Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
File:                     gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft (raw, json)
Hash identifier:          HFP+TGnfQtUwuFqNETq20fDqKwRllidemCh7GMlXGe8=
Subject key identifier:   2B:63:53:E2:AE:C3:37:DB:F4:EF:5A:40:C3:E1:7F:FF:DD:E8:47:47
Authority key identifier: 82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4
Certificate issuer:       /CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
Certificate serial:       0194BB96F9605DDAE224EB51F9D1D11B1DF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 09:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:21 +0000
Files and hashes:         1: gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl (hash: r7IBcjR6IsoWXwWUjUb12bo73J93Z2dxotE/jWycKec=)
                          2: r4535rejwLyNlch_9-1WL9yyNgI.roa (hash: HlBTwouJ/vT3vPrKECrX417tf3S6s+K4qcEjU3ZHOug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:f9:60:5d:da:e2:24:eb:51:f9:d1:d1:1b:1d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
        Validity
            Not Before: Jan 31 09:00:21 2025 GMT
            Not After : Feb  1 09:00:21 2025 GMT
        Subject: CN=2b6353e2aec337dbf4ef5a40c3e17fffdde84747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b5:7e:8c:22:84:7f:32:d8:f0:c2:67:fe:5f:
                    70:7e:8c:52:bb:f6:94:82:20:0a:1e:78:5d:e0:e1:
                    5d:61:83:51:9a:ee:75:f2:e8:d8:4f:88:67:4c:ee:
                    12:09:af:b8:cd:cd:00:89:dc:52:4e:07:f7:4f:6a:
                    9b:ae:f9:7c:a9:76:83:84:13:a8:c0:25:60:32:c9:
                    00:57:d6:53:77:81:c7:75:ce:b1:53:c2:f1:3d:e1:
                    ee:04:5d:36:64:e3:1c:f9:29:1b:dd:77:e8:03:83:
                    78:09:60:94:b5:f7:f1:2f:9a:b3:76:8b:3b:20:e2:
                    8c:26:15:cb:68:63:1f:1f:ee:a7:6d:2d:fe:4c:a9:
                    b2:44:cb:c0:55:a7:45:37:ff:5e:b5:2e:33:c7:96:
                    5a:c4:6d:1a:88:a3:af:a8:fc:eb:9b:81:65:74:35:
                    a9:dc:95:d9:a5:2d:fe:37:cb:cf:45:bc:6a:f3:6b:
                    b7:fd:c8:43:f4:df:ea:62:7b:77:81:01:5b:1b:b1:
                    50:45:b8:13:8f:b4:cb:f5:00:75:00:2d:bb:c1:55:
                    72:c7:90:05:0b:64:64:f4:ba:db:40:46:14:00:55:
                    61:8e:52:9d:aa:ff:d4:ae:0d:30:e8:2f:4f:72:26:
                    c9:22:13:37:bd:6a:aa:4f:1f:09:d3:fa:bf:1a:b1:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:63:53:E2:AE:C3:37:DB:F4:EF:5A:40:C3:E1:7F:FF:DD:E8:47:47
            X509v3 Authority Key Identifier:
                keyid:82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:07:f2:38:c8:d7:4c:d7:a6:19:36:f1:67:d7:97:8d:f4:8a:
         dd:34:46:37:b1:e7:b2:74:a5:b8:eb:26:8c:13:10:7d:ac:11:
         07:75:26:c4:b3:74:b6:a3:9f:7a:ba:bb:8a:53:90:ae:e4:68:
         d5:bd:23:42:ca:52:43:c4:c9:5a:7d:97:58:14:3e:91:43:81:
         a3:ea:4c:8a:5e:2f:5c:d4:4f:87:91:e4:c5:54:fe:c3:db:4c:
         14:61:70:8e:0e:f5:bd:d7:5e:7f:d7:32:1c:37:1c:97:43:cd:
         54:bf:da:a8:0f:38:19:aa:ac:1e:29:f9:8a:67:94:9d:32:55:
         9d:cf:a8:d7:ce:3f:e4:fe:dc:48:57:b8:b0:14:99:08:4f:3e:
         39:88:bf:ec:68:5e:35:fd:0d:e6:7a:a3:43:f2:d3:1b:ef:b7:
         48:2d:cb:ca:04:30:1e:e8:ec:80:d6:06:d1:66:18:20:3f:17:
         2c:72:3e:21:59:7b:1a:89:8c:36:c9:a9:ff:37:a5:2c:47:6f:
         24:77:d5:fd:07:cf:fe:3d:73:9a:e8:fb:c3:09:03:ac:a0:8a:
         b3:b4:4b:07:63:ec:17:cc:63:d2:2b:e4:c4:a7:a8:a9:fb:d5:
         db:80:32:c7:2a:4b:d7:7e:0c:8a:a0:2d:b0:88:e7:38:ee:e2:
         24:1f:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:19 2025 by rpki-client on console-fra.rpki-client.org