Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File:                     qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier:          fU3uG3SdJcuCkYJ2rn2FvupTMMG1XR2OgXcysea0Fjg=
Subject key identifier:   75:DF:D7:84:39:F8:F5:12:C1:39:28:CA:8E:AD:F0:C2:3D:1C:F2:9F
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer:       /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial:       0194BB96CACB78E942BC985632813704DC93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 09:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:09 +0000
Files and hashes:         1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
                          2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
                          3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: GzyUvDG8is3vFojfSem1fA/MY3Se/at/AfqPXtXVgW8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:ca:cb:78:e9:42:bc:98:56:32:81:37:04:dc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
        Validity
            Not Before: Jan 31 09:00:09 2025 GMT
            Not After : Feb  1 09:00:09 2025 GMT
        Subject: CN=75dfd78439f8f512c13928ca8eadf0c23d1cf29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:47:1e:e1:cd:ba:04:d8:b6:13:4e:74:11:
                    64:9a:b9:eb:2f:4c:13:d3:0e:39:07:ea:13:8a:da:
                    bc:5d:ed:51:2c:35:96:56:78:1b:4f:03:8a:9f:06:
                    a0:c6:a0:92:97:8a:da:28:c6:1a:44:2d:82:c3:98:
                    c1:8e:a2:e8:c2:5d:b2:cd:db:77:6c:54:c1:4d:03:
                    08:d2:3b:ba:d1:6b:8c:94:65:d2:33:ed:bc:c9:dc:
                    92:a6:a9:bc:e4:b7:96:cf:d4:e7:86:10:f0:6f:01:
                    f8:d4:2a:88:98:b1:ee:e4:a4:d6:e6:3b:5a:ff:e6:
                    46:8a:08:76:6a:23:36:d3:18:1c:d5:05:f2:7e:06:
                    07:6b:37:47:bf:51:38:82:d5:7d:86:dd:70:f5:ed:
                    6e:c5:a7:b5:ff:1a:ba:08:ae:13:ae:f4:38:50:32:
                    a3:31:d8:48:af:da:c2:7c:cf:0a:ff:37:be:1b:aa:
                    3e:5a:7b:e9:ca:9f:87:6e:a0:3b:06:d6:16:95:ae:
                    32:9e:d8:58:2f:39:41:a6:92:bd:40:64:e8:3a:4b:
                    ef:45:c5:60:ef:70:75:2f:11:03:b0:91:e2:68:61:
                    46:b5:41:7f:65:d4:24:4b:31:c8:cb:0f:fc:78:8c:
                    c7:4c:ce:a3:38:dc:5c:bd:94:3b:7b:a9:18:66:36:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DF:D7:84:39:F8:F5:12:C1:39:28:CA:8E:AD:F0:C2:3D:1C:F2:9F
            X509v3 Authority Key Identifier:
                keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:77:00:75:e8:d2:88:5e:90:54:1d:56:c2:a4:f0:f4:4f:74:
         f0:a4:b6:80:9a:6b:db:2c:6c:a9:62:8d:54:fe:9b:ba:36:de:
         fa:7a:da:e7:b9:2a:42:37:91:2e:02:c8:13:be:1b:2b:b1:b1:
         ad:54:43:5f:44:a7:75:79:3e:cf:fb:3b:75:93:e4:2b:03:51:
         e9:ed:b5:14:2a:f8:51:09:44:b1:8c:96:20:74:3c:ff:30:ea:
         61:97:3b:46:5b:a7:7a:ff:f6:32:58:46:87:26:61:92:f1:d6:
         18:8c:95:29:6a:6e:41:be:36:b5:e1:2d:7e:52:3e:ab:00:49:
         b6:34:17:36:97:36:a8:f5:c4:70:4d:be:26:e3:72:5a:2c:2b:
         12:f4:bd:39:74:cb:9a:5e:67:d1:76:90:b0:e6:73:c9:2f:24:
         90:db:74:db:f7:f9:f3:71:9b:c8:46:1b:b6:6d:1e:11:56:fe:
         01:9f:ff:95:f0:34:9c:f2:99:6b:50:e8:27:49:44:85:7f:de:
         dc:12:8d:50:8f:4c:a5:a4:48:67:58:fb:db:4c:74:36:65:57:
         64:e0:a1:33:1e:cd:d5:8c:00:98:ee:99:76:d1:6a:73:cf:2a:
         32:ce:03:f4:70:57:fe:19:d5:da:98:9d:b4:58:94:8c:c8:16:
         8d:9c:87:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lsrLeOlCvJhWMoE3BNyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NDgwY2YxOGZkNzg1OWRmOWFkOTk3OTQwMDEzYTk5Yjhk
ZWUzNzQwHhcNMjUwMTMxMDkwMDA5WhcNMjUwMjAxMDkwMDA5WjAzMTEwLwYDVQQD
Eyg3NWRmZDc4NDM5ZjhmNTEyYzEzOTI4Y2E4ZWFkZjBjMjNkMWNmMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LBHHuHNugTYthNOdBFkmrnrL0wT
0w45B+oTitq8Xe1RLDWWVngbTwOKnwagxqCSl4raKMYaRC2Cw5jBjqLowl2yzdt3
bFTBTQMI0ju60WuMlGXSM+28ydySpqm85LeWz9TnhhDwbwH41CqImLHu5KTW5jta
/+ZGigh2aiM20xgc1QXyfgYHazdHv1E4gtV9ht1w9e1uxae1/xq6CK4TrvQ4UDKj
MdhIr9rCfM8K/ze+G6o+Wnvpyp+HbqA7BtYWla4ynthYLzlBppK9QGToOkvvRcVg
73B1LxEDsJHiaGFGtUF/ZdQkSzHIyw/8eIzHTM6jONxcvZQ7e6kYZjaQGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXf14Q5+PUSwTkoyo6t8MI9HPKfMB8GA1UdIwQY
MBaAFKlIDPGP14Wd+a2ZeUABOpm43uN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0Yjkt
YWNkODdjNTQ2MDQ4LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0YjktYWNkODdjNTQ2MDQ4
LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIncAdejS
iF6QVB1WwqTw9E908KS2gJpr2yxsqWKNVP6bujbe+nra57kqQjeRLgLIE74bK7Gx
rVRDX0SndXk+z/s7dZPkKwNR6e21FCr4UQlEsYyWIHQ8/zDqYZc7Rlunev/2MlhG
hyZhkvHWGIyVKWpuQb42teEtflI+qwBJtjQXNpc2qPXEcE2+JuNyWiwrEvS9OXTL
ml5n0XaQsOZzyS8kkNt02/f583GbyEYbtm0eEVb+AZ//lfA0nPKZa1DoJ0lEhX/e
3BKNUI9MpaRIZ1j720x0NmVXZOChMx7N1YwAmO6ZdtFqc88qMs4D9HBX/hnV2pid
tFiUjMgWjZyHQw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:30 2025 by rpki-client on console-fra.rpki-client.org