Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File:                     QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier:          44FGac44umVgmbZKzLP5a3BJwvjKxwUnHELTdfv4ljg=
Subject key identifier:   25:C5:46:ED:2F:BA:74:26:F3:71:9D:0E:7E:18:A3:12:EE:60:2F:75
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer:       /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial:       019357D276E0D2EF03C1A5F8A965F58869E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number:          0652
Signing time:             Sat 23 Nov 2024 07:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:30 +0000
Files and hashes:         1: AQ_KjEtM_pqJ2AYXfIwtthZXFag.roa (hash: VJrFhJzxBkfwN4h9sElSbF2uvONObcMYUZAqNMaGbcA=)
                          2: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: 3yNqTtMtUzEohVE2l2b5YUXQ7mW5MAI6GC3QegrnKLA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:76:e0:d2:ef:03:c1:a5:f8:a9:65:f5:88:69:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
        Validity
            Not Before: Nov 23 07:00:30 2024 GMT
            Not After : Nov 24 07:00:30 2024 GMT
        Subject: CN=25c546ed2fba7426f3719d0e7e18a312ee602f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:05:c8:f8:59:6a:61:0f:a5:b2:bb:e4:5a:
                    4f:fb:78:f2:87:73:35:b4:50:f1:ec:8c:ad:ac:85:
                    d4:bd:48:78:e1:b1:db:31:fd:3e:07:e2:a1:3d:de:
                    11:5c:a9:f3:68:45:1f:f3:5d:c7:d6:df:a0:a5:ba:
                    94:67:8a:f7:23:c3:f1:e1:52:3d:39:8a:1e:39:fd:
                    e7:d9:ac:a8:ac:4f:ae:20:a3:e3:0f:5f:82:7b:45:
                    79:72:57:08:c5:9b:c2:aa:57:67:a3:b3:97:70:a9:
                    8d:4d:8a:d5:d5:57:62:b8:a7:20:e8:a0:30:ac:7f:
                    e7:46:dd:2a:80:86:8b:74:08:19:5e:00:3f:e4:8c:
                    8d:2e:6f:c9:5c:3c:31:fc:13:4a:a7:04:04:c6:e4:
                    1c:4e:31:35:19:27:a8:5a:c4:14:2e:90:7d:7e:54:
                    b9:3d:54:92:8b:08:1b:5c:49:dd:2f:5c:46:a5:f9:
                    5d:d0:d0:ed:65:65:3e:29:13:54:41:cb:f9:8a:f6:
                    4c:ae:40:4d:9e:1a:ff:40:b7:17:36:45:ac:00:2f:
                    20:91:1c:fc:a2:4d:63:00:ed:bb:d7:02:19:4e:85:
                    15:47:94:7f:e7:eb:3d:4f:e5:75:6a:ca:38:f6:1d:
                    57:67:64:0a:c1:56:fd:07:d6:ca:de:11:aa:1d:e4:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C5:46:ED:2F:BA:74:26:F3:71:9D:0E:7E:18:A3:12:EE:60:2F:75
            X509v3 Authority Key Identifier:
                keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:9c:d4:1a:a5:e3:d8:98:81:71:b1:2a:42:6f:79:78:66:
         3a:2e:1c:13:b3:40:58:c0:d0:02:c6:ea:9b:b3:f9:71:ee:79:
         d2:68:c4:c7:dc:21:bb:66:92:85:0d:ed:f9:42:e8:9e:2d:6d:
         26:e3:45:2a:6b:09:8e:12:d7:27:0f:a0:e6:2e:d0:71:fd:5c:
         2d:74:ed:a5:a6:61:af:e6:8f:51:92:be:4c:b7:dd:e2:ee:d6:
         7d:e0:ca:dd:47:af:dd:87:6c:20:41:60:0d:05:91:b8:b5:b5:
         d5:f3:a1:22:f1:7e:0d:17:a7:d3:92:a3:44:54:66:ab:e3:01:
         47:54:69:85:7f:c7:07:9d:2e:a5:70:e9:89:74:b3:e4:a1:f9:
         05:6a:0e:15:3b:f0:20:dd:7c:7f:e1:88:52:e6:1b:90:92:85:
         81:38:20:e1:d7:48:7f:17:ba:8c:9b:7a:a8:86:e8:93:1e:85:
         2b:70:0e:2f:ec:39:26:e7:72:63:9b:b5:9b:a8:e2:b1:01:ad:
         64:0b:3e:6a:41:78:71:0c:ca:db:d9:f9:a7:1b:7a:81:dc:8d:
         9f:11:00:91:bf:3e:20:20:3a:39:b3:c5:ef:4e:68:0a:7f:12:
         72:04:50:9f:22:c7:d8:0b:c4:03:58:f7:f6:0e:ea:9c:93:45:
         7a:98:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:41 2024 by rpki-client on console-ams.rpki-client.org