Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
File:                     _h7q315_VCD2dKjrh7tLE3fNvWQ.mft (raw, json)
Hash identifier:          pEjq9gyF2tBxtUVnJH+vikFQImtks3cndIBW0f+7JQ0=
Subject key identifier:   59:DA:EA:CC:85:D5:F2:A7:2D:75:B4:8F:6F:22:14:0D:69:25:93:91
Authority key identifier: FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64
Certificate issuer:       /CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64
Certificate serial:       0194C3F5E0E90125A6C0123C3CE3146B3EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
Manifest number:          92
Signing time:             Sun 02 Feb 2025 00:00:58 +0000
Manifest this update:     Sun 02 Feb 2025 00:00:58 +0000
Manifest next update:     Mon 03 Feb 2025 00:00:58 +0000
Files and hashes:         1: _h7q315_VCD2dKjrh7tLE3fNvWQ.crl (hash: HAlD9WqGrrYzPnhXZLjLtdqj7Q/Et+1ziZbOjFi4DH4=)
                          2: doL4Cn2ma0kPf9AhJrRKrVG3Az0.roa (hash: SUzYz5u/F8jt5TpzuvWgvwZ7xHoIJE9Sk3avrITgKS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:f5:e0:e9:01:25:a6:c0:12:3c:3c:e3:14:6b:3e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64
        Validity
            Not Before: Feb  2 00:00:58 2025 GMT
            Not After : Feb  3 00:00:58 2025 GMT
        Subject: CN=59daeacc85d5f2a72d75b48f6f22140d69259391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:63:be:e5:5b:28:55:14:d3:63:c5:48:21:
                    8b:64:4e:bc:f1:3b:90:4a:15:77:8c:87:7b:0e:1e:
                    d3:ee:7c:5b:73:79:ea:21:0d:2e:62:86:34:65:17:
                    6c:12:ea:9b:fa:63:da:c3:cb:0a:4e:50:93:c4:b1:
                    2a:ef:72:11:96:4b:53:14:64:aa:86:5c:2f:fb:de:
                    40:6f:85:f6:33:ee:bc:2f:3b:da:43:9f:c0:4e:e2:
                    f8:0e:d2:17:dd:c5:0d:b6:92:a8:a1:19:44:df:fd:
                    03:16:29:09:2a:00:e9:55:8a:56:17:7c:54:d7:12:
                    e0:b2:b7:e8:68:6c:62:4f:b5:f1:e3:aa:f2:77:b9:
                    dd:cd:78:3c:08:8f:0a:2c:fd:cb:48:22:99:a8:08:
                    3d:be:d5:c6:61:26:4d:a4:68:98:86:c7:a7:7e:6a:
                    c5:9b:d0:1d:c3:4f:10:26:e2:35:b4:86:89:e8:e8:
                    c6:d3:33:0a:96:ba:35:03:50:bc:4b:2e:85:5d:e8:
                    be:98:13:a3:f0:33:1e:13:0d:d5:b3:33:cd:93:dd:
                    d9:c7:78:30:f7:f1:fc:38:07:1b:7a:a5:71:6c:4e:
                    9d:74:6c:19:95:c5:0d:c4:00:39:93:1f:a2:7b:1b:
                    db:4e:28:77:f4:53:80:d0:41:52:92:ce:ca:ab:c3:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DA:EA:CC:85:D5:F2:A7:2D:75:B4:8F:6F:22:14:0D:69:25:93:91
            X509v3 Authority Key Identifier:
                keyid:FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b8:6f:a7:3b:90:e4:19:b2:2e:d2:7a:4c:3d:8b:d1:6f:91:
         15:94:c1:1a:8b:2e:3a:67:9d:c8:d0:9f:2d:fc:1f:e1:a3:1e:
         b6:2a:bb:36:36:0a:ea:02:a8:54:fd:69:c7:61:59:56:9f:43:
         4b:97:58:9e:06:06:16:70:9e:19:12:98:80:0f:ed:14:a6:99:
         8d:65:19:41:5b:3b:33:0c:c1:2b:cd:fe:98:5e:e4:a5:e7:90:
         b5:e2:c1:a4:45:73:14:d8:f3:57:4d:8a:d4:10:58:c2:8f:2b:
         a8:56:9b:ae:1a:2f:ba:4b:fb:57:dc:b6:92:a1:39:4d:5c:e9:
         89:9b:ba:ea:6a:a6:b4:38:51:73:ae:74:0b:a4:8f:0f:34:42:
         f9:be:4d:4a:45:24:90:66:2c:2c:b0:3e:d5:6a:f4:1b:6f:b0:
         a7:bb:7a:d4:77:f7:35:32:08:19:b7:60:c6:f6:a5:81:8a:bc:
         6d:db:6d:11:92:36:d0:ba:78:f3:b4:77:cd:7c:d2:d2:31:19:
         02:fc:5d:9e:34:1e:e0:72:3e:fb:2c:8f:68:07:e8:a9:31:86:
         e7:56:fb:f9:59:79:b7:5b:08:a2:67:92:ae:9c:03:bf:51:89:
         70:60:dc:3a:c9:7a:a1:b4:e0:d1:90:c3:2c:fc:1f:43:c5:62:
         1a:cf:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:08 2025 by rpki-client