Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File:                     q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier:          /6L378RXOgVLbSEnFxeqYITSxv3e0UIUliHz4KlvKmA=
Subject key identifier:   B9:50:ED:EC:AB:86:06:E6:C6:4F:7E:1F:52:20:27:57:9B:22:F0:25
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       019352AC40E71F538CCDD3ACE8EBCB3E38C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 07:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:40 +0000
Files and hashes:         1: NXriI_07fx7jbEdUXH_Ma2BCgtE.roa (hash: FLu40u6ycM/zySyd8FGMzKJy/Wr9RODz4OaC3uPHT3s=)
                          2: Zc0F43wT9I2_s6IF9FXGRe1FG54.roa (hash: M9JJd/q3oZM2mdaePv9fMbeYNTLdLtrICQK9xHWLQNw=)
                          3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: 7Qh/NNKUPIQoDLME4IKtTfiPMztzKArzY7TH0QqUTW8=)
                          4: reWZT0UORhg7cGXlbPTGhHYkFTM.roa (hash: F9qgGcdxO88fnHlxcWmoRdiJYW44zdoxjl1CpOMMi0Q=)
                          5: vSU8VOWpivZTRy742ykezbvp4kg.roa (hash: Dckba+PT5z0YZuUujCpFBMYVSkFn6tv+GcpP16opVC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:40:e7:1f:53:8c:cd:d3:ac:e8:eb:cb:3e:38:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Nov 22 07:00:40 2024 GMT
            Not After : Nov 23 07:00:40 2024 GMT
        Subject: CN=b950edecab8606e6c64f7e1f522027579b22f025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:00:63:f5:d6:70:0e:5e:9b:3d:61:e2:1e:
                    eb:99:d1:51:d0:d0:fc:86:91:ed:60:73:57:85:8b:
                    7d:b5:06:b7:d7:f3:36:80:dd:76:66:ed:e0:93:7b:
                    21:4e:48:f1:d9:16:e1:b4:01:6c:18:82:8d:0b:17:
                    0c:48:d5:4d:bc:8d:4f:d8:98:40:35:20:02:b4:3d:
                    32:73:7d:2a:8c:26:4b:e1:13:c5:73:39:3f:ac:a2:
                    e6:cb:37:1a:c5:1b:5c:8c:4d:3b:a5:e7:ea:87:8f:
                    76:6f:54:ce:7c:50:66:67:da:bd:d0:30:64:15:91:
                    08:52:a2:06:87:b1:86:be:43:23:43:c5:99:b5:45:
                    3d:3d:41:50:16:97:12:73:e1:ee:ef:93:47:11:da:
                    f9:8a:f7:13:c1:2a:26:0a:09:41:84:77:83:5c:e7:
                    38:16:f1:bf:cb:a3:e6:db:d9:2f:44:4e:18:36:33:
                    5a:30:18:68:be:3c:a1:30:9d:18:f8:d2:03:d7:d2:
                    be:89:22:88:ce:58:79:25:a3:17:c3:95:cd:8e:71:
                    1b:bf:48:09:63:33:9d:a5:93:dd:04:70:ba:26:f2:
                    dc:e0:a8:42:4e:7c:c6:74:83:7d:6a:aa:f8:c1:30:
                    15:a9:30:c4:30:21:a9:0d:34:8e:ce:b5:b8:72:db:
                    c4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:ED:EC:AB:86:06:E6:C6:4F:7E:1F:52:20:27:57:9B:22:F0:25
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:75:33:15:60:cd:cc:1e:fd:26:42:3f:50:25:94:fb:7f:f2:
         aa:35:b3:a7:68:14:96:97:14:c9:71:23:fc:ea:49:ec:38:56:
         23:6f:42:c1:3d:c5:ed:63:cf:70:98:28:51:b8:72:86:de:e1:
         46:16:a4:bf:b1:1f:d5:8e:da:cf:13:8f:69:39:7c:8e:ba:28:
         3b:0a:e6:e5:54:fc:c0:e0:cc:18:94:52:48:6d:50:2e:6a:6f:
         3b:69:3d:1c:ec:61:8a:aa:9c:97:42:df:4d:fa:a5:71:07:92:
         c4:ca:fb:f7:0d:f2:14:e8:0d:54:fa:93:5d:d3:ee:1c:34:2d:
         a2:f6:f2:af:f6:95:b2:d8:f3:9b:2d:ef:29:bb:c7:83:16:f3:
         a8:8d:56:56:64:4d:76:fb:ee:3e:cd:53:1e:8f:d4:70:e8:a3:
         ea:97:8a:f3:4d:12:78:83:ea:76:b7:cf:8f:c2:ad:7b:9c:7e:
         5e:51:37:69:13:dc:eb:fa:70:d9:67:57:b6:20:27:6a:9e:ca:
         fd:51:76:9a:b8:38:75:f6:00:5a:a7:f6:45:d5:13:51:6d:bc:
         30:e4:bf:08:15:bf:aa:70:a9:a5:3a:f4:9a:41:b0:6e:50:56:
         98:bb:98:16:88:a7:79:5c:37:f2:ec:35:22:4a:d7:76:ba:eb:
         fb:f5:ca:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:21:00 2024 by rpki-client on console-fra.rpki-client.org