Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File:                     Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier:          QrheTIbHTBr/jwmOBoR8851DQFnF5P2Ts5jZp063wWM=
Subject key identifier:   EE:F7:DD:AA:EF:BA:9F:C1:19:D1:5D:C5:5C:55:A2:BA:97:0A:D5:C9
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       01935508086124B48A1A6073C67AA09B4F2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number:          0F4F
Signing time:             Fri 22 Nov 2024 18:00:09 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:09 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:09 +0000
Files and hashes:         1: 2z1EaeaRDHovyRDHO6rhUuBgbWc.roa (hash: +B2oGdABM2pTwJ49PZuO/xaxeyl+MNWE/8gWk5AiAg0=)
                          2: HpNeWOgFzYeAtKUqXPmP4EaSUfw.roa (hash: CnaUEhftHhVw9GqFf2qY9LZeY2eMV9WRfmCAwfTkKNw=)
                          3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: a4epupL11pzPeTcW+Tgs3MMQfLrPwPCKAxYVYGVjvMc=)
                          4: WGMuggpxrY5prMrROdQgq7Bkbvs.roa (hash: fl4JeB4WefijN2V6hQwJSjZ/F3j97/+DqvnchE56f4w=)
                          5: YwhhUN7DKMWLRoJGjKdHKAwL1D8.roa (hash: XPEdwJpmd3YESMI74X7dcXRH2KijVS6NENlSTc+dnXw=)
                          6: _10Y5TaAfGpNeF3OY99jdDKF7d4.roa (hash: nNXaHvcyWR2r64VH7FvACmd8x/SZ+AvI9gqoHCG//NQ=)
                          7: aTbGDZ1a8KaIXRsLBX-ysj1zB9w.roa (hash: ifeeVQTYuwnbVEf0nxj33UT6I9VoMwxqoMKwpQCLTSo=)
                          8: df4A0rGnA7kKgO6TeWEpkGUM-dk.roa (hash: 9BEc9kI3Rk4OQCvoe1bcXRy7yg3dsvf9mwb0EguoOZg=)
                          9: frxTbneHihZOK3Y_HlYI4_vf8zs.roa (hash: yBaMPNBt8TK1EEpz5w4oU2Up848Yw+CYMkwX8S0vbUQ=)
                          10: zQj6eadudVXi3O2yLkwnkqDqs14.roa (hash: 1vStXhfH6Bx/njY+sQI2OighAfBRyys+wyz3AiCm0kE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:08:61:24:b4:8a:1a:60:73:c6:7a:a0:9b:4f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Nov 22 18:00:09 2024 GMT
            Not After : Nov 23 18:00:09 2024 GMT
        Subject: CN=eef7ddaaefba9fc119d15dc55c55a2ba970ad5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:a1:68:46:bc:2e:49:c6:89:07:8a:49:4d:
                    d8:d1:a2:14:a0:7d:9b:63:4f:00:5b:bc:a8:32:ad:
                    01:4f:8a:fc:1f:73:88:db:9f:48:3d:ac:38:f3:9e:
                    70:02:be:bf:91:15:d2:2d:21:37:8c:12:29:62:f0:
                    a1:bb:b4:20:b8:da:26:04:a3:f9:a6:71:80:6e:19:
                    f1:a2:92:39:ee:95:96:51:4d:24:f8:b7:bc:1d:89:
                    ab:e0:11:f1:56:f6:a6:e9:e3:30:c1:32:f4:89:56:
                    d6:8d:ca:fa:6a:ad:87:18:34:91:52:57:01:1c:aa:
                    9e:2b:8c:f3:94:89:51:f7:a0:f9:5b:1d:37:3e:f2:
                    91:53:34:0d:16:04:7d:9d:d3:4c:e6:a5:e2:4f:bf:
                    fb:f9:5a:96:09:32:9c:f0:fc:ed:65:b5:7f:40:65:
                    75:ea:63:a4:7f:c8:be:de:ff:29:9a:07:85:34:e3:
                    cd:0e:1f:c2:88:4f:58:a8:c2:0c:e7:fc:aa:0e:3b:
                    f5:72:5f:00:3b:68:f9:5b:e5:fe:f6:83:9f:24:5c:
                    e4:6f:54:dc:27:01:e9:b1:0e:76:27:ad:85:3e:35:
                    9b:c4:e6:d3:80:51:94:5b:d1:66:b7:b1:a8:e0:9a:
                    e5:00:49:9d:3e:3c:f2:0a:94:a0:bc:ad:60:50:40:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F7:DD:AA:EF:BA:9F:C1:19:D1:5D:C5:5C:55:A2:BA:97:0A:D5:C9
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:12:fd:85:8b:ff:c2:77:e3:c0:f6:41:e7:23:36:dd:3b:8c:
         17:90:77:84:da:0d:21:e1:c3:1d:6e:0f:fc:b8:eb:54:e8:23:
         e8:54:84:f4:cf:ed:f6:f2:ce:1a:ee:c2:c8:a1:6d:2d:40:8a:
         f0:9c:4a:43:ec:92:0a:ed:a7:d4:9e:b0:96:df:c7:e9:b0:2e:
         b4:dc:16:61:3a:57:ab:cb:58:ec:da:b1:e7:3a:32:78:fc:62:
         d9:1b:e6:2b:cb:c3:1a:3b:c3:4f:a2:6f:3d:fb:38:ec:e0:58:
         a7:5f:cf:28:b3:20:d1:81:c0:4e:77:d3:1d:40:3a:9c:ca:ef:
         60:4f:85:6e:3c:d0:59:b2:ed:ec:fd:12:fb:a3:be:2b:f5:4d:
         89:14:ae:f3:91:d0:97:85:87:4f:61:3c:72:4f:f9:a2:75:dc:
         cf:08:c9:7a:99:b3:ce:a4:8a:c6:90:34:a9:71:84:0f:cd:10:
         59:f7:b9:e9:d6:87:8f:ed:07:78:d9:50:ed:9f:94:19:a9:e4:
         02:6c:fb:33:b5:92:b2:5c:03:bc:b3:85:34:ee:71:bc:23:b2:
         a4:1e:e7:06:4b:9b:17:76:52:24:e5:a7:72:5b:0e:01:79:ac:
         91:67:6e:24:5d:82:40:ff:89:1a:d2:46:a0:a8:07:9c:a2:8f:
         5f:bf:8f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:54 2024 by rpki-client on console-fra.rpki-client.org