Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File:                     QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier:          j2o/4nyMndHD4HdppHI+jULIgAvtiQ1ZK3TB7s1XPCY=
Subject key identifier:   8C:D5:63:26:B2:1D:DA:9C:20:0A:52:87:A4:9B:26:34:22:8D:7E:93
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer:       /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial:       0194BAF2898B1EEE08FAEF301AB591BFDD1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 06:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:44 +0000
Files and hashes:         1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: nN6g0ieGSAhIHcyVfxG0lhxzqj5lfd3UemgfF7w9o5o=)
                          2: y8Eeia8hdhX_DpCgeBhu63E2X4A.roa (hash: wzZxfTRF1LtzRT1r6hfEh3O3egTZFWx9R6sOBFN3GRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:89:8b:1e:ee:08:fa:ef:30:1a:b5:91:bf:dd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
        Validity
            Not Before: Jan 31 06:00:44 2025 GMT
            Not After : Feb  1 06:00:44 2025 GMT
        Subject: CN=8cd56326b21dda9c200a5287a49b2634228d7e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:41:4e:c6:b7:c7:13:e6:26:22:ce:43:68:
                    46:34:3f:56:d4:23:1c:11:c7:b9:4e:37:94:ad:08:
                    39:c9:f1:c6:c9:e2:bc:26:7c:12:40:79:77:72:5d:
                    98:e5:14:9f:ad:4a:14:4b:6a:fb:72:d7:4f:4a:f8:
                    e6:f5:3d:62:41:96:7c:5a:c7:7b:7b:8f:f0:05:73:
                    56:75:47:54:b1:58:79:fd:ae:a5:39:24:7b:fd:e2:
                    1b:7f:33:62:7c:ce:37:b9:8d:06:38:2e:42:3d:80:
                    90:1a:08:96:3a:ce:61:f5:30:8f:99:d6:7f:62:4a:
                    42:ad:e4:b3:1b:b4:99:17:c1:1b:a2:7a:b2:9e:16:
                    16:5c:16:8f:c4:00:f1:8f:a7:ae:92:17:13:a3:e7:
                    b2:dd:83:fa:f6:7b:d0:a6:e4:4e:63:32:7f:7a:3f:
                    81:59:5a:ce:96:a4:1e:bc:28:64:3d:0d:f9:56:c8:
                    7e:d6:8f:e0:65:8a:af:cc:cc:3e:ef:9a:d1:46:6c:
                    67:38:50:4b:67:07:a0:00:fa:cf:80:65:19:b5:ea:
                    8b:3e:b9:b4:bf:6e:ea:02:2f:79:5c:17:71:d1:bf:
                    ae:18:29:32:f2:25:07:92:eb:58:86:49:b3:8a:aa:
                    42:09:da:ba:95:1c:a3:86:31:c3:02:f8:d4:39:c0:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D5:63:26:B2:1D:DA:9C:20:0A:52:87:A4:9B:26:34:22:8D:7E:93
            X509v3 Authority Key Identifier:
                keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:98:da:14:54:c5:b1:b5:a1:61:e3:14:61:ad:aa:44:4d:3c:
         df:3e:1d:04:f0:78:ff:89:a1:34:b6:40:d8:13:6f:e6:03:7c:
         87:50:1b:ac:80:9c:68:00:25:42:a3:61:c2:fc:d3:9d:1c:a6:
         34:ea:13:0e:d7:6e:72:48:c6:79:44:b8:19:62:c7:1a:de:0d:
         91:14:72:18:19:42:3c:2f:d2:d2:b2:fd:f5:72:5b:dc:06:d8:
         12:de:b9:a9:43:4f:1b:46:b9:ca:09:2e:1e:3a:02:c7:42:f5:
         12:6f:e5:00:27:58:1a:72:91:13:68:3a:7f:06:14:28:9c:1a:
         fc:58:07:f1:36:08:6f:e6:cd:05:2d:e3:f0:3e:39:80:89:e8:
         e0:88:da:cf:fd:5b:50:4b:fe:b5:a5:cd:fa:49:ec:8c:69:c8:
         2b:00:bd:d5:74:bc:8e:cd:8f:ed:95:12:06:ad:ca:eb:93:3d:
         c9:38:0c:a8:7e:18:66:49:6b:cb:16:bd:be:65:9e:11:9f:a2:
         48:03:c6:26:0b:27:a7:d8:73:6e:f7:cf:20:cb:06:ad:72:90:
         c2:d1:9d:de:91:a5:65:d0:31:8f:e5:42:b7:a4:ba:b1:93:07:
         ef:3e:1d:2a:1e:fc:8b:a6:3b:04:09:14:3d:be:25:e2:68:ce:
         23:d3:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:27 2025 by rpki-client on console-fra.rpki-client.org