Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File:                     QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier:          sVA4oCrY4iPDzLJ7yVZZ0mJnon2q+HJqkqxdTbkLzS8=
Subject key identifier:   BB:73:95:9C:21:BF:C3:E9:07:27:9C:07:79:F4:4D:DA:FD:77:C6:27
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer:       /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial:       01935689438A5FB5DCFACAC356983C74ECFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number:          08CD
Signing time:             Sat 23 Nov 2024 01:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:56 +0000
Files and hashes:         1: 1-jTWVKxBcP6qjaCAIgMBCMozFc8.roa (hash: Hx/TwuJTISSuPiIvrbhm8okpSwo2m2EjNcFhW3s6mJA=)
                          2: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: Tq95CHE/jaM3fu90uIDYIUWo5NrSpKmbvGbKFQGCNsc=)
                          3: lQXhpnFLI5YkccgLPtvbcReVVzc.roa (hash: L/biA6CVarpej993uJ6JST46F0UgZyskzGnR01icsMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:43:8a:5f:b5:dc:fa:ca:c3:56:98:3c:74:ec:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
        Validity
            Not Before: Nov 23 01:00:56 2024 GMT
            Not After : Nov 24 01:00:56 2024 GMT
        Subject: CN=bb73959c21bfc3e907279c0779f44ddafd77c627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:c7:00:b3:47:4b:2d:01:54:07:c3:10:fe:
                    75:ea:03:f8:70:f4:3c:bc:14:be:60:12:9d:a8:31:
                    ac:06:1e:48:01:78:a7:18:11:ce:25:63:d2:85:6a:
                    74:9f:ce:f8:4e:e4:c5:28:92:b8:f4:28:8c:f7:87:
                    3e:d2:8c:b8:2d:08:6f:77:02:8e:45:c4:a5:e2:fa:
                    de:46:b8:e6:10:d6:18:00:19:9b:43:d8:86:34:93:
                    12:0b:9f:d2:5b:a8:09:51:8e:9b:bc:c1:48:30:77:
                    41:a9:5d:5f:8f:71:b2:71:4e:db:0c:33:ca:2b:c2:
                    45:7b:b4:05:61:02:cb:46:63:2c:bc:39:fb:29:36:
                    89:e8:f4:88:c8:6e:e8:20:88:72:9c:c2:16:00:50:
                    3d:7e:a2:67:3b:22:4c:a3:52:cc:3c:ba:86:fc:ca:
                    33:ba:3f:32:33:dd:be:c6:3c:d7:b3:ec:81:02:3a:
                    76:f6:55:fe:55:19:dd:70:30:d1:2d:2b:18:92:ee:
                    88:e8:0d:dd:3c:44:d9:8c:1b:0e:7e:b4:43:1a:29:
                    f3:36:75:32:c7:58:87:09:51:16:ba:b3:6c:52:f7:
                    8e:72:44:9a:62:6d:aa:04:b7:90:de:de:a4:a0:55:
                    e8:33:62:93:f6:b4:e5:f9:16:b5:b3:72:45:86:0c:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:73:95:9C:21:BF:C3:E9:07:27:9C:07:79:F4:4D:DA:FD:77:C6:27
            X509v3 Authority Key Identifier:
                keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9b:1c:46:cb:ae:7c:4a:78:72:4b:9c:f4:b4:a2:29:8c:b5:
         15:88:77:fd:9d:79:3d:93:fa:48:35:8f:49:99:b7:17:36:cb:
         36:61:c5:2f:8f:2c:2d:6f:ae:c6:78:8b:a6:ce:9d:1c:e7:a1:
         ab:1d:0a:b3:2d:7c:20:73:e2:4a:5e:9b:b9:8e:5d:6e:fb:09:
         6f:b2:64:29:96:33:b3:95:e6:87:de:61:d6:ca:b2:b4:0e:dc:
         a9:e4:83:fb:66:af:68:fa:69:5d:e0:32:f9:0d:dd:9d:26:36:
         0f:50:22:cb:69:17:d5:a5:19:8e:cb:66:eb:01:34:fd:7a:72:
         d3:7e:90:76:e9:3b:d5:eb:b4:9b:80:65:2f:19:71:03:cd:2d:
         93:df:e9:e0:0c:ad:0c:2f:da:ee:ec:7f:9a:13:66:e3:c4:2f:
         90:5e:eb:e0:bc:0d:4d:b4:f2:d3:41:14:9d:95:85:6b:91:65:
         4d:5b:e6:76:89:29:12:7f:4b:c2:17:f2:98:b6:af:1d:83:5a:
         5d:4c:66:3b:e9:d8:74:6d:d9:78:b5:cc:e0:6f:e9:20:93:5a:
         02:84:e8:69:22:61:40:e4:77:95:e9:8e:51:98:cc:d8:7d:ae:
         c5:e2:32:b4:64:8e:e9:d4:9d:97:03:fe:e0:5b:6c:d5:d6:0e:
         7b:96:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:27 2024 by rpki-client on console-fra.rpki-client.org