:47:93:a6:ed:fb:35:68:89:
                    87:a5:dc:36:d3:9c:16:bc:8a:5c:e5:50:4c:4c:bb:
                    4d:50:75:7f:b6:f2:6f:1f:bc:fb:ec:73:37:88:fe:
                    97:08:c9:c0:9f:e0:5f:bb:0f:38:83:d6:6c:c7:86:
                    c2:6a:03:5c:46:bd:67:06:43:2e:4c:3f:e1:13:69:
                    3f:a2:71:bf:4e:80:09:58:45:ec:b9:bb:55:80:79:
                    46:51:e7:8f:eb:04:c6:d4:d9:61:94:43:21:91:46:
                    de:61:0e:af:0f:2e:bf:64:90:0c:1c:0a:ea:c9:5e:
                    04:eb:97:44:e4:2f:48:f5:7a:98:0f:a4:02:43:aa:
                    62:1a:bd:a8:99:d4:f1:d8:ee:c6:d6:f2:78:c0:51:
                    7e:47:c5:62:4c:cd:fe:77:ba:5f:ff:0d:3a:d1:cb:
                    e8:5c:07:17:5d:f2:5e:9f:f2:87:a8:a6:20:fc:f9:
                    87:73:0d:a1:91:ec:7d:38:0f:95:27:dd:cd:82:13:
                    97:05:d4:e3:fc:c4:68:d9:fe:f1:01:bd:11:e1:0c:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FF:4E:71:37:33:AA:FA:36:4B:CD:A5:62:62:79:EF:FB:29:F6:3A
            X509v3 Authority Key Identifier:
                keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:80:39:f5:b8:e1:c4:2c:6d:1f:08:bb:cf:fa:61:0a:71:fa:
         67:5a:c8:12:04:8f:70:34:90:bf:9d:a0:1e:e2:e2:ee:c0:f8:
         70:98:0c:1d:b8:0a:d9:a1:3d:6e:c4:71:74:d5:12:44:0b:f7:
         6f:f1:ae:28:0a:5a:f8:42:bf:a3:c9:c4:35:f2:8b:95:f7:1e:
         25:c9:66:55:d9:6b:f2:2d:5a:d7:28:f7:79:c0:53:9c:fb:52:
         64:3a:74:2e:c9:72:73:7a:8b:6a:bd:13:c4:89:c9:99:03:fa:
         20:aa:36:67:dc:5c:72:98:41:1b:46:8a:18:82:0c:b7:4f:88:
         69:00:6d:04:60:d3:ff:7b:ef:5c:f9:2d:25:11:37:b7:80:7b:
         0e:b1:bd:01:bc:5d:df:d2:15:a9:c9:22:7f:29:00:1d:c3:59:
         db:da:0f:80:67:60:56:c6:5a:85:20:4e:89:2a:c2:8e:a2:4b:
         94:3b:1e:f4:1b:68:74:df:e9:45:e1:22:dc:37:2c:af:b3:25:
         65:bd:18:dd:e4:be:33:96:0d:09:55:e0:e9:17:49:a6:22:3d:
         4f:5f:2b:2d:42:0b:a8:f1:a7:ce:f7:a2:e3:f6:7e:e3:15:bd:
         f7:4c:41:15:e9:c8:40:b5:94:26:27:ef:0d:62:59:ef:6f:35:
         61:a1:bc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:48 2024 by rpki-client on console-fra.rpki-client.org