Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
File:                     qvIogBSZWTJzeuf5_CJN8QIUElU.mft (raw, json)
Hash identifier:          Gxh8LuygHjAeHnqtYv7DrH9xWPsjt2PByMYNyojSzbs=
Subject key identifier:   6F:25:20:07:AF:94:57:69:FA:5D:07:F9:6E:F4:44:5F:7C:9D:9B:B3
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Certificate issuer:       /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial:       0194BABB1255890F5B75C282DF9F6130F11C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
Manifest number:          1164
Signing time:             Fri 31 Jan 2025 05:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:09 +0000
Files and hashes:         1: qvIogBSZWTJzeuf5_CJN8QIUElU.crl (hash: 2o8JM5PDGW6Xnk20e7tHYCEshVeyiKlbGAaKZt/B6qE=)
                          2: ssFjFRP8rOyA12qsYqju5Tngnd4.roa (hash: hIS1+X5/5zlmutztUW28Al86ZCC1Pn71/f8lra8GU0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:12:55:89:0f:5b:75:c2:82:df:9f:61:30:f1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
        Validity
            Not Before: Jan 31 05:00:09 2025 GMT
            Not After : Feb  1 05:00:09 2025 GMT
        Subject: CN=6f252007af945769fa5d07f96ef4445f7c9d9bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:b8:10:32:b0:68:61:8e:2f:a8:7d:86:7c:
                    a9:0b:84:22:9d:f6:c9:2b:aa:83:4d:03:bf:e3:26:
                    10:81:9c:58:3e:3d:18:38:c3:7b:9f:cc:48:40:7f:
                    3f:31:fb:33:09:5d:90:26:1a:21:44:d0:c7:7b:87:
                    40:5e:ba:99:69:61:1e:00:4b:a4:57:5a:cf:d1:aa:
                    08:11:0e:d6:fe:39:60:aa:ae:99:32:d4:a9:b9:5b:
                    9b:0c:af:70:3c:b7:2b:1c:13:d9:80:5a:2a:d9:00:
                    9b:12:7c:7c:87:fa:eb:74:90:34:87:c9:65:71:38:
                    a9:7b:71:a2:dc:79:29:fa:9f:c3:b1:92:7b:54:83:
                    22:f8:ba:61:53:ff:8a:d8:21:37:0e:f8:d7:ca:55:
                    c0:c5:0f:48:95:83:6d:d3:7f:bc:bc:69:0e:c3:ed:
                    98:16:6a:db:94:a2:ed:1b:f6:9c:b1:9d:b0:35:d0:
                    a1:d0:0a:2f:ca:b5:0d:05:96:74:5d:c7:29:8c:01:
                    ed:ea:ce:3e:0f:ab:9b:0f:9a:c9:f0:63:a8:89:b2:
                    5a:7d:61:34:3f:c8:bd:32:eb:44:a2:79:52:e7:ab:
                    95:84:4c:6c:af:84:6a:8c:66:c0:39:78:58:fd:5c:
                    9b:4a:14:70:d8:f6:a0:d9:b5:71:43:4f:b1:ff:f2:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:25:20:07:AF:94:57:69:FA:5D:07:F9:6E:F4:44:5F:7C:9D:9B:B3
            X509v3 Authority Key Identifier:
                keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:06:05:56:80:98:12:49:88:5a:a1:7a:de:78:40:8a:31:0c:
         a7:0b:6d:e3:4f:c3:1a:5b:6c:6f:77:9c:e7:9b:c3:62:fd:b2:
         68:d0:5e:9b:4d:66:3e:ab:5f:5a:dd:cd:82:d4:c6:a7:a8:4f:
         f9:af:ec:63:c4:8b:31:59:c1:a6:ad:df:2e:52:a8:74:dc:83:
         2a:ed:15:30:6e:8c:0a:dd:14:f2:fd:dc:f8:d6:00:aa:5c:96:
         42:56:96:90:2f:a3:3c:d0:ca:ff:65:d3:3b:b3:52:a5:91:67:
         40:eb:d6:6d:15:e6:e0:65:22:46:15:af:e3:c1:b5:8b:64:e7:
         a7:e7:95:14:e4:71:6d:91:e1:19:09:21:c2:7f:69:bf:a8:ff:
         11:c0:c9:34:c8:32:c2:6d:da:90:fc:38:24:c3:58:4e:ee:33:
         a7:49:77:27:42:13:4f:9d:aa:9c:a4:c0:6b:29:39:35:4d:b6:
         39:4b:fb:7f:04:2f:3e:7c:0e:28:fc:e5:8a:84:75:2d:a8:71:
         4b:c9:20:5e:ca:87:aa:e2:90:44:ad:a5:f0:e0:2e:6d:5a:84:
         08:59:3d:5f:61:a1:8b:64:07:a1:02:a2:c7:71:0d:de:fb:5c:
         88:91:6a:4c:55:2f:67:ad:ce:42:c4:8d:ef:49:c9:66:b9:66:
         cd:3c:95:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uxJViQ9bdcKC359hMPEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZjIyODgwMTQ5OTU5MzI3MzdhZTdmOWZjMjI0ZGYxMDIx
NDEyNTUwHhcNMjUwMTMxMDUwMDA5WhcNMjUwMjAxMDUwMDA5WjAzMTEwLwYDVQQD
Eyg2ZjI1MjAwN2FmOTQ1NzY5ZmE1ZDA3Zjk2ZWY0NDQ1ZjdjOWQ5YmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRe4EDKwaGGOL6h9hnypC4QinfbJ
K6qDTQO/4yYQgZxYPj0YOMN7n8xIQH8/MfszCV2QJhohRNDHe4dAXrqZaWEeAEuk
V1rP0aoIEQ7W/jlgqq6ZMtSpuVubDK9wPLcrHBPZgFoq2QCbEnx8h/rrdJA0h8ll
cTipe3Gi3Hkp+p/DsZJ7VIMi+LphU/+K2CE3DvjXylXAxQ9IlYNt03+8vGkOw+2Y
FmrblKLtG/acsZ2wNdCh0AovyrUNBZZ0XccpjAHt6s4+D6ubD5rJ8GOoibJafWE0
P8i9MutEonlS56uVhExsr4RqjGbAOXhY/VybShRw2Pag2bVxQ0+x//La6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8lIAevlFdp+l0H+W70RF98nZuzMB8GA1UdIwQY
MBaAFKryKIAUmVkyc3rn+fwiTfECFBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lYTA2MjMtMzZjMS00ZjNhLWJmZjMt
NjMxNGI5OGJkYTQyLzEvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lYTA2MjMtMzZjMS00ZjNhLWJmZjMtNjMxNGI5OGJkYTQy
LzEvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwYFVoCY
EkmIWqF63nhAijEMpwtt40/DGltsb3ec55vDYv2yaNBem01mPqtfWt3NgtTGp6hP
+a/sY8SLMVnBpq3fLlKodNyDKu0VMG6MCt0U8v3c+NYAqlyWQlaWkC+jPNDK/2XT
O7NSpZFnQOvWbRXm4GUiRhWv48G1i2Tnp+eVFORxbZHhGQkhwn9pv6j/EcDJNMgy
wm3akPw4JMNYTu4zp0l3J0ITT52qnKTAayk5NU22OUv7fwQvPnwOKPzlioR1Lahx
S8kgXsqHquKQRK2l8OAubVqECFk9X2Ghi2QHoQKix3EN3vtciJFqTFUvZ63OQsSN
70nJZrlmzTyV5Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:45 2025 by rpki-client on console-fra.rpki-client.org