Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          GAXAZ/DWB642w8Y3jFEU8HuBAVPuUNCHNhbxn0F3px0=
Subject key identifier:   FE:95:D8:D7:E5:58:32:A4:3F:89:25:FD:B2:BC:00:52:CC:DF:E0:A9
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       01951134B725274C0C328AD26A9CE1AD7D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          1459
Signing time:             Mon 17 Feb 2025 00:00:22 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:22 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:22 +0000
Files and hashes:         1: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: ON6Ju5j0LOBlzOzmvbLDOo6/LC3BWCZ9+2gr0HCd+9s=)
                          2: S6s1MZvjGFTRPk9vZPziFkYY6qM.roa (hash: ToU3MZhIjvRp74FUEtCCsRrFPES+LOdbmLPRk+Oahhc=)
                          3: dsWRyZzKIXE-_o05dhzwQLK-Lbk.roa (hash: VWsGICYRCZ2YCd/cztWs6r3W91Apf8NSGDgQ7RjrOcc=)
                          4: g-0mYXlZCCbY8bUpprXLVbOiC9A.roa (hash: hFmcyS+hXU9/y3wiy+mf+wC/haCuFA1o+qKC1n/PUV4=)
                          5: o1EPY-XxVbxJyaIoWSUC8RQCjcc.roa (hash: Kquty1N0A29MJH0xvyL5yuCvTt71jZz0jcczxSEKzL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:b7:25:27:4c:0c:32:8a:d2:6a:9c:e1:ad:7d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Feb 17 00:00:22 2025 GMT
            Not After : Feb 18 00:00:22 2025 GMT
        Subject: CN=fe95d8d7e55832a43f8925fdb2bc0052ccdfe0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:b0:22:ac:42:31:6d:df:eb:19:c1:9b:d3:
                    ed:22:86:49:5a:a1:b0:55:a3:7e:68:4d:e3:85:c0:
                    7c:69:47:59:a5:25:95:6c:c4:0d:8c:25:98:db:68:
                    31:74:25:51:ab:e5:11:d4:7f:5e:4f:71:59:f0:88:
                    ab:6c:85:81:eb:d9:30:14:68:d5:66:1e:4a:31:55:
                    2d:3a:16:c1:b3:96:e6:15:b7:d1:ac:b9:f2:f1:fc:
                    8c:cb:f5:4d:cf:04:c2:2d:e9:e6:fe:d3:e5:68:67:
                    35:f2:26:d1:0c:4d:e1:13:4b:f2:3a:3d:b4:71:2b:
                    cb:8a:03:82:7a:c4:88:2e:76:6c:9a:27:1a:c9:1b:
                    7c:49:a9:ee:0e:ab:25:19:04:fe:cb:f5:da:43:f8:
                    13:3c:c8:61:24:56:c7:7c:70:15:26:7d:f5:c9:2c:
                    6e:c2:5c:7c:c9:ed:10:8a:3f:b3:56:39:69:73:6a:
                    7f:53:73:f8:62:a2:5c:71:0e:e1:c8:80:c0:23:ce:
                    77:fc:9c:b0:63:e3:2b:bc:0b:19:1c:64:66:31:61:
                    90:2c:43:d4:6e:4a:1f:18:b9:af:1c:89:0f:d0:98:
                    36:b4:41:9d:f0:1f:1a:d9:39:23:59:a6:ca:69:34:
                    e2:bd:bf:ab:c7:96:94:c0:99:a3:e3:97:d7:6d:ca:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:95:D8:D7:E5:58:32:A4:3F:89:25:FD:B2:BC:00:52:CC:DF:E0:A9
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:e8:75:81:79:d9:95:9c:93:7d:19:28:14:05:e7:dd:7a:0e:
         13:ea:2d:21:8b:08:85:89:30:67:e1:90:5a:6d:92:ca:75:66:
         13:e9:f1:de:97:bc:8e:8a:f0:96:57:7f:8d:e8:f0:1c:49:39:
         dc:53:5b:3c:82:fe:1a:f3:13:80:de:b1:50:a0:8c:64:1e:80:
         02:ad:13:b1:07:c2:1b:26:73:f3:e7:ae:69:96:12:f9:8f:30:
         52:20:51:27:36:10:42:50:c2:82:c3:08:e7:d2:06:52:0b:db:
         e9:a1:59:33:a6:49:cf:16:fb:c7:c5:5d:1a:61:3b:01:c5:47:
         03:ee:2d:d8:a0:11:94:f0:b7:60:3f:0e:74:8a:6a:bf:c9:14:
         60:a9:f9:5a:bd:f4:73:2d:bc:65:a7:41:c0:0c:96:80:f9:09:
         46:28:80:d9:73:5f:ca:6b:dd:3b:2c:6c:94:45:3b:cf:e2:e0:
         b1:c6:01:47:d1:a4:2b:bb:92:be:15:a9:80:ae:55:ca:37:de:
         b4:75:34:83:e4:ec:42:49:a5:6c:94:6c:91:ed:65:40:60:f3:
         fc:e2:94:32:86:8b:3a:95:05:91:ab:41:bb:e7:e7:b5:8d:37:
         4b:9e:82:86:73:9b:41:7a:7e:8a:a8:7c:49:e4:38:9f:d8:dd:
         bc:aa:8f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:23 2025 by rpki-client