Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File:                     1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier:          n/IDIbwVmgIzp2mBUSYBGfYTtw+vkU2n+W59xR3GFzA=
Subject key identifier:   98:41:2F:5B:45:97:F2:F7:B3:6B:43:56:AE:56:F9:A1:E6:38:0F:9D
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer:       /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial:       019511D97A1B71A7DDC34D92FDB472CCB991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number:          06BC
Signing time:             Mon 17 Feb 2025 03:00:19 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:19 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:19 +0000
Files and hashes:         1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: UBYui4QICGcP9MsKbxKWxVVy/vmaea3Qs8nz2qG7Z+w=)
                          2: QM4jYEK7EtYY_E1d1aEgohaHu7E.roa (hash: qeF4D524grzc7fut+xWXsFCBjhJ1D13zM5qUNVlhkHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:7a:1b:71:a7:dd:c3:4d:92:fd:b4:72:cc:b9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
        Validity
            Not Before: Feb 17 03:00:19 2025 GMT
            Not After : Feb 18 03:00:19 2025 GMT
        Subject: CN=98412f5b4597f2f7b36b4356ae56f9a1e6380f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:29:25:0b:04:f0:84:48:b5:ae:b3:6a:e0:
                    d3:87:b6:41:f2:83:a7:6a:42:6a:4b:68:13:99:46:
                    3e:0e:5d:b6:de:39:5d:e6:f9:3a:ae:6e:62:93:56:
                    ee:e4:54:a8:a4:ea:63:b9:35:c0:86:1b:b2:68:ab:
                    89:53:80:2b:f4:df:4d:91:8a:32:83:1a:f4:b2:90:
                    3d:30:f7:79:dd:1c:ed:6d:26:56:70:15:c3:19:47:
                    3e:fa:f8:c4:4c:e1:da:d7:44:7e:0b:47:1a:56:77:
                    26:07:b1:99:31:f2:af:32:fd:ba:ca:7f:2a:d1:05:
                    5a:78:86:31:b4:a9:ee:e1:79:fd:43:32:3e:d7:3d:
                    19:e5:77:25:c1:be:51:2d:98:69:ff:ad:07:cf:4f:
                    0e:f8:d5:81:23:48:71:27:8d:35:e9:20:99:3e:ce:
                    ed:61:8b:2a:23:2b:56:e5:66:de:2a:4d:7d:2d:e0:
                    15:e3:47:50:66:34:8f:fb:7c:bb:ac:43:07:40:a7:
                    6d:91:81:96:e8:35:86:46:b8:6c:61:4f:7d:6e:49:
                    62:42:4d:1d:37:23:81:18:e9:27:e4:2d:27:f3:04:
                    76:06:dd:85:dd:2a:dc:b6:b5:f3:1e:da:a4:29:3a:
                    55:a8:57:37:bd:86:29:df:4d:46:0f:58:aa:4b:a2:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:41:2F:5B:45:97:F2:F7:B3:6B:43:56:AE:56:F9:A1:E6:38:0F:9D
            X509v3 Authority Key Identifier:
                keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:67:f3:cc:f4:5e:4a:83:f4:aa:b3:01:4a:62:fb:68:2b:
         fa:2e:a3:62:6b:f4:93:f9:19:b9:64:d6:fa:1e:24:d4:76:ed:
         11:5d:05:f7:b5:de:6c:ff:85:86:81:d6:9c:28:e3:92:22:68:
         a4:2f:8a:73:85:96:3e:b8:ad:ad:67:b7:3b:6e:17:ce:4d:9a:
         6b:50:3f:75:67:72:e0:66:99:52:70:84:b5:9e:51:2b:6d:c5:
         27:ea:8c:13:86:49:fc:ba:44:2e:0a:1f:f0:12:00:45:cf:94:
         a6:dc:c7:1e:40:12:33:dd:3a:7b:0e:93:45:4a:be:9c:19:b7:
         3e:21:b0:d6:7f:4d:5a:6b:b4:42:0e:e7:2d:85:e8:2b:a9:70:
         2b:6e:5a:03:8c:36:c2:5b:96:1e:db:39:c9:7a:d5:40:e6:76:
         57:10:fb:b9:c8:24:34:27:4a:ca:b5:54:13:e2:77:41:33:78:
         36:c1:19:43:f8:d2:05:3a:e2:19:fa:ec:99:86:64:91:26:16:
         9a:75:1c:87:e8:57:67:74:c6:86:e0:2e:7d:45:1c:b6:8b:44:
         1e:e7:04:75:50:c8:3e:45:bd:a2:85:6c:de:39:c2:67:86:95:
         95:ef:0b:84:3f:72:14:12:59:55:46:50:24:06:e4:2b:e0:49:
         5f:a4:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:39 2025 by rpki-client