Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File:                     pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier:          UpJhw4VgEBBFY5s5RmfXBJNrGocIV4OQf8VZTTk+GYg=
Subject key identifier:   8F:0B:5A:83:49:C8:83:88:66:CE:A5:73:F8:B4:07:6E:0A:00:AC:2E
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer:       /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial:       0193553F790547EF1D5AD3DA5B06367DB7E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 19:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:43 +0000
Files and hashes:         1: 8zY5kq-x0c0Dbl-Nw3VfrEQC9bo.roa (hash: WTS5EjqZjG2KxRL9l0rsG0uUNodfXGxr+wBoX9COT8E=)
                          2: Lg-UqvJ7mB9s1Ec_INtlLyWe9p4.roa (hash: JsyrggCYQvVNcgceeDKV5EgJ925GRY4Kudy6Ygryxgk=)
                          3: Vn39jm42pLwbj2yOKKQ68Oxhyic.roa (hash: rxTLAzr4jnzYrINFXI8uZ7CWbofGDh+1Uu/IShDUcoo=)
                          4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: a9oIR7rL3sOKCi2pX5ACCY4mY4hL1ocftsrCIa4+6EQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:79:05:47:ef:1d:5a:d3:da:5b:06:36:7d:b7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
        Validity
            Not Before: Nov 22 19:00:43 2024 GMT
            Not After : Nov 23 19:00:43 2024 GMT
        Subject: CN=8f0b5a8349c8838866cea573f8b4076e0a00ac2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:1f:ac:0b:6e:2b:e8:9f:1f:be:a8:8c:68:
                    cb:94:a9:06:49:e3:e9:2e:81:70:b7:aa:a2:f0:28:
                    85:f1:16:ae:a0:a9:a7:49:b3:ff:18:36:5f:3b:40:
                    1f:af:6f:5e:35:8b:6b:c7:40:43:91:75:81:98:65:
                    e0:63:a4:75:14:4c:a3:fe:c9:b6:2f:1c:73:6d:3d:
                    21:02:df:6c:ea:c0:1f:19:6a:70:31:fc:3d:64:f7:
                    5b:88:bb:d4:a9:5c:c7:c9:8b:09:80:0a:7b:70:ef:
                    4b:dd:20:90:f9:51:d1:9a:0b:4e:bd:09:06:29:cc:
                    12:0e:68:1b:aa:82:d0:d0:7c:08:c4:0c:54:25:c7:
                    6d:72:ef:6f:b8:e6:1b:d9:39:0c:57:38:f8:3d:24:
                    f5:3f:13:56:b9:8c:29:90:0d:80:e5:ef:9f:90:9b:
                    3b:85:28:cc:36:f3:c0:28:cc:ef:7e:23:db:16:b0:
                    7b:0c:03:92:9b:3c:b6:91:8e:19:a9:90:5d:3a:f0:
                    32:66:6e:6f:07:45:94:a2:e6:8c:35:59:d9:23:99:
                    7b:e3:64:2d:ce:2b:91:32:54:2a:ae:86:02:3a:bf:
                    5c:6d:49:bc:db:5f:dd:6a:c4:ae:07:ce:5a:34:81:
                    e7:a8:f6:b9:06:9e:b0:2f:16:d4:e1:b5:c1:9e:2a:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0B:5A:83:49:C8:83:88:66:CE:A5:73:F8:B4:07:6E:0A:00:AC:2E
            X509v3 Authority Key Identifier:
                keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bc:d3:4a:4d:42:1f:87:4c:15:fe:17:3d:f0:69:fd:4b:0d:
         3e:7f:f0:f0:71:88:e3:8f:f1:1c:9b:87:c1:84:80:bb:f8:f0:
         d6:ed:15:2f:23:81:5b:f1:c2:6b:ca:61:e0:1e:f7:8c:39:54:
         7f:40:74:79:9f:62:ed:20:36:34:68:0d:da:af:f9:b3:56:e0:
         7f:45:68:8c:73:09:59:e6:97:98:71:db:fb:f0:f1:a2:d1:2f:
         e7:bd:aa:50:67:c3:14:a3:62:88:d0:c2:70:f8:3f:51:52:16:
         b2:5e:2e:6d:70:17:72:5c:25:c2:f0:c5:28:29:88:bb:f4:f0:
         c5:ad:26:72:d0:1b:81:e7:13:73:07:b6:03:35:e8:17:f4:77:
         83:aa:8e:43:99:79:78:63:48:05:37:2d:b0:99:ab:b0:10:8d:
         d8:a2:d2:2c:a6:17:82:d4:6c:bb:24:a1:cd:ba:dc:f3:ce:f6:
         51:f5:b9:01:95:a5:b9:29:c3:8d:5e:15:48:92:4d:15:93:cb:
         22:bd:cc:31:e7:75:e9:ed:ab:9b:94:bd:fd:22:85:47:f0:a8:
         5b:da:30:b6:c9:5f:16:c7:66:77:40:24:ec:3c:63:c0:ae:52:
         3c:b7:1a:d2:08:1b:39:e4:a6:90:98:b5:4a:b3:d9:27:94:47:
         e9:23:e5:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP3kFR+8dWtPaWwY2fbfhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk
NzM2OWQwHhcNMjQxMTIyMTkwMDQzWhcNMjQxMTIzMTkwMDQzWjAzMTEwLwYDVQQD
Eyg4ZjBiNWE4MzQ5Yzg4Mzg4NjZjZWE1NzNmOGI0MDc2ZTBhMDBhYzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr80frAtuK+ifH76ojGjLlKkGSePp
LoFwt6qi8CiF8RauoKmnSbP/GDZfO0Afr29eNYtrx0BDkXWBmGXgY6R1FEyj/sm2
LxxzbT0hAt9s6sAfGWpwMfw9ZPdbiLvUqVzHyYsJgAp7cO9L3SCQ+VHRmgtOvQkG
KcwSDmgbqoLQ0HwIxAxUJcdtcu9vuOYb2TkMVzj4PST1PxNWuYwpkA2A5e+fkJs7
hSjMNvPAKMzvfiPbFrB7DAOSmzy2kY4ZqZBdOvAyZm5vB0WUouaMNVnZI5l742Qt
ziuRMlQqroYCOr9cbUm821/dasSuB85aNIHnqPa5Bp6wLxbU4bXBnip+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8LWoNJyIOIZs6lc/i0B24KAKwuMB8GA1UdIwQY
MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt
OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx
LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrzTSk1C
H4dMFf4XPfBp/UsNPn/w8HGI44/xHJuHwYSAu/jw1u0VLyOBW/HCa8ph4B73jDlU
f0B0eZ9i7SA2NGgN2q/5s1bgf0VojHMJWeaXmHHb+/DxotEv572qUGfDFKNiiNDC
cPg/UVIWsl4ubXAXclwlwvDFKCmIu/Twxa0mctAbgecTcwe2AzXoF/R3g6qOQ5l5
eGNIBTctsJmrsBCN2KLSLKYXgtRsuyShzbrc8872UfW5AZWluSnDjV4VSJJNFZPL
Ir3MMed16e2rm5S9/SKFR/CoW9owtslfFsdmd0Ak7DxjwK5SPLca0ggbOeSmkJi1
SrPZJ5RH6SPl2w==
-----END CERTIFICATE-----