Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File:                     qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier:          j9pJ231vcA4a5G4xpHhQ2iOe7qFH52VhOaOG06/bP6w=
Subject key identifier:   B7:10:8E:75:98:54:FD:B5:F9:A2:AB:34:E9:53:2B:19:4F:0D:C8:D6
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer:       /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial:       0193568ACF88E1092FBC1973E8B6D59723D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number:          0626
Signing time:             Sat 23 Nov 2024 01:02:37 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:37 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:37 +0000
Files and hashes:         1: fWA6gfjGNfVmUIhS-Wyiz7NFx2Q.roa (hash: sAcjgthsqM9uYhWCylT+9oS6kRfZAzv5mZVci8aOheA=)
                          2: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: v4PkRJsVUpgSgIPaen1a+5dhgZC90QSoQWE9NXRfUXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:cf:88:e1:09:2f:bc:19:73:e8:b6:d5:97:23:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
        Validity
            Not Before: Nov 23 01:02:37 2024 GMT
            Not After : Nov 24 01:02:37 2024 GMT
        Subject: CN=b7108e759854fdb5f9a2ab34e9532b194f0dc8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d2:16:2b:5f:5b:34:1a:4b:30:ee:9d:8c:cb:
                    d3:a3:93:ae:9e:c6:c9:1b:85:6f:c6:be:9c:4b:95:
                    9b:ef:c0:1c:67:7c:20:68:f1:6d:92:8c:08:b7:4e:
                    08:84:21:65:55:35:94:f2:bf:97:82:72:96:5c:3d:
                    44:d9:7c:d0:fe:ff:3b:d2:0d:10:10:76:67:e8:0d:
                    5e:3c:43:61:49:67:41:cc:26:9f:bd:c1:4f:8d:a9:
                    a1:e0:86:31:31:b6:0d:92:24:d5:b2:ac:42:be:3a:
                    b1:d2:b9:3b:f8:82:65:3d:af:5d:73:b9:3d:93:dc:
                    42:2d:e4:f7:48:02:82:19:43:50:4c:5b:26:69:c0:
                    e1:0a:8a:45:5f:b8:a1:88:08:48:c5:b4:bd:a0:6b:
                    7f:33:16:98:10:f8:95:05:74:e7:c2:7c:93:23:45:
                    ab:91:90:ac:c9:b5:f0:ae:57:ba:d9:62:28:88:b7:
                    a1:40:2d:b1:15:33:8d:4b:ae:1f:15:6e:d2:97:ee:
                    3b:e2:ad:a7:68:4b:92:1a:4d:96:0f:13:96:cb:03:
                    86:d2:f1:e6:1b:a4:9d:f5:b2:7c:a3:27:85:f1:7e:
                    05:68:4b:25:9c:a5:74:35:8e:10:08:f0:31:71:6b:
                    2f:88:10:c8:aa:34:b8:7d:9f:7a:14:f7:c4:5d:09:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:10:8E:75:98:54:FD:B5:F9:A2:AB:34:E9:53:2B:19:4F:0D:C8:D6
            X509v3 Authority Key Identifier:
                keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8e:78:4f:2b:97:bf:1b:6e:ef:dc:89:83:d3:ca:46:52:76:
         8e:50:f4:eb:ae:0d:e9:1e:4f:24:69:08:a3:c3:a5:d4:56:54:
         9e:4a:6b:07:dc:ed:48:48:25:a6:f1:df:08:49:32:8d:2b:b3:
         0a:2f:ff:74:98:0f:9e:7d:5a:68:7e:aa:d4:6a:fa:6c:c7:ba:
         45:7b:95:8a:be:96:49:52:4f:44:74:d3:b4:fd:de:2e:4c:95:
         58:59:0b:e0:6b:49:9e:43:c1:82:a4:74:45:ca:c3:c3:27:02:
         1f:1f:73:98:fa:20:dc:5d:d5:a0:08:38:ff:52:ea:ef:11:e1:
         01:5a:b4:f8:2a:48:8e:23:87:8a:38:39:a9:a6:a5:75:26:32:
         c2:d4:f2:c4:89:3a:fa:be:ee:1f:b9:54:91:36:f3:46:d9:a3:
         c7:76:dc:82:45:ed:13:a7:ee:76:1f:59:cb:4d:51:c1:77:c6:
         e3:1e:38:2c:65:80:1f:64:21:dd:b6:08:98:20:b9:f4:b6:ca:
         15:63:14:55:d4:70:7e:80:0d:34:24:4e:3a:b2:d7:80:72:a0:
         57:09:28:08:fa:39:ec:85:90:ba:a0:f7:74:7d:dc:07:24:39:
         a8:9a:6f:ae:11:f4:68:da:55:90:a7:4c:c5:cd:e7:d7:aa:53:
         b1:72:6c:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWis+I4QkvvBlz6LbVlyPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NjhhZGYxMjBhNzRhNWQxMDgwOWNmZDNjYjY4MTRmYzg5
YjFmNDYwHhcNMjQxMTIzMDEwMjM3WhcNMjQxMTI0MDEwMjM3WjAzMTEwLwYDVQQD
EyhiNzEwOGU3NTk4NTRmZGI1ZjlhMmFiMzRlOTUzMmIxOTRmMGRjOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydIWK19bNBpLMO6djMvTo5OunsbJ
G4Vvxr6cS5Wb78AcZ3wgaPFtkowIt04IhCFlVTWU8r+XgnKWXD1E2XzQ/v870g0Q
EHZn6A1ePENhSWdBzCafvcFPjamh4IYxMbYNkiTVsqxCvjqx0rk7+IJlPa9dc7k9
k9xCLeT3SAKCGUNQTFsmacDhCopFX7ihiAhIxbS9oGt/MxaYEPiVBXTnwnyTI0Wr
kZCsybXwrle62WIoiLehQC2xFTONS64fFW7Sl+474q2naEuSGk2WDxOWywOG0vHm
G6Sd9bJ8oyeF8X4FaEslnKV0NY4QCPAxcWsviBDIqjS4fZ96FPfEXQkz2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcQjnWYVP21+aKrNOlTKxlPDcjWMB8GA1UdIwQY
MBaAFKlorfEgp0pdEICc/Ty2gU/Imx9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2It
ODBjZTQ1ODYxMjM5LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2ItODBjZTQ1ODYxMjM5
LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG454TyuX
vxtu79yJg9PKRlJ2jlD0664N6R5PJGkIo8Ol1FZUnkprB9ztSEglpvHfCEkyjSuz
Ci//dJgPnn1aaH6q1Gr6bMe6RXuVir6WSVJPRHTTtP3eLkyVWFkL4GtJnkPBgqR0
RcrDwycCHx9zmPog3F3VoAg4/1Lq7xHhAVq0+CpIjiOHijg5qaaldSYywtTyxIk6
+r7uH7lUkTbzRtmjx3bcgkXtE6fudh9Zy01RwXfG4x44LGWAH2Qh3bYImCC59LbK
FWMUVdRwfoANNCROOrLXgHKgVwkoCPo57IWQuqD3dH3cByQ5qJpvrhH0aNpVkKdM
xc3n16pTsXJs6g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:45 2024 by rpki-client on console-ams.rpki-client.org