Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          7Wj8DDWOw91Wic9YXv2j4SBLK8rHZA/9elbe6M3oKCo=
Subject key identifier:   F1:E2:19:41:32:47:59:15:19:8F:4F:AA:0C:D7:18:85:25:DB:69:4E
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       0194C42C6E4055F17E118498322836D2E661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          28
Signing time:             Sun 02 Feb 2025 01:00:33 +0000
Manifest this update:     Sun 02 Feb 2025 01:00:33 +0000
Manifest next update:     Mon 03 Feb 2025 01:00:33 +0000
Files and hashes:         1: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: Kjk7qSsFS9bcS9Nu8F+6R8LPPg3mm+UgX6/gXEdr/Yc=)
                          2: luFC5OndEP7RA4ay0vRrluMg4h8.roa (hash: OxPUlMjYRZBQOD1El2GcTFzJh0AJGn766s7xCKXnv1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:2c:6e:40:55:f1:7e:11:84:98:32:28:36:d2:e6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: Feb  2 01:00:33 2025 GMT
            Not After : Feb  3 01:00:33 2025 GMT
        Subject: CN=f1e2194132475915198f4faa0cd7188525db694e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:62:29:1e:7a:31:82:a4:25:3c:20:6a:ff:
                    b2:de:ff:5e:3e:f7:c1:64:5b:30:30:19:49:51:45:
                    32:2b:1c:ea:ba:c4:eb:65:db:08:56:f0:65:f1:c3:
                    ac:97:9c:2e:fc:8c:1d:05:f9:b5:96:4e:09:52:36:
                    0f:20:5d:b4:b8:eb:cc:b6:a8:52:a8:09:a1:a9:04:
                    13:3b:cc:6e:4e:5c:7a:47:aa:5e:ec:32:74:1e:17:
                    2c:d9:d6:13:d4:a2:ef:1d:39:00:41:b6:5b:be:df:
                    8e:ad:c9:98:8a:b1:28:6f:90:42:e6:2c:72:ef:9d:
                    d9:d4:47:b4:1c:ca:eb:fe:ab:55:dd:01:9d:29:66:
                    b2:46:a6:ce:80:53:f0:d2:89:34:ac:09:e5:12:e8:
                    55:df:15:c2:8c:f7:9c:c9:1b:91:03:0e:c8:1b:48:
                    70:e2:1d:0a:ed:a5:9c:83:88:33:c9:74:80:12:01:
                    81:6f:9e:f8:e4:8b:b5:24:6f:e8:a5:58:25:35:af:
                    2b:0e:f2:76:1e:25:d9:b5:f6:fe:5f:a1:6d:1c:5b:
                    57:22:98:04:2d:fe:ee:21:70:c1:16:36:76:f0:b0:
                    b4:49:e7:42:4c:03:7f:3e:b2:f4:92:14:ea:4c:64:
                    0d:2c:bc:5d:70:12:01:05:c0:8a:bd:c4:05:6b:8f:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E2:19:41:32:47:59:15:19:8F:4F:AA:0C:D7:18:85:25:DB:69:4E
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:51:81:02:e6:b6:a3:1b:29:54:e5:2f:9a:93:86:31:3a:
         9b:c2:7d:4e:f2:f6:6d:21:75:73:61:0e:f2:a7:46:e5:dd:73:
         79:c0:6a:6d:fe:4f:a1:00:ef:28:2a:d6:82:29:66:ea:30:fd:
         fe:1f:ed:ec:ec:78:7e:35:35:00:52:8c:99:7b:a1:90:91:8d:
         8d:b4:b7:2e:60:3e:77:92:03:20:a9:76:95:93:23:ac:f8:ff:
         38:13:c7:e8:ca:63:46:d2:fa:a9:d3:8a:65:ca:10:cd:45:f3:
         64:99:4e:69:0b:82:7a:6d:d2:0a:92:33:fa:cc:a0:1a:51:2b:
         96:52:8c:36:92:c6:7f:69:91:37:ac:21:c4:78:2d:fb:a4:65:
         78:aa:18:8c:33:37:cc:c3:d4:e6:bd:5e:ce:a9:bd:9f:16:f9:
         8a:3c:ed:a3:58:31:8c:cd:62:7f:31:dd:9c:8c:b1:d1:02:eb:
         ab:f0:91:6c:66:fc:47:31:e4:94:6c:40:03:38:b5:08:0c:73:
         e5:bc:eb:e2:7a:9d:b9:44:c7:f6:cc:57:36:b0:83:42:5e:3d:
         7d:7d:2a:03:bf:51:85:3d:c4:0c:51:1b:22:63:f2:9c:cc:db:
         9a:e5:ba:0f:e4:18:a8:fd:ce:26:d6:16:4b:39:2c:b5:00:1b:
         b4:7f:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:06 2025 by rpki-client