Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File:                     Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier:          rJhwfCjCdE/oM461VtqJ3p736T7puC2l/zNsv9FcmXs=
Subject key identifier:   DE:8F:C6:1C:8B:22:B2:67:61:E0:DF:5A:62:3D:3E:0B:5C:36:CB:5F
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer:       /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial:       0193520712937BD2EA24B8B5CB99325149E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 04:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:15 +0000
Files and hashes:         1: 1-fRxkG-O0T-wEmMmQy7Vr7mPc6Q.roa (hash: 8HUiuetDhRqXSedMgv3R7qb+SUQbc0iyzNkk87QWysM=)
                          2: 1-vRSdKtXWz9Y8mE7p_Cq4jrVhwo.roa (hash: nfJ5goiu4O+tWwlJChwreXXDqhJJCYf3x2gmK+c+gp8=)
                          3: Dk0pfIg8YqWyY_3RrBWdnN1GV3M.roa (hash: kegvfqEIiNBVkJJoxo4vcTPEvO1b2cN435KWv6jgAZ4=)
                          4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: lZiNmUip3KisDKSZu8wfSrvEiS5dSqp/gJB+7malQJo=)
                          5: XAqDuGuOTA7tU9s3iY9J1nGsoho.roa (hash: ESnk8Rmas5CZRN2qziYkGoIbuOn4XKeQ5yq5um7AjvA=)
                          6: dOYC4COGFul6i3yyWrC0C1CmAJ4.roa (hash: lmqcFn7ikNWuJd4CBK7vIa/tEPcy/mvuzZDHZPpZRlQ=)
                          7: mxxFTKN4RX1t-pOvxQRQBoGvd90.roa (hash: AQu1atpDUAdRWDAjxfel5zukshCOQXlhFt4WJ+3KHSU=)
                          8: rOzu6vCcdfq32Zg3Oi-x3Bp5M6M.roa (hash: rpHpMwLqX4C6bvXhlqKRizVrfpj51/Duzu29qbZAEhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:12:93:7b:d2:ea:24:b8:b5:cb:99:32:51:49:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
        Validity
            Not Before: Nov 22 04:00:15 2024 GMT
            Not After : Nov 23 04:00:15 2024 GMT
        Subject: CN=de8fc61c8b22b26761e0df5a623d3e0b5c36cb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:b6:90:51:8d:6a:2b:c7:2a:ac:49:6e:ba:
                    cd:52:25:76:2b:17:4d:4a:59:b6:f3:d3:66:b7:b7:
                    1f:cf:9b:cc:7e:d4:d5:59:5e:78:70:36:81:78:30:
                    b5:73:12:fc:f6:79:d0:b4:b7:58:06:38:a6:a2:4d:
                    fe:8e:80:fa:28:9b:4a:e8:89:8c:26:2d:89:73:1a:
                    04:f2:09:f6:53:f7:5d:42:3f:49:f8:5f:64:57:49:
                    8d:de:11:4c:0f:d5:af:fa:e9:f9:02:43:10:c7:9a:
                    79:f2:9e:1b:23:31:89:79:45:a7:f9:e3:d9:6d:b9:
                    3d:3d:76:87:77:da:8e:6c:b6:be:5b:08:58:50:0a:
                    9e:7c:e0:5b:1d:b8:9e:58:3a:6f:c5:a4:57:ed:a8:
                    89:89:86:c7:ab:7e:58:20:92:40:a0:34:36:b8:94:
                    0b:29:99:16:11:5a:9c:8a:8e:53:fe:7c:f5:12:1a:
                    7a:29:12:0d:c4:90:09:a1:7b:8e:5c:d6:bd:17:64:
                    a1:41:a8:d0:b5:10:26:1f:3b:9d:1a:a0:56:0e:4a:
                    af:4a:6d:fe:bc:d7:41:61:95:4a:2a:12:9f:e2:06:
                    ba:02:16:40:33:8b:3d:5a:a6:cc:9e:84:4b:26:78:
                    59:c5:28:84:34:16:48:03:b9:d0:1c:8c:ea:82:08:
                    5b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8F:C6:1C:8B:22:B2:67:61:E0:DF:5A:62:3D:3E:0B:5C:36:CB:5F
            X509v3 Authority Key Identifier:
                keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:58:68:f5:31:0a:eb:0a:e5:e7:87:6d:58:50:58:65:c5:ce:
         aa:d6:bc:a2:9c:38:90:8d:ee:0d:b4:87:79:35:65:80:1e:3a:
         08:c0:de:e1:04:dc:e2:fd:d7:2b:cb:68:9d:6f:98:be:5b:2c:
         8b:48:2d:1f:ba:3c:47:e8:a7:27:34:27:1d:c0:37:63:bb:36:
         74:a4:bb:cc:6c:ee:f4:9b:4d:27:fd:de:40:cf:c8:b9:c8:61:
         e2:5a:5c:26:f6:1c:0e:22:fc:81:29:85:30:93:cb:da:8b:a1:
         d9:32:c0:e3:74:b1:d0:fb:36:69:c8:9a:ea:de:15:1c:ef:bc:
         3a:b1:e7:a3:72:15:3d:f2:0a:92:6f:98:94:e7:f1:c9:3b:e6:
         ab:19:d3:e6:a2:c5:8e:90:df:e8:5a:b9:73:60:ec:8f:eb:38:
         2e:2a:37:a1:cb:ad:cf:8a:3c:ca:99:b1:00:d0:9a:eb:d4:e5:
         f6:46:11:a3:12:0e:f8:60:b5:03:85:fb:66:46:9c:cc:fc:31:
         60:1c:33:bd:0e:4d:f9:b2:7a:8c:b9:77:4e:4b:51:8b:bf:7d:
         8b:9a:54:07:00:7f:0c:a6:b8:a3:2a:ec:7b:e0:f6:8f:7a:e6:
         40:98:6b:1b:d8:01:c0:06:f7:3f:8b:0c:23:65:dc:3c:f2:cb:
         44:f0:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:05 2024 by rpki-client on console-ams.rpki-client.org