Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File:                     QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier:          BYmi4mphKkB3s0AgF1ioF0jxrZq/ldGqLBQ+z2O/BcY=
Subject key identifier:   93:D2:BB:EF:3F:46:1A:3C:8D:14:76:BD:16:17:BF:06:16:F6:F8:49
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer:       /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial:       0194BB6044C49A22633E23F353F619B4C021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number:          0CEB
Signing time:             Fri 31 Jan 2025 08:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:35 +0000
Files and hashes:         1: 3MDGg1OHtAL-geuqk_TgrHeNJds.roa (hash: UTv0UG9oxSEa8ZKyczNWu3GLgSXbEFX86w4PXZf/pcw=)
                          2: I-aNNYTyAuN1OPn_fraC4znA_R0.roa (hash: 7RI6xnS3LhT7DAfUQN8iG2vxZJyE8Si58lqfelc7Ygk=)
                          3: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: eGKSm5nIge/8Eyo0dW6cJHhI7qesis0XFXHwj2kgIcs=)
                          4: YXNgqkH32mHlbxjAP4XMYGxuX-A.roa (hash: U+xr/pCSHTkJQcJTemkszlIrTDWL9g14UMPWkZKLV+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:44:c4:9a:22:63:3e:23:f3:53:f6:19:b4:c0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
        Validity
            Not Before: Jan 31 08:00:35 2025 GMT
            Not After : Feb  1 08:00:35 2025 GMT
        Subject: CN=93d2bbef3f461a3c8d1476bd1617bf0616f6f849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:61:bc:33:6b:08:89:9b:4c:34:61:21:ba:
                    2a:32:0e:a4:2a:7d:35:78:a0:cf:f8:b2:aa:21:81:
                    a4:04:74:54:57:68:db:2c:9e:9e:c8:47:3d:4b:40:
                    ad:f3:0a:37:0d:15:ae:3d:d0:fa:ac:aa:bd:0f:f3:
                    0d:66:84:73:bf:23:c7:f5:33:5a:0e:a6:3b:5b:68:
                    96:af:f9:6c:ba:1b:5d:1d:e8:a4:85:70:e5:95:90:
                    1f:46:43:33:6b:1e:ff:c4:62:b6:60:21:1f:b6:1d:
                    be:a1:dd:8a:2b:5a:cd:68:25:d7:ca:74:fc:66:69:
                    f3:2d:c4:77:a1:6c:3e:24:cc:90:46:8a:cb:30:fe:
                    dd:c6:13:6c:21:7d:81:d5:31:e1:2d:01:7e:f0:de:
                    c7:5b:27:b4:7c:1e:03:12:8f:cb:93:de:1e:92:cc:
                    0b:1d:34:ba:d6:91:d0:8d:b0:9f:e5:57:79:1f:b9:
                    da:76:a7:a0:9c:31:7e:36:c4:cc:af:6d:1a:e6:d6:
                    0a:b6:dd:73:77:a6:a7:f0:52:7f:09:36:ad:10:b5:
                    25:ef:5e:de:4c:bd:88:9f:b0:c9:88:dc:2b:c7:2c:
                    de:9b:9c:5f:ec:93:90:77:ce:24:67:56:97:24:c6:
                    c4:ba:92:a2:e6:c5:dc:04:fb:2f:dd:63:52:19:5c:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D2:BB:EF:3F:46:1A:3C:8D:14:76:BD:16:17:BF:06:16:F6:F8:49
            X509v3 Authority Key Identifier:
                keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:83:3c:2b:1c:97:72:ab:2d:b9:39:00:12:64:e7:b5:ed:
         cf:11:ef:0e:36:1e:0b:18:57:fb:93:f9:47:a5:7a:7d:37:b3:
         9c:4f:0b:1f:74:59:c7:58:cd:78:ea:b8:04:f9:59:04:37:c7:
         c0:a3:6d:9c:1d:fa:05:63:80:dc:33:6a:f1:e5:f5:0a:c1:d1:
         41:a7:3a:87:8b:ff:81:e5:14:9c:60:b6:5b:a0:9c:50:ca:26:
         14:c2:3b:1f:ae:00:22:05:43:2e:a7:7e:d8:75:fc:04:0a:1f:
         22:82:5f:91:ad:1f:6f:25:a8:8b:f5:62:4e:61:25:0b:a8:6e:
         e2:07:4c:e3:59:e5:5b:2f:9d:26:cb:86:6b:2a:c0:d2:ab:ca:
         92:03:13:0a:e2:2a:08:5c:2d:95:65:4b:58:c9:0f:81:35:1d:
         d3:a5:8b:2a:46:9f:27:1f:72:8b:a9:6e:a8:7b:29:6d:e4:e0:
         85:ea:e8:32:c0:16:09:0f:40:50:5a:44:50:da:83:31:d7:a2:
         fb:58:05:50:79:05:08:0a:cb:8f:50:f3:66:d2:7d:87:96:2a:
         f0:78:5d:6f:3d:7b:a6:40:9c:be:23:65:c2:ee:5c:74:e2:15:
         05:d6:06:27:0b:b2:f8:e7:77:99:12:f0:09:d5:15:82:b6:5d:
         00:ca:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:05 2025 by rpki-client on console-fra.rpki-client.org