Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
File:                     2QqBMQKSV7_3YURI5va1A8Ersp0.mft (raw, json)
Hash identifier:          xMygmV88eJMsLsHqd40Us3rZKuPP2cdn3wJ+YZH01Yk=
Subject key identifier:   BE:C6:75:A9:F6:79:D9:C3:EE:C3:E5:55:6E:C6:5E:FE:83:6B:10:D8
Authority key identifier: D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
Certificate issuer:       /CN=d90a8131029257bff7614448e6f6b503c12bb29d
Certificate serial:       0194BABB79F016E6A2B0022AE4F75614ED67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
Manifest number:          FA
Signing time:             Fri 31 Jan 2025 05:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:36 +0000
Files and hashes:         1: 2QqBMQKSV7_3YURI5va1A8Ersp0.crl (hash: jt9hNsiDrfIm1Aa5tXqDJDwqa9zzFQexbglEtVnVGrg=)
                          2: ktw-FkrMXPNswM8IraWY-5p7J3I.roa (hash: jzXeR9Bv5fkU8m0kPMqZ57dXqdxvNx+7MlrJIZfIQC4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:79:f0:16:e6:a2:b0:02:2a:e4:f7:56:14:ed:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90a8131029257bff7614448e6f6b503c12bb29d
        Validity
            Not Before: Jan 31 05:00:36 2025 GMT
            Not After : Feb  1 05:00:36 2025 GMT
        Subject: CN=bec675a9f679d9c3eec3e5556ec65efe836b10d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:29:93:e3:42:77:26:49:dd:4f:e9:74:e5:
                    2b:88:af:d1:fd:ce:33:79:41:d3:f3:63:53:c3:92:
                    5c:48:4b:03:6c:94:ff:20:cd:be:bd:21:c1:f2:54:
                    b0:ae:f8:24:9a:10:81:7e:2b:fa:33:07:a3:f6:a8:
                    c0:22:52:aa:b6:9f:a4:e5:ef:53:d4:75:32:3d:81:
                    ea:a3:5a:62:a7:a5:f6:0e:5a:3b:23:3a:72:e0:70:
                    cf:63:9a:ed:40:15:fa:1a:bf:a6:d9:a2:18:f6:fb:
                    e3:18:5f:aa:66:f2:bf:e2:c0:42:08:87:f8:0c:a3:
                    b0:d6:96:b3:de:dc:07:0a:e8:a8:c1:1f:21:e7:15:
                    9c:b1:38:ff:46:45:a6:48:c0:8d:83:b9:2b:dd:34:
                    67:6b:d0:7c:87:ab:0a:cf:75:0b:e1:9a:20:05:15:
                    ca:ce:6e:df:d3:fc:3c:7d:15:58:ca:39:c7:ec:1f:
                    b8:66:23:6b:98:81:d1:f3:b4:f8:38:11:f5:1c:35:
                    5a:fa:76:77:64:ac:58:ad:92:7b:04:90:16:ca:f0:
                    2e:69:a7:37:2c:6a:55:b2:e9:23:84:b7:06:b3:25:
                    da:5b:4b:fd:ea:f8:96:e0:58:de:79:28:a5:6c:31:
                    4a:48:00:38:a4:48:5f:d2:5a:60:f5:60:ec:a3:26:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C6:75:A9:F6:79:D9:C3:EE:C3:E5:55:6E:C6:5E:FE:83:6B:10:D8
            X509v3 Authority Key Identifier:
                keyid:D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:80:2b:17:fc:6c:49:e2:98:47:5f:8b:83:0e:34:57:a5:9c:
         0a:61:28:c5:b2:98:8e:57:fd:a5:d2:fd:e4:27:79:35:b5:86:
         c0:10:94:c2:50:1d:6f:fd:eb:9d:05:ff:5f:76:68:c3:f7:9e:
         ff:26:e0:91:ef:50:a2:1a:24:ee:3a:3a:66:0f:5c:65:b6:98:
         55:b2:dc:ac:71:f0:14:8d:b4:00:2e:ed:7e:fe:84:34:aa:ac:
         29:5e:dc:4c:02:c7:92:fc:42:49:13:f7:36:7c:8f:7c:ea:ac:
         c1:e0:ad:58:ad:d5:c2:27:68:4a:6b:05:00:34:a1:7d:79:d2:
         a5:3b:76:30:d8:6c:96:3b:74:a5:9f:b2:3d:ef:1e:bc:ce:8c:
         4a:83:29:67:f1:36:24:2a:69:a1:25:71:c2:8c:0b:b7:d4:fa:
         62:26:e4:af:b8:75:16:50:85:98:75:f1:df:7b:4a:f6:ad:1e:
         0a:43:c6:81:4a:81:02:e8:40:cc:a6:f0:ab:fc:4d:51:73:e7:
         0a:77:ac:3f:0c:55:7c:ec:fb:3f:f4:cb:fc:d6:c9:1f:0d:d0:
         c9:a4:ed:34:e1:25:43:4d:b8:f2:8b:bc:dd:41:46:8e:42:5d:
         b4:71:75:60:dd:30:79:a3:6d:64:fa:52:0f:4b:d1:b2:e9:cb:
         17:07:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:27 2025 by rpki-client on console-fra.rpki-client.org