Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File:                     qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier:          a8VLRtAJutWtaalpc7XNAfSsJSy3gRgivMyEsjD2fak=
Subject key identifier:   B8:3E:07:F0:9E:D3:D8:EB:6E:18:FF:A4:B6:B1:AF:6F:D8:E4:5A:94
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer:       /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial:       0193568A803A07C7341F935A73ADF3BD389B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number:          06E4
Signing time:             Sat 23 Nov 2024 01:02:17 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:17 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:17 +0000
Files and hashes:         1: VN1FibBp6jqxu1WeXWndv68pjgg.roa (hash: 6gv/PJdscsS/2fC767/FG5uad1GDkzom6fUIH72is+M=)
                          2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: yDKS2Gg++io7qAxCb72Qz7BTKPxNnQ8NRbH14Y1McsI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:80:3a:07:c7:34:1f:93:5a:73:ad:f3:bd:38:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
        Validity
            Not Before: Nov 23 01:02:17 2024 GMT
            Not After : Nov 24 01:02:17 2024 GMT
        Subject: CN=b83e07f09ed3d8eb6e18ffa4b6b1af6fd8e45a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:07:7f:d8:a8:dd:53:01:26:47:59:bd:e7:
                    93:70:92:89:52:fe:0d:f3:9e:8d:e6:2f:63:69:94:
                    2c:c9:f5:18:ad:d6:b1:16:cc:b9:a2:41:12:84:14:
                    53:22:56:e4:f0:8b:6e:b5:65:40:a4:20:67:51:6e:
                    94:3c:4d:1e:93:b3:ba:98:65:fc:d4:2f:93:a4:13:
                    df:d1:ff:e7:96:6c:32:4d:f5:94:44:b8:bd:1e:2c:
                    43:c8:d8:d3:80:f8:70:88:9b:8a:b1:e8:93:c5:aa:
                    8c:f4:03:58:74:e0:80:08:5d:c3:2b:23:3a:1b:57:
                    00:32:a5:33:37:da:ba:90:da:92:bf:e5:dd:b9:27:
                    3f:fd:b4:dc:a0:66:07:25:fe:50:a7:b1:4a:50:66:
                    b1:2c:4b:90:e4:f4:8a:e7:f3:cc:05:ae:b0:b0:f8:
                    1f:f1:dc:6a:64:46:81:14:2d:e9:8c:a1:dc:51:b8:
                    4a:99:e4:3b:7f:dc:7f:fb:4e:eb:a4:04:76:43:2c:
                    60:63:c5:48:a0:63:e2:a0:5e:61:f3:1d:8a:f0:98:
                    a8:0b:50:b8:43:5d:ec:1a:b6:fd:8e:89:ef:9c:62:
                    9e:81:c2:55:3a:b6:7d:aa:94:b4:86:2c:0b:52:77:
                    c4:4a:4c:02:c5:78:97:e5:2e:9e:19:29:33:98:c3:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3E:07:F0:9E:D3:D8:EB:6E:18:FF:A4:B6:B1:AF:6F:D8:E4:5A:94
            X509v3 Authority Key Identifier:
                keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a9:19:7c:7e:52:6b:8f:ce:3e:ed:51:52:d4:5a:4b:94:6a:
         ae:3e:3d:56:b4:0d:0e:c7:9a:87:30:8d:1c:8c:a9:6d:21:38:
         84:f6:a4:3e:bf:02:bd:1b:01:ce:1c:af:e3:60:05:0f:2c:63:
         4b:f3:3b:1a:96:27:d7:08:c2:35:82:5f:20:7b:cc:ab:11:0e:
         e7:60:59:26:0d:d9:84:f3:cc:23:33:c2:1b:2d:27:b1:2e:c5:
         80:c1:95:b8:a5:b0:97:18:df:3d:cc:57:61:15:ed:d7:96:5e:
         90:f0:db:3d:6f:83:85:d4:37:80:87:6e:25:66:eb:f6:61:e3:
         66:73:5d:28:81:35:83:47:c5:f9:54:93:c5:2c:b0:49:1c:61:
         47:1b:41:28:00:e9:db:3d:09:d9:0f:9a:b4:ea:4d:88:dd:90:
         e4:97:60:c3:e5:0d:b1:95:4e:81:1b:57:2d:cc:08:94:66:6a:
         20:a8:9d:b0:34:ee:b8:78:7e:6a:47:41:43:32:4a:42:82:d3:
         6f:d7:15:c3:6a:26:b9:09:5d:3d:a6:1b:fd:47:e7:02:07:40:
         4d:34:9f:cb:d7:4c:58:b5:fb:1e:ea:84:b0:18:3d:ee:e9:9a:
         c4:b9:f6:9f:04:ed:98:40:59:8e:f1:23:69:31:5d:cc:81:b0:
         fa:76:56:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:14 2024 by rpki-client on console-fra.rpki-client.org