Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File:                     q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier:          luXI3TRrx8+YxNuS68tR3cZBBruRvr7z0zRhb3LF7vk=
Subject key identifier:   03:82:82:22:8E:7D:DA:84:96:09:DE:39:61:23:F0:44:58:D4:6B:48
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer:       /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial:       01935C542A7517492032BF0669533A837CD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number:          1375
Signing time:             Sun 24 Nov 2024 04:00:39 +0000
Manifest this update:     Sun 24 Nov 2024 04:00:39 +0000
Manifest next update:     Mon 25 Nov 2024 04:00:39 +0000
Files and hashes:         1: COsRGsqGwXJ9lSKUNqt_0Otp6Aw.roa (hash: ti8WTcoKBvD1NIgkSldJu910xb1BO1ecEdcugNFCv8g=)
                          2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: /JEHh0Eu+rbNCwWUjzDM5bppMOQh2DVyHex6WT/UnyA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5c:54:2a:75:17:49:20:32:bf:06:69:53:3a:83:7c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
        Validity
            Not Before: Nov 24 04:00:39 2024 GMT
            Not After : Nov 25 04:00:39 2024 GMT
        Subject: CN=038282228e7dda849609de396123f04458d46b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:6d:ed:42:83:77:30:5a:51:1d:43:4f:32:
                    5e:71:73:e3:11:59:d8:fa:29:59:2d:dc:53:f2:a7:
                    ab:3d:82:49:fc:23:7d:29:28:d7:41:7a:91:d3:cc:
                    9c:0d:f6:10:36:f8:b3:35:10:91:bf:d3:15:82:31:
                    a9:26:c5:f8:29:8a:8a:a1:12:81:41:3c:75:e5:bf:
                    90:90:ff:97:38:e9:35:de:64:c1:48:44:7f:60:72:
                    30:c3:68:94:34:3b:99:af:12:3b:bf:1b:7f:83:c4:
                    1d:82:d2:a0:25:8c:64:58:90:24:1a:75:2d:b3:5a:
                    cd:82:ac:9b:b5:33:ca:0f:a2:75:31:56:ee:4f:00:
                    9b:a0:36:ed:e7:9f:6d:39:ca:d1:32:be:74:6b:32:
                    d1:be:1e:9d:fa:d0:28:6d:03:ab:8e:a5:39:78:0d:
                    40:a1:22:2e:cc:79:95:d4:9d:9d:4c:42:8b:2d:fd:
                    20:e7:58:2b:33:bc:fb:cc:fa:4e:f9:6a:de:f7:02:
                    a7:a6:68:ea:ee:2b:f4:21:cc:e7:71:2a:11:d1:5e:
                    0d:39:98:cd:3a:30:cf:03:39:31:39:39:14:0b:22:
                    e3:51:c0:c6:ea:aa:f3:d0:f2:4c:22:0b:9b:ed:8e:
                    ed:98:5b:99:d7:fc:af:0e:a1:eb:4e:54:39:1c:81:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:82:82:22:8E:7D:DA:84:96:09:DE:39:61:23:F0:44:58:D4:6B:48
            X509v3 Authority Key Identifier:
                keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6a:68:17:d3:6d:9e:a8:25:e9:0a:dd:60:a0:1f:42:da:e8:
         2c:23:64:cf:d1:2a:47:c0:df:18:95:88:21:01:99:05:11:1f:
         ca:01:c3:ce:9f:78:08:33:5b:2c:64:ef:35:e8:75:73:05:f6:
         f5:fb:f6:81:52:71:e0:6c:2e:03:8c:6b:b6:73:36:bb:76:75:
         d6:76:2c:06:f9:67:de:80:47:c4:2b:c2:c0:da:33:36:c9:9f:
         67:f6:d5:6a:89:71:15:1a:e1:cb:8d:58:ba:4a:96:c6:8b:78:
         08:8a:3e:e4:c3:0b:19:55:fd:61:ea:04:7e:a6:75:18:29:4b:
         0a:95:ba:4c:71:b2:07:af:78:d6:d1:22:7d:7b:96:2d:99:70:
         eb:43:1d:45:7e:8a:3d:ce:53:a1:f5:2c:42:e3:80:1b:30:c3:
         37:ec:18:3a:b3:5c:d3:9d:96:1e:9b:82:69:90:e5:f8:72:5f:
         02:23:c2:35:26:06:ea:e4:cb:17:fb:c3:56:73:02:39:85:15:
         03:ad:5a:59:01:65:79:77:cf:68:e7:fc:57:3a:5a:c1:50:a7:
         82:29:b5:91:64:55:52:b9:35:b5:25:2b:1d:89:1d:fd:83:8c:
         97:75:8d:03:b5:73:13:fb:82:e8:b7:29:0c:33:45:b8:e8:1b:
         c7:dc:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:47:49 2024 by rpki-client on console-ams.rpki-client.org