Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File:                     q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier:          2ptp7BNZ+AhyUvpdWUlIQ6gvPhFG/CrTUdXlr2lNItg=
Subject key identifier:   59:4F:6A:B0:F2:54:1F:9D:46:69:C2:D5:00:47:E4:20:C9:AA:C6:1C
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer:       /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial:       0194BAF211519024D2EF712AFCF14345C531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 06:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:13 +0000
Files and hashes:         1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: kmF9Ts6nOOyBh59kPdCoVEgxnNiyXhWcep1i/WzOmdE=)
                          2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:11:51:90:24:d2:ef:71:2a:fc:f1:43:45:c5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
        Validity
            Not Before: Jan 31 06:00:13 2025 GMT
            Not After : Feb  1 06:00:13 2025 GMT
        Subject: CN=594f6ab0f2541f9d4669c2d50047e420c9aac61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4d:27:c5:d0:d3:55:db:65:53:fa:7d:12:aa:
                    24:33:8c:64:a1:11:bb:16:60:1f:40:44:b4:16:8e:
                    98:41:5a:79:0f:37:d5:29:a8:11:9b:98:b3:a9:9d:
                    e7:33:fd:50:c6:25:6e:c0:bd:11:e6:f7:5d:75:2a:
                    f8:8e:24:d5:22:91:22:7f:20:ee:9c:af:9d:e2:0c:
                    65:b1:de:5e:55:7e:8d:38:44:f6:88:01:88:34:17:
                    3d:bb:0b:37:96:e7:d9:3c:34:4a:62:34:25:d2:f0:
                    87:54:07:35:b6:34:c9:21:4f:50:30:52:49:1a:c9:
                    af:87:87:ba:8d:b5:96:d2:47:9c:d2:e7:02:e1:7c:
                    3d:76:a3:b7:08:e4:b7:15:34:13:ca:54:e6:3f:2f:
                    c9:41:78:d1:d5:f0:c0:2b:1c:d9:8f:08:e7:df:32:
                    98:e4:93:a2:d6:54:ee:e0:c4:7a:0a:44:b3:b5:3a:
                    b1:1d:f1:ad:3c:62:33:fd:8f:16:03:45:05:a5:2a:
                    fa:4b:e1:55:b8:85:ca:ed:f8:1a:d7:90:30:af:a3:
                    d1:3c:60:6f:3d:3d:cd:17:6b:d7:90:e1:af:e0:3b:
                    7d:98:35:ac:18:f0:31:af:0d:48:f0:c1:86:cc:39:
                    4e:cc:dc:b4:45:87:ab:86:22:65:ce:a7:69:12:7a:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4F:6A:B0:F2:54:1F:9D:46:69:C2:D5:00:47:E4:20:C9:AA:C6:1C
            X509v3 Authority Key Identifier:
                keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:71:d8:f6:3c:27:30:b0:5a:32:fc:9f:df:59:5d:e4:ac:c5:
         57:8c:30:a1:62:d3:d2:1b:3b:ed:23:76:34:6b:3d:f3:9c:bc:
         3f:11:5b:78:96:aa:55:5e:7b:eb:8c:a9:4e:cb:93:95:3e:4e:
         fe:32:cb:a0:d1:0f:c9:fd:59:b9:27:66:77:93:11:32:e9:4a:
         5f:14:76:68:1a:d1:02:a4:19:68:5a:7f:95:80:f0:8a:d0:89:
         f6:f3:77:37:4d:b4:f5:af:6c:ba:27:92:a2:c4:8c:18:2d:21:
         46:78:4e:ec:79:b3:4a:cb:6a:65:bf:f9:72:2d:e0:25:92:8a:
         59:55:61:e0:2a:68:fc:81:96:4f:8f:40:67:7d:87:fa:1b:c9:
         03:95:a9:66:34:92:84:5c:75:99:f7:3c:50:cc:21:43:9e:a5:
         11:c0:e4:2e:6c:80:92:ee:16:2b:2d:ff:77:26:cc:d0:5f:5e:
         c4:9d:fc:0d:15:69:23:91:3e:b6:35:ba:b1:1d:d5:17:a3:48:
         75:d2:7e:1c:9b:39:7d:28:39:db:bd:a8:fc:4f:bb:99:61:56:
         56:17:79:69:e4:e4:be:31:2b:a3:ff:07:38:5e:74:d4:a6:46:
         3f:cb:c2:2a:6f:c3:06:2b:48:09:61:da:05:f6:98:7b:1a:de:
         14:9a:72:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:12 2025 by rpki-client on console-fra.rpki-client.org