Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File:                     Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier:          oMzZghmRzDO5cLYV886ZCLOX/yPVeWZq6uvG/3leuus=
Subject key identifier:   44:4E:4B:B4:3F:AE:D9:02:8B:11:A0:1F:6F:75:50:79:47:A3:48:B3
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer:       /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial:       0193579B859FAC6595B4BFC70028167DD452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number:          06C5
Signing time:             Sat 23 Nov 2024 06:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:30 +0000
Files and hashes:         1: GbsJvtplpWaPoPiz_x2fVSFUrPY.roa (hash: yfh+9320wjoBW4Bo4VTRcsZ6IugcrcoZ4UL35SwIRTc=)
                          2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: EuJbP6P0kE7xh4VhTaaLXsKdzyM4Pnu1z/+l5C71DgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:85:9f:ac:65:95:b4:bf:c7:00:28:16:7d:d4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
        Validity
            Not Before: Nov 23 06:00:30 2024 GMT
            Not After : Nov 24 06:00:30 2024 GMT
        Subject: CN=444e4bb43faed9028b11a01f6f75507947a348b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:81:26:c0:fb:cb:59:c3:18:d9:36:99:26:
                    72:b2:9e:b8:98:68:24:24:08:05:77:66:4d:f7:63:
                    93:64:cc:aa:9d:24:80:9d:ff:e9:73:2c:c9:8a:a9:
                    8f:9f:8b:f2:3d:53:e1:82:6c:ed:3e:2a:37:87:aa:
                    df:40:ff:f2:81:33:a0:24:e9:c1:70:84:cd:e7:4e:
                    4d:fa:c6:2e:40:05:48:a1:fe:27:72:9b:5d:33:ea:
                    3f:03:55:b1:a2:41:89:23:0e:9c:1d:3d:68:81:9c:
                    7a:78:ca:5b:61:a5:4f:a4:4f:48:c3:86:14:94:59:
                    17:43:3a:d3:81:a1:77:ae:b9:5d:20:ee:23:b7:71:
                    07:da:85:da:f9:aa:41:ec:fc:07:0a:73:fd:f5:a9:
                    ae:2c:cb:53:0b:84:67:58:3d:e6:99:30:7a:f6:b0:
                    23:b6:13:29:31:6c:5a:66:9d:99:6f:ec:d4:9c:89:
                    59:ae:02:59:9d:49:be:dc:70:fa:ab:01:85:05:49:
                    da:33:85:fd:f6:c2:0e:52:9a:e4:6d:c9:be:ee:44:
                    fb:1b:30:04:4a:bb:f3:53:58:ab:a2:78:67:3e:82:
                    55:50:6d:88:61:94:94:dd:62:17:6c:c9:ae:bc:1e:
                    c3:8a:61:bf:a8:44:c9:4f:a1:f6:23:9e:fc:c3:bd:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4E:4B:B4:3F:AE:D9:02:8B:11:A0:1F:6F:75:50:79:47:A3:48:B3
            X509v3 Authority Key Identifier:
                keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ce:23:69:78:28:b9:ab:b7:0d:c5:0d:f4:d2:25:de:6a:56:
         f8:c5:6c:a9:37:43:34:4f:83:8f:5a:e4:29:7e:c8:06:51:7a:
         71:71:13:46:cf:a3:38:47:14:50:03:46:74:63:2c:d9:51:d7:
         e7:9f:6d:b2:9a:61:24:04:fb:db:cf:7b:82:dd:d4:f9:96:5a:
         ae:3b:c8:15:fd:a9:a0:7c:bc:a9:d4:b4:75:48:9f:fb:7a:e0:
         07:d8:4b:53:ef:4f:98:07:01:a0:e1:b0:07:dd:34:2f:41:76:
         7f:6c:f2:8c:df:3d:36:f6:13:11:6f:bb:cf:c7:c1:98:4e:0b:
         17:b6:4f:e2:1c:91:a9:ef:e7:75:e2:a6:7a:7b:e7:90:3a:d0:
         e3:53:56:ce:69:6a:bd:fc:ec:88:fa:06:4d:8f:7b:26:c0:2b:
         b2:95:e7:b1:0b:e0:a0:d9:58:fd:12:8a:1b:95:96:e0:c2:9c:
         62:8c:7d:62:92:65:4a:8a:f0:23:cf:c6:bc:06:df:cf:50:95:
         fa:38:2c:32:77:76:58:f2:fd:54:8c:98:3a:c0:ec:a2:32:28:
         42:38:de:69:e5:16:b5:be:9a:43:f3:a8:10:fa:10:95:9f:34:
         dd:d2:7e:74:80:aa:8f:8c:68:ea:44:cf:4a:c5:b3:10:1d:08:
         bf:cb:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:01 2024 by rpki-client on console-ams.rpki-client.org