Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
File:                     QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json)
Hash identifier:          nzKY0EyJqflHbT1suaiiq7Tk2zvIOa0sLQbW7KV/fas=
Subject key identifier:   9B:4F:08:54:D2:5D:E1:A9:CF:20:4F:C9:32:BE:6C:1D:DA:CE:84:75
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Certificate issuer:       /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial:       01936632A549D47D6C748F9FAA44C2012E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
Manifest number:          A6
Signing time:             Tue 26 Nov 2024 02:00:15 +0000
Manifest this update:     Tue 26 Nov 2024 02:00:15 +0000
Manifest next update:     Wed 27 Nov 2024 02:00:15 +0000
Files and hashes:         1: 8j338Pqjeiw3cZwEIaEJsvxAqQE.roa (hash: uY+hdkBMHmTrpW2cGWm55SHvsrbve4cRp9bvYqaCxgU=)
                          2: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: jOU2qDJgFKS+6L2C4I++u1puev6PJ0xMw3uM5GVMESM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:32:a5:49:d4:7d:6c:74:8f:9f:aa:44:c2:01:2e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
        Validity
            Not Before: Nov 26 02:00:15 2024 GMT
            Not After : Nov 27 02:00:15 2024 GMT
        Subject: CN=9b4f0854d25de1a9cf204fc932be6c1ddace8475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:07:32:ff:d8:96:e2:34:31:cf:f4:48:4e:50:
                    a7:3a:90:20:3f:d7:b8:ec:6f:14:eb:c9:3d:21:11:
                    8f:32:c8:0c:3a:98:2e:18:a9:24:1d:1b:ac:54:8d:
                    2e:88:77:d7:b7:c4:67:d0:e1:06:a0:51:dc:e8:f4:
                    ea:68:29:df:13:41:d3:b2:a6:2e:76:2b:48:75:7f:
                    5f:b6:6e:ba:99:1c:e1:27:56:5c:f8:b3:f6:cb:5a:
                    ea:93:ec:c6:5d:23:82:ee:b9:b6:87:ef:f9:39:46:
                    47:a3:d3:1c:7f:8a:f8:78:4d:c8:1f:57:89:8c:8c:
                    f7:97:7b:fa:a7:84:ec:40:ce:b0:30:89:af:95:21:
                    6b:32:f5:db:6b:5d:26:11:7e:9b:05:a4:ee:48:9f:
                    85:36:72:a7:d6:ed:a6:3d:80:9f:9e:0e:b0:76:db:
                    68:fd:ec:83:d1:de:08:8b:8f:e1:9a:24:3d:b5:15:
                    93:82:a3:7d:6a:27:6a:9e:15:76:41:50:e4:d7:04:
                    ab:f4:8b:2a:8c:2e:c5:e0:73:f2:8e:3d:a6:cb:c2:
                    df:54:99:53:1b:48:4c:a2:44:05:52:92:9b:64:ab:
                    2c:e6:bc:ff:7c:ef:d6:92:e4:de:6e:42:5f:51:16:
                    28:10:d3:32:91:df:09:28:7e:f0:63:97:0e:c7:d0:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4F:08:54:D2:5D:E1:A9:CF:20:4F:C9:32:BE:6C:1D:DA:CE:84:75
            X509v3 Authority Key Identifier:
                keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:84:df:9d:00:9c:80:6c:ab:13:d6:20:79:d0:98:d2:59:4c:
         3d:e7:6a:e5:60:0b:08:7d:d6:3f:2c:0f:7f:1e:e5:2e:61:57:
         32:6a:0b:bd:d7:f1:f2:eb:90:93:8f:1c:c0:b1:79:61:06:e6:
         d5:b9:f7:39:14:a8:19:f1:5a:4f:12:5d:a1:bb:ae:1c:3e:7b:
         ab:ca:dc:01:f5:14:14:1a:47:2e:01:ec:f4:9f:a8:5e:6e:72:
         7f:9e:1a:4c:13:dd:b3:24:83:65:c0:26:0e:cb:41:a9:20:cd:
         c9:63:0a:8a:ed:dd:78:bc:63:7f:6c:bb:57:26:4a:55:84:d7:
         31:55:78:78:e9:af:16:58:dc:91:92:16:ad:7f:5f:d9:51:7d:
         9c:07:21:52:0b:0e:70:78:ef:f5:68:c1:29:18:c0:89:51:2c:
         d0:d1:2f:cb:2d:4b:ac:af:2d:4d:df:d0:03:03:57:6c:db:83:
         20:5e:ca:5a:0b:79:19:7e:76:24:07:e3:a2:26:04:ca:19:e9:
         b3:ac:5c:c6:56:a8:4f:01:85:34:f2:73:be:8a:30:ea:46:fd:
         3f:ef:6c:08:f5:e9:23:04:b5:d5:20:b8:83:bf:9b:ee:27:51:
         5e:85:7f:1c:ca:dc:d9:43:ae:3a:2d:bf:14:2e:b0:52:73:dd:
         db:fa:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:20:07 2024 by rpki-client on console-ams.rpki-client.org