Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          8+IC94gDWbS8fkRXKHhE5yZildyLo35IYn+weZ+n1qY=
Subject key identifier:   84:6D:AF:1D:5F:B2:B8:71:1F:FC:32:F4:3B:C1:DF:8E:54:62:D3:4C
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       019512471BBC7D4B9C3DE5081FD8F343AAD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          0B12
Signing time:             Mon 17 Feb 2025 05:00:04 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:04 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:04 +0000
Files and hashes:         1: 3vZog35fA7A8208htG6MPJHCfRQ.roa (hash: KjUP3VOXf2M5RM2RNCpzmW1mXhGa52pGMp/lPhjp9fc=)
                          2: BfHqfkHY1q4ldygRkcfv7XdzqLs.roa (hash: YbMXX/fz76OV1tIhHwhH/SEdCy/PTJDjaV1pgkgaZeE=)
                          3: CmIDNfzs3bSVgY-dfSu_0KvUwvU.roa (hash: zeJTsFwERYYSCRF2I3KzeFe/yJYCV+YH9obrNhlqeUk=)
                          4: XaQFQicfhG4nS73QjVCHMUwAPG8.roa (hash: vEWEx+WC0m8X0tM9GZ7AzmWSqkdHKT5bYqE12jvQZ1Y=)
                          5: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: Cr0dA7X2R3n8S9f6CwEiku8HM6kpZoIjJpdm9IeKa+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:1b:bc:7d:4b:9c:3d:e5:08:1f:d8:f3:43:aa:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Feb 17 05:00:04 2025 GMT
            Not After : Feb 18 05:00:04 2025 GMT
        Subject: CN=846daf1d5fb2b8711ffc32f43bc1df8e5462d34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:60:97:f8:fc:4b:f9:6c:30:1d:a2:6e:3f:
                    70:80:c2:8c:88:53:22:7c:6c:5f:39:96:af:b6:59:
                    c7:cd:f5:86:d5:93:40:23:d6:e6:d5:7a:0e:65:56:
                    45:07:be:bb:38:28:be:9a:f0:fa:aa:ef:27:07:6a:
                    3d:79:ad:c8:c8:ed:ad:a9:48:68:44:fd:1c:97:2a:
                    0b:b3:d1:26:81:c8:de:54:8a:01:40:bc:f6:c2:e2:
                    b8:cd:f3:54:c6:f5:45:65:a8:ba:cd:90:c8:ac:8c:
                    6f:81:c6:69:6e:a2:6c:01:a5:8f:7c:4f:40:bf:d3:
                    d8:ea:43:cc:e3:6a:32:f4:a5:c6:50:4d:14:11:fa:
                    d7:f2:99:f0:19:47:97:14:8f:c8:5c:8a:72:a0:f8:
                    a3:8d:94:16:8f:11:64:fb:ad:4b:39:e7:74:ca:65:
                    55:17:13:3c:61:c8:9d:09:8e:b1:d6:9d:3a:f8:a7:
                    cb:5f:ad:b8:2d:26:f2:4a:0e:b4:ef:eb:71:0a:36:
                    f8:fd:0e:21:43:45:7b:f5:63:3d:2e:86:48:37:8e:
                    d7:05:40:88:01:07:82:43:fd:05:03:b7:fb:3b:df:
                    5c:8b:fc:a9:99:fd:b7:f6:39:af:c2:9c:d6:b4:94:
                    66:a6:63:0e:db:26:cc:36:b3:76:fc:e3:5f:2a:a8:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6D:AF:1D:5F:B2:B8:71:1F:FC:32:F4:3B:C1:DF:8E:54:62:D3:4C
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ba:0a:9c:10:15:e7:0d:2d:2b:a4:4a:b5:c4:0b:f1:20:bd:
         ba:10:27:76:6d:5b:59:8c:25:94:bc:3f:04:be:63:fb:fd:35:
         ce:44:b0:79:21:b2:ce:40:33:bc:9b:cf:47:0d:47:13:24:c5:
         53:5f:f0:76:22:f4:e2:50:f8:bf:94:83:d9:14:4d:9d:a8:14:
         28:a9:07:42:76:55:be:c9:62:ad:46:56:c6:69:33:cd:40:54:
         ee:b5:6c:e6:a1:4e:1e:ab:c2:0e:84:96:87:c5:5b:ab:1b:4b:
         5d:39:6b:04:05:52:c7:27:5c:6e:1a:f4:44:c0:e4:a3:b6:e0:
         eb:70:b3:6a:e6:bf:a1:a8:21:22:95:62:26:68:05:da:29:71:
         bd:17:d3:68:4e:04:63:01:25:1e:c2:7a:49:03:5c:ea:b1:cc:
         65:03:b7:9e:c1:45:37:f0:12:ca:b6:2e:7d:a8:2f:19:29:c2:
         17:f2:c8:a7:32:86:cd:80:4a:2b:bb:68:c4:79:94:08:41:cb:
         56:ca:8b:10:91:ec:d5:41:fa:16:20:47:39:24:2b:52:e1:33:
         93:9c:1a:e1:50:42:e1:2b:4c:d0:4d:41:e8:c0:97:cd:ae:58:
         97:22:94:f9:61:a8:c1:8f:89:2b:0b:43:cd:81:e3:83:f2:a8:
         68:ab:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:23 2025 by rpki-client