Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File:                     qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier:          SrEGYyyZ3RZG9L9siCQD+R5FgzuYWkDtxJB+1gzYJnY=
Subject key identifier:   3D:B5:9F:3A:74:DE:45:D2:71:5C:15:DF:12:C1:5E:27:63:6F:EC:CB
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer:       /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial:       019357D2B2E97BD5A0491D263F76F7B9E30A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number:          11CE
Signing time:             Sat 23 Nov 2024 07:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:46 +0000
Files and hashes:         1: NxJiQY5ZuAk4cbmmT0obBE2GqeM.roa (hash: uvG90t78Ytlj9j18C5afdG1A5uZ3UGL4/SmNx1F6stE=)
                          2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: +7AC6lvHYMLYeIxVwupCSQKpUE9EuQPDPz53YNxG1JY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:b2:e9:7b:d5:a0:49:1d:26:3f:76:f7:b9:e3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
        Validity
            Not Before: Nov 23 07:00:46 2024 GMT
            Not After : Nov 24 07:00:46 2024 GMT
        Subject: CN=3db59f3a74de45d2715c15df12c15e27636feccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:90:a5:b7:30:38:14:6f:96:04:2f:e0:a5:bf:
                    54:ae:b2:ed:ed:12:36:fb:28:f9:a0:37:96:97:24:
                    93:d8:1b:e2:04:eb:47:e5:c4:8d:74:b0:01:fa:89:
                    22:7d:8e:04:b8:ed:d5:e0:85:c1:cf:bf:08:65:c5:
                    66:aa:37:20:e4:32:c6:23:30:41:b3:9c:d1:c7:57:
                    f2:0a:89:25:2b:83:89:64:9c:e5:ea:9d:f6:9b:50:
                    47:64:1c:c6:24:4f:b6:8a:d9:8b:21:a6:1f:2b:1f:
                    81:02:f9:2c:7e:35:75:01:73:63:5a:b1:9d:84:f9:
                    11:38:04:c9:d3:de:65:8b:d5:8c:1d:da:44:5f:62:
                    a1:f3:a3:c3:a3:f4:45:69:f1:bf:8c:a0:c0:8d:4b:
                    60:32:2a:93:58:03:df:36:42:3f:66:28:2b:8f:79:
                    f8:88:f7:c1:bb:cb:99:55:da:ee:cb:e4:b1:d1:fe:
                    76:c1:8f:2d:e9:59:bc:87:61:a0:09:c3:29:8b:74:
                    3d:44:54:e0:ed:40:e8:49:cd:f1:2b:db:64:fc:9e:
                    3b:02:fe:84:07:3c:14:76:ab:21:b8:4a:26:f6:c1:
                    47:83:e0:ea:e8:e6:78:f0:19:b6:2c:17:17:1e:da:
                    fc:b3:71:77:a6:4e:0e:87:2a:64:94:a9:84:28:7a:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:9F:3A:74:DE:45:D2:71:5C:15:DF:12:C1:5E:27:63:6F:EC:CB
            X509v3 Authority Key Identifier:
                keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:28:87:c6:bd:e0:4b:64:e9:0e:8f:7e:e9:74:b1:2b:5e:06:
         42:37:11:59:cc:b9:32:b5:d8:59:5e:da:42:07:68:49:eb:3c:
         38:32:51:41:28:81:c2:e7:4b:91:4f:36:fb:72:b6:c5:7d:d2:
         96:34:40:43:4b:99:87:32:fa:5c:29:1f:bd:63:03:8f:3d:43:
         c9:77:40:e0:25:1a:86:df:cb:b3:86:13:82:60:dc:8d:c4:ef:
         9c:8d:01:8f:13:5e:84:a9:f7:6a:81:dd:12:bb:7e:86:c0:f3:
         bb:65:8b:bb:84:f9:0f:db:78:5b:91:82:63:e8:06:4c:83:88:
         5d:c2:7c:ca:45:d1:0f:da:b8:26:bd:ea:29:64:c0:ec:bf:62:
         95:03:68:49:5a:d1:cd:23:de:d3:bd:da:94:2d:bd:22:b9:78:
         8a:00:91:d1:1a:c4:a9:25:35:c2:0d:c7:00:e8:bb:b5:50:6f:
         24:99:04:4f:46:99:85:29:2c:10:9a:8e:f3:b5:0d:98:1c:70:
         dc:bd:e0:fd:42:6f:2e:ca:8e:ae:9d:6e:89:e4:62:c5:d5:2b:
         d1:2c:b3:9c:69:8d:51:dc:05:de:e6:d1:2e:45:91:ed:cf:45:
         d6:14:14:95:52:c4:79:3f:8c:0e:d6:b9:16:7e:47:5c:54:c9:
         81:42:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:40 2024 by rpki-client on console-fra.rpki-client.org