Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
File:                     q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft (raw, json)
Hash identifier:          pLAHPzhgp/169zwLMSiSKnLImAOM+sjP4Tnh5n4ah9Y=
Subject key identifier:   C1:68:08:53:F2:91:D8:EB:BD:2B:DE:E5:85:FA:D0:44:36:C3:61:CA
Authority key identifier: AB:E5:E2:EB:17:0E:0C:2A:B8:61:DB:30:8D:BB:CB:2A:5F:D5:F1:8D
Certificate issuer:       /CN=abe5e2eb170e0c2ab861db308dbbcb2a5fd5f18d
Certificate serial:       019359C0EBB8F99FA154A9071A7643326B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 16:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:35 +0000
Files and hashes:         1: c4eg_xIBQ9qqQsF1v-bHPiveyck.roa (hash: FoySGCj/1eOmmiSJbvG5WdWWs6aY/5g+f09rTsAcD5U=)
                          2: q-Xi6xcODCq4YdswjbvLKl_V8Y0.crl (hash: fSlbPw3yu4Cpw3h06O4NvICsGBo++l65B4NxhEpOJus=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:eb:b8:f9:9f:a1:54:a9:07:1a:76:43:32:6b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe5e2eb170e0c2ab861db308dbbcb2a5fd5f18d
        Validity
            Not Before: Nov 23 16:00:35 2024 GMT
            Not After : Nov 24 16:00:35 2024 GMT
        Subject: CN=c1680853f291d8ebbd2bdee585fad04436c361ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:64:d6:20:ab:1f:99:ec:cb:fb:28:cd:85:
                    84:ab:1a:ef:79:af:41:b1:e9:c7:1c:22:10:fd:e7:
                    db:eb:ca:42:8b:49:d0:8d:1d:cb:4f:cb:7a:2f:ce:
                    df:f3:5c:8c:ea:5e:e9:ae:c1:f2:11:1a:a7:e1:38:
                    60:f8:47:07:59:0e:2a:41:c0:55:65:c3:fc:b2:25:
                    74:a8:78:7f:0d:d7:4b:bf:23:78:f8:7d:04:f2:f7:
                    c3:b7:e5:37:dd:4f:43:77:e9:64:9e:27:57:fc:97:
                    87:f1:13:fa:5b:22:86:97:5e:e3:3a:87:fd:d0:66:
                    6d:e8:c0:33:7f:60:92:de:ca:a8:e2:8b:9e:a7:20:
                    e2:0c:9c:14:eb:95:cb:3c:a9:0e:61:c3:e6:90:dc:
                    42:ad:6d:d2:d4:b8:79:bb:4f:21:95:fe:5e:40:38:
                    ed:b7:b6:ac:31:4f:63:51:52:9e:4b:6e:3f:13:0a:
                    49:d0:51:b7:15:44:a3:c1:3f:74:69:af:48:32:85:
                    a4:09:57:cd:14:df:43:c7:53:13:76:e0:8f:d4:e2:
                    7d:32:89:d8:d3:ba:90:aa:f9:30:23:81:11:8c:e4:
                    59:0c:e9:c3:32:63:70:ad:77:bd:28:89:ac:97:73:
                    5f:5f:ff:cc:39:df:98:95:69:07:b8:b6:81:7f:36:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:68:08:53:F2:91:D8:EB:BD:2B:DE:E5:85:FA:D0:44:36:C3:61:CA
            X509v3 Authority Key Identifier:
                keyid:AB:E5:E2:EB:17:0E:0C:2A:B8:61:DB:30:8D:BB:CB:2A:5F:D5:F1:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:4d:68:f8:95:4c:70:19:8c:4b:11:81:91:db:93:74:25:
         d2:fb:45:36:7d:eb:49:f8:df:e5:a6:9a:15:8b:c8:03:e0:c4:
         27:64:61:5f:c4:69:d4:16:34:92:8d:85:1c:d5:94:01:f9:03:
         63:c7:96:6b:9e:13:fa:66:3c:f2:d2:ed:5e:64:d0:b3:cc:9f:
         6b:eb:ad:56:45:73:3f:80:ff:78:21:62:d8:d0:dd:44:db:fa:
         4d:3d:f9:28:8c:d8:58:57:1b:f3:a5:af:80:6c:e0:a3:a5:47:
         6e:e8:8b:66:e1:51:ae:a9:05:b7:15:21:ab:70:fe:24:58:ef:
         47:99:a2:a6:d2:3d:2a:ad:d4:07:3d:88:93:3d:70:32:c8:f3:
         5a:07:94:5b:66:a9:12:10:0f:b9:a0:ff:8d:16:34:39:b9:30:
         09:f3:33:b1:10:66:98:bb:95:41:c9:93:55:01:0c:b2:df:ed:
         76:56:6a:ad:7c:f6:fa:ea:3a:66:67:dd:ee:66:ae:38:6c:ed:
         b1:f4:90:f1:04:a2:68:7e:d0:6e:3f:79:f8:f9:e5:d7:30:b8:
         3a:d4:75:c3:3d:a2:71:6e:2f:fe:72:2c:a5:04:e4:6b:37:13:
         4f:58:ab:95:46:db:02:9d:41:b6:80:d1:da:ea:34:df:e7:95:
         d7:1a:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:19:21 2024 by rpki-client on console-fra.rpki-client.org