Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File:                     qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier:          BxpYp6lZh2kFFHV/QQK9Wzb829BTREzMbzhz/Oq9jq4=
Subject key identifier:   5D:C4:33:BC:3F:CF:40:7D:59:68:45:15:1A:08:73:C9:0B:B7:20:96
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer:       /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial:       0194BB6040DF2DF0866121725AA7EF784DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 08:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:34 +0000
Files and hashes:         1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
                          2: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: 0mLj5VzodTNLdx/Nu/W8UxqdNgJE5M2x83e8C0DJ/8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:40:df:2d:f0:86:61:21:72:5a:a7:ef:78:4d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
        Validity
            Not Before: Jan 31 08:00:34 2025 GMT
            Not After : Feb  1 08:00:34 2025 GMT
        Subject: CN=5dc433bc3fcf407d596845151a0873c90bb72096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:44:96:33:70:dc:7f:58:37:b7:b9:34:dc:
                    92:da:d7:0d:73:e1:e8:38:2c:6a:f3:00:80:b3:94:
                    b3:75:0e:f0:76:99:67:5e:5a:37:46:72:7a:7d:23:
                    81:61:7a:33:9f:52:c4:26:85:77:9c:ef:76:c5:12:
                    8f:10:57:71:42:77:07:54:da:5d:f1:99:ad:96:72:
                    1c:ae:4b:4a:1b:b0:52:e4:d0:c5:09:47:7e:da:ca:
                    95:97:f7:26:e4:85:78:aa:d7:da:8e:a2:90:44:82:
                    51:82:d1:5a:bf:17:da:a8:4d:08:18:1c:87:5f:ca:
                    c9:45:e9:e4:47:a7:a6:cc:b0:44:2d:f8:41:50:a4:
                    5a:41:d0:9f:8b:ed:ca:d4:eb:fa:2d:a5:32:d6:3d:
                    5f:2f:c6:fe:42:00:ca:7e:77:04:1f:5d:17:16:30:
                    37:8a:d2:75:b5:60:b4:f4:83:f4:f7:6c:f3:b0:88:
                    07:a3:af:54:e4:f4:ea:48:c2:6c:e8:eb:70:70:8a:
                    8c:21:bb:dd:e7:19:c8:3c:c3:40:a9:32:a9:65:8d:
                    87:cf:e3:7f:a0:e7:2e:e7:84:bb:59:c3:dd:0d:d0:
                    05:9c:e6:28:0f:56:b1:0b:4a:08:be:d9:44:69:2c:
                    34:0b:7d:db:97:5f:e5:5a:25:69:98:4c:16:e0:40:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C4:33:BC:3F:CF:40:7D:59:68:45:15:1A:08:73:C9:0B:B7:20:96
            X509v3 Authority Key Identifier:
                keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:62:15:23:c4:db:7e:28:40:65:49:21:ca:5e:95:f7:35:bb:
         c0:01:09:6d:03:e5:21:c5:6d:d3:f5:8e:2a:37:f5:d2:8a:a8:
         58:e9:06:78:d0:7d:7f:ba:2a:10:46:44:76:b7:2b:45:02:34:
         cb:7d:e8:5a:0b:52:e0:3e:e5:ea:dc:6b:4c:34:5e:b4:44:f3:
         e6:64:1f:19:e6:2d:87:1e:96:8a:04:51:7e:c8:1b:a7:83:09:
         e0:04:4c:2e:69:c5:9c:86:63:0f:96:26:46:79:fe:72:49:a6:
         a2:8f:9e:9b:2a:0b:7b:78:9f:e6:9f:fe:65:e6:4a:04:4a:cc:
         fd:64:13:3d:2e:5e:9a:51:cd:ee:6d:86:48:23:ca:d7:69:45:
         63:dc:0f:09:bf:21:cf:aa:35:f8:ab:7f:65:07:35:99:a5:b7:
         8c:ae:6b:ab:72:d5:53:ea:1b:d4:0d:d6:f2:6f:b4:44:fb:09:
         95:37:93:e0:f7:cf:2c:ad:54:4e:89:e5:62:f9:a8:c4:71:9f:
         05:b7:a9:2e:98:f9:bd:3d:ee:41:2a:54:09:fc:06:a4:d7:81:
         70:72:e1:a4:2b:fc:d3:55:6c:e3:45:35:49:45:62:3b:7e:87:
         0e:e3:df:f0:32:9f:6a:a1:d7:ae:13:38:56:29:fb:fb:ba:d6:
         40:6d:7f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:48 2025 by rpki-client on console-fra.rpki-client.org