Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          /RV0ieUuXyEAiysa7IJeZINC3YN0sWJcBVvMEVDWcaU=
Subject key identifier:   5C:43:EC:34:4A:55:17:4A:67:7F:FE:12:5E:8F:22:86:27:87:24:1C
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       0193549BEE151B6DCF91FFB9ED8FAB480EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          1301
Signing time:             Fri 22 Nov 2024 16:02:05 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:05 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:05 +0000
Files and hashes:         1: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: UneluU+nC9I0QDWsmMDQop4z3l8RX1rjn9dMTz2Jw0c=)
                          2: fbcwD46wBu3sV2waymycL7HBw0w.roa (hash: E3BtypHTqPSP3fsYXZp+1pYUiJsd9n+waXNonMlRW68=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:ee:15:1b:6d:cf:91:ff:b9:ed:8f:ab:48:0e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: Nov 22 16:02:05 2024 GMT
            Not After : Nov 23 16:02:05 2024 GMT
        Subject: CN=5c43ec344a55174a677ffe125e8f22862787241c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:35:ba:d8:d8:7a:72:00:94:74:17:2b:d1:3a:
                    4e:72:9f:07:e8:c3:61:d1:0d:34:a6:c1:c3:7a:37:
                    99:86:40:70:8a:03:cc:c8:db:db:94:2a:75:32:07:
                    e8:9b:8a:f7:03:9c:57:39:0a:37:4d:a9:da:70:57:
                    2d:22:92:f7:aa:7d:e7:8d:12:fb:10:8f:49:08:7e:
                    87:5f:2f:70:12:7a:96:c4:8f:56:e7:3b:90:1e:de:
                    6a:01:3b:e5:31:86:14:69:94:99:97:73:80:a8:66:
                    15:75:6b:4d:ff:1d:b7:dc:5d:2e:39:38:14:7b:39:
                    f9:9f:11:0c:b2:54:cb:54:6b:57:e2:0d:af:3d:db:
                    97:dd:25:99:a5:c2:5a:aa:07:c0:27:4f:6e:54:de:
                    e0:d8:b5:e2:ec:4a:6b:db:56:b6:2f:c3:47:a4:87:
                    6a:8a:8c:cb:7a:c5:51:3c:23:da:f7:62:a3:74:52:
                    58:c6:97:21:e2:ec:91:45:0a:ff:0d:8e:b4:52:09:
                    5c:a1:9d:69:41:36:43:58:8f:20:8f:4f:40:1f:7b:
                    85:2d:fb:4b:03:b4:64:d1:15:45:d5:27:8b:b0:53:
                    96:2a:af:d4:8d:18:04:ff:8e:13:db:97:c9:9c:e0:
                    2b:d8:2a:02:37:32:e7:8d:ba:7b:e9:0f:60:c8:46:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:43:EC:34:4A:55:17:4A:67:7F:FE:12:5E:8F:22:86:27:87:24:1C
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3f:7b:72:8b:c4:0d:c8:bd:b0:83:73:6f:0b:b6:75:d1:7c:
         8e:b9:2d:ce:9e:9a:10:ae:54:2e:05:e5:3c:ab:ef:09:04:c6:
         1b:40:2c:63:41:67:14:57:25:02:57:db:87:6d:08:36:e3:16:
         40:df:3d:4e:44:da:85:bc:44:f5:63:33:e2:9a:41:67:40:17:
         9a:fb:a7:79:5b:e0:e8:d7:8a:5e:da:2d:2a:18:d1:51:45:39:
         67:1f:1f:9d:6d:86:8a:e3:87:ce:15:93:f4:81:88:0a:1d:0c:
         2f:ea:8f:97:fb:91:39:bf:4e:33:0c:2f:37:98:68:44:d5:5e:
         26:51:09:45:36:ea:de:83:eb:d9:aa:63:01:20:46:cd:fc:24:
         71:f3:1f:90:2f:cb:d7:72:25:00:50:fd:6e:d4:5f:62:c8:0d:
         21:72:73:02:3c:aa:b4:1b:2b:f6:0c:96:f3:b1:62:f8:c9:ae:
         08:87:69:69:40:4d:fb:cd:ab:09:54:f8:e2:76:a6:17:ee:7c:
         9d:f8:b5:19:e4:03:11:80:35:dd:f9:7e:80:1b:85:8e:4a:e5:
         bd:06:0a:eb:fe:a0:a0:5b:de:1f:51:dd:82:0e:ef:02:d5:c3:
         59:9d:f9:70:89:d5:b6:20:bf:04:40:bc:e0:87:1c:b6:c3:3a:
         13:29:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:42 2024 by rpki-client on console-ams.rpki-client.org