Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File:                     QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier:          YJuHOqmBhbs5ckUMdiUo0kAV+56V+3GU9Bo/dsldfDk=
Subject key identifier:   A0:CF:55:3F:E8:78:48:1A:AE:96:BD:B1:88:98:F7:6D:43:A9:A1:F3
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer:       /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial:       0193549B0A5E04F64C22A880483163E8D8C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number:          12CA
Signing time:             Fri 22 Nov 2024 16:01:07 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:07 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:07 +0000
Files and hashes:         1: 5BSBYHQxzMFexwDZi0j4fcP4wKM.roa (hash: Jyd1+ZpjF3fg7xSZuq9ureCZjS1kX632RpemQX1wbyA=)
                          2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: kvRYuo3ERVvT0r21KKNUIkmu78ZS6O6/mwSx6HWF9NM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:0a:5e:04:f6:4c:22:a8:80:48:31:63:e8:d8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
        Validity
            Not Before: Nov 22 16:01:07 2024 GMT
            Not After : Nov 23 16:01:07 2024 GMT
        Subject: CN=a0cf553fe878481aae96bdb18898f76d43a9a1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:65:34:ed:7c:0d:4d:62:f5:77:c6:86:00:
                    50:98:a6:ea:50:eb:b0:c2:ee:0a:5b:41:a8:84:b9:
                    ca:0b:cb:06:60:7b:49:60:ea:54:ac:4c:73:6d:41:
                    2b:82:d4:81:37:db:6d:ca:43:34:96:f3:a9:c8:ae:
                    e6:74:29:37:9c:25:26:d3:fe:b4:9d:66:0d:d2:2a:
                    e1:e8:13:41:9c:88:fe:eb:71:69:86:f2:66:1c:99:
                    cd:2e:fc:f4:6d:10:fc:fe:c9:44:88:6b:33:f2:5a:
                    13:12:a3:5a:12:b1:17:0d:a6:6b:57:c8:73:02:e1:
                    e6:86:68:6c:6e:09:6a:d1:63:1b:7b:5e:af:49:27:
                    da:77:4f:ae:57:a6:b8:a1:b1:e3:41:c1:a4:cb:5d:
                    4b:bd:87:b5:08:89:10:b2:57:09:aa:ce:d4:7f:18:
                    31:9d:ed:e4:56:6e:46:b6:ea:d1:20:0c:d2:ec:bb:
                    b8:92:13:d9:56:5c:53:99:24:75:cf:61:01:2f:ac:
                    be:84:5b:ba:bf:0b:35:9a:57:9e:eb:8c:0c:47:12:
                    14:45:64:4f:31:b2:b6:c0:f7:fe:bc:61:f3:ab:8a:
                    80:b6:37:13:1e:ac:e2:70:0e:2b:62:30:97:a1:dc:
                    8c:68:69:05:c7:35:56:bd:5a:ac:47:be:ed:e1:3c:
                    6e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CF:55:3F:E8:78:48:1A:AE:96:BD:B1:88:98:F7:6D:43:A9:A1:F3
            X509v3 Authority Key Identifier:
                keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:61:92:9f:97:31:04:e4:97:36:e9:c8:7a:ee:96:2b:6d:26:
         59:79:75:77:55:c2:68:94:27:a1:6c:f4:3f:8d:5a:6d:e9:10:
         80:b2:0e:20:99:92:20:12:e6:d6:1e:1a:26:8a:2c:f1:ea:a5:
         01:d0:c8:4d:0e:7f:8f:88:98:01:a5:28:d8:31:04:60:af:22:
         30:5d:32:e4:67:4e:df:19:05:31:81:a4:ab:65:ae:b2:9d:84:
         20:4d:6e:96:25:94:2d:3f:a6:a2:39:7f:e4:d9:13:9e:f4:ef:
         93:f9:8d:85:fb:72:6d:28:bd:69:cf:ae:fe:04:14:8c:31:84:
         fe:ec:a9:78:6d:6e:fc:e8:b1:b6:8e:26:7a:f7:a3:cc:13:bf:
         44:3f:7d:a1:b9:f3:34:f3:97:87:be:1b:05:00:ae:1f:97:25:
         68:02:f1:87:53:32:dd:45:ba:d5:8e:0d:92:9a:ed:f1:65:85:
         27:a8:dc:a7:6e:f8:93:b8:e7:e7:95:df:e5:24:f3:26:4b:c4:
         9b:26:59:22:e6:49:b6:87:6c:2b:bc:16:80:64:b4:21:6d:39:
         b2:f0:3b:a9:0a:fc:66:37:f5:49:ba:3e:9a:02:fb:ac:f1:21:
         b4:f2:3d:3f:3f:08:6b:7a:18:83:1a:3c:49:10:fe:80:ff:00:
         5b:82:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:30:24 2024 by rpki-client on console-ams.rpki-client.org