Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File:                     QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier:          B1K9UDpKD2uibk5phoadEgDuJH+4MJpwI4LY5rkkJh0=
Subject key identifier:   94:DC:DF:5B:F3:AB:0E:40:1C:4F:BD:85:63:35:95:82:A7:6F:1D:8D
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer:       /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial:       0193591C600D6F457317C75A2B4FB3B19EE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number:          0BCE
Signing time:             Sat 23 Nov 2024 13:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:52 +0000
Files and hashes:         1: 5w-IeZYhsPT4FybImYh9QeQ5_Tg.roa (hash: UzE8Vo1fxTCQUcz73JL7iQZ6HT54Dpyst8ncHgp5Omk=)
                          2: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: bgBgZgMCAtzy4aeCYmZRWV+b9M2hXSoh2v1lrkcein0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:60:0d:6f:45:73:17:c7:5a:2b:4f:b3:b1:9e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
        Validity
            Not Before: Nov 23 13:00:52 2024 GMT
            Not After : Nov 24 13:00:52 2024 GMT
        Subject: CN=94dcdf5bf3ab0e401c4fbd8563359582a76f1d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:3a:7c:68:23:27:39:92:a1:a8:f5:c4:c2:
                    94:a4:d9:a9:5a:b7:06:bb:7a:90:b9:7c:d7:81:9a:
                    e7:70:47:44:f5:4e:15:71:44:7a:e1:42:95:96:bb:
                    a6:83:cf:58:17:80:bc:20:88:09:ed:f2:bb:68:51:
                    2f:eb:06:46:fd:bc:c7:91:49:15:52:9a:0f:72:ab:
                    c5:8c:70:76:db:ed:23:6b:18:d1:d7:79:20:1e:d2:
                    d1:12:b0:67:ad:0e:ab:0c:82:19:4f:aa:9e:d5:3b:
                    fc:ed:8b:ae:85:d8:cd:32:70:64:2d:d7:e8:ca:45:
                    11:5f:ab:b2:34:ad:46:48:e8:41:ae:c6:12:c9:8f:
                    9d:00:43:8c:16:fb:63:a4:78:f0:0b:85:4e:8b:a5:
                    2f:65:48:10:22:de:51:29:9d:b9:08:56:e9:2c:c8:
                    60:96:1b:0a:86:24:97:84:f8:4d:e6:fb:e5:cc:85:
                    da:34:c8:d9:c5:2d:f8:b9:d0:ef:a6:bc:b3:3e:d4:
                    44:c8:6d:18:f5:b9:95:31:77:db:0d:55:40:8c:aa:
                    f4:52:50:bb:70:74:c8:28:8b:0b:b0:13:aa:4e:1b:
                    69:86:eb:13:75:44:d9:18:4e:04:b4:e2:5e:fa:ed:
                    2f:13:29:71:28:70:f3:6a:59:8f:df:a9:c5:fd:0d:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DC:DF:5B:F3:AB:0E:40:1C:4F:BD:85:63:35:95:82:A7:6F:1D:8D
            X509v3 Authority Key Identifier:
                keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c8:1e:af:df:79:2f:e5:ac:cb:91:bf:60:74:16:46:93:de:
         2f:fb:a4:c9:04:f5:be:0f:57:71:eb:10:06:61:53:0d:57:dd:
         95:1a:c2:87:00:dc:95:c4:e6:61:a1:56:a7:ca:81:7d:d6:42:
         98:4b:5a:1a:7e:d5:23:39:da:5e:cc:03:52:34:e1:1c:18:27:
         e0:59:2c:98:4a:76:dc:fc:45:53:f4:c6:dc:9d:81:3c:3e:bc:
         2b:09:cc:43:e3:93:88:2a:c5:4e:0f:a7:e7:f5:c1:a5:54:8d:
         ba:c3:00:35:84:df:71:b5:95:94:80:9e:1b:3a:d6:21:05:45:
         e7:3d:4b:ce:9d:7a:37:77:eb:78:b3:af:ce:21:56:36:d8:d3:
         d0:0f:ab:ff:0f:51:30:d0:8c:bb:1b:ed:24:3a:d5:ef:4c:2a:
         f1:0e:49:96:7d:be:b2:f9:3a:44:08:dd:bb:77:d8:0a:55:54:
         13:2e:97:36:b2:35:1f:89:0b:d1:ef:fd:54:c4:d4:34:8c:34:
         84:6b:dc:c5:8a:c0:62:f7:11:11:eb:45:83:3c:f5:62:07:fd:
         d8:84:34:dc:46:90:8c:ad:a3:41:bb:69:ce:96:5c:db:92:1f:
         1b:30:81:95:1c:48:e7:c3:18:15:42:ae:40:ba:13:95:3b:7a:
         2e:94:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:33 2024 by rpki-client on console-fra.rpki-client.org