Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File:                     CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier:          JZzE6ehbVDll+N6MTqTF/GLUMOCJ18L+tfS/W+0XrM4=
Subject key identifier:   F1:8D:96:E8:4F:07:93:33:75:B9:ED:3F:AD:B3:4F:23:AC:2A:75:A8
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer:       /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial:       0193568A19DE702C979D4242A58F50345498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number:          1204
Signing time:             Sat 23 Nov 2024 01:01:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:51 +0000
Files and hashes:         1: BdIvvSKtoO61Mm09j1q4N44n5dw.roa (hash: oHHuSs7VPyUBvVsyfnOsrEQ6A0NkfQzz0U16iFCu/Mw=)
                          2: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: N47o1ZzFx4Xj9R6C/3vFskyt2GPBUVwgQsIUlYTuS+Q=)
                          3: ao45pnomhvoUWN-ZIkGZU_Txwr4.roa (hash: e65/rhjh/drm3mtDAz3S+/FPm1NTSoV6J/nAiVO7pgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:19:de:70:2c:97:9d:42:42:a5:8f:50:34:54:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
        Validity
            Not Before: Nov 23 01:01:51 2024 GMT
            Not After : Nov 24 01:01:51 2024 GMT
        Subject: CN=f18d96e84f07933375b9ed3fadb34f23ac2a75a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:66:bb:31:29:12:37:8c:72:4d:5f:77:51:
                    6d:2b:4e:8a:b9:dc:5b:9d:e7:c4:4e:1b:cf:a5:ac:
                    07:e8:a4:2e:a8:cf:cb:b4:f8:f4:da:59:1f:82:6e:
                    ae:1d:b1:81:b0:01:12:be:df:6b:8e:aa:2d:fd:e9:
                    b6:d1:5e:23:03:e1:fe:9f:f1:e0:a8:23:22:1f:62:
                    c7:a2:c6:91:da:16:5c:74:2c:80:74:45:aa:c4:1d:
                    94:0f:21:a2:61:73:f0:41:ab:81:12:02:41:9d:98:
                    b1:ef:57:ea:92:f2:98:ce:96:3f:1d:e1:da:b1:12:
                    43:c2:46:6a:cc:4e:24:6e:08:72:5a:9f:95:22:63:
                    af:c6:13:4c:9f:3b:87:f8:b6:43:7a:74:e3:9b:fa:
                    54:e8:43:94:9f:e7:dd:fd:2d:66:05:18:9b:35:c3:
                    cf:0d:36:fd:05:63:4d:4c:a0:bd:1f:95:0c:44:b1:
                    31:4b:2c:22:23:fc:09:d2:a0:84:a1:2c:10:32:1e:
                    ee:4b:d2:7b:11:8b:37:0c:8e:5e:80:8d:42:b8:17:
                    b3:03:97:17:eb:e8:a0:07:cf:14:e7:d7:8a:04:6e:
                    83:f4:0d:4d:31:47:22:fc:55:5a:80:ff:a6:84:0e:
                    fb:e3:53:90:c3:df:f9:15:fa:fd:02:79:94:5a:ef:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8D:96:E8:4F:07:93:33:75:B9:ED:3F:AD:B3:4F:23:AC:2A:75:A8
            X509v3 Authority Key Identifier:
                keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:42:9f:cd:d6:9a:78:67:fb:5b:27:41:8c:04:3c:60:fd:2d:
         5f:83:b6:18:42:a4:ac:6c:be:34:ab:5c:00:80:9e:b1:54:4e:
         92:a1:d5:a6:dc:8f:59:b8:b6:16:5d:96:31:06:0d:c5:5b:98:
         a1:8d:d9:41:5b:84:cb:0e:68:64:87:83:48:30:e8:70:6a:45:
         3e:08:38:20:d8:e9:ca:09:a7:49:70:2b:d0:41:3b:98:df:09:
         21:fb:73:36:a5:77:dd:d6:88:d0:dd:2a:18:7b:1c:23:94:82:
         36:9c:3c:39:9f:ea:e9:ac:25:7b:55:6b:43:54:a1:06:67:1d:
         77:63:91:a6:70:4d:2c:f5:7e:f0:92:98:e2:1c:25:a8:ea:c9:
         81:b8:3e:d4:64:23:6e:94:c1:a2:17:ba:96:27:2b:1a:0d:7b:
         51:f3:9e:66:92:4d:da:ce:66:d8:20:5d:61:34:23:1f:c9:cc:
         a8:6e:05:ed:68:e3:45:db:35:74:24:39:10:95:1f:b4:81:0c:
         6d:7b:f3:7d:30:5c:53:3f:93:c5:db:ab:5a:5b:4c:b5:62:cf:
         09:2e:06:0b:b1:ad:f8:31:65:c0:91:07:1a:b4:06:4b:e8:6d:
         e7:12:5f:02:1b:ab:a1:d7:5e:1a:c9:1a:eb:04:03:f0:f7:7a:
         c7:90:ed:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:50 2024 by rpki-client on console-ams.rpki-client.org