Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File:                     qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier:          sSLpxGf4SC1ZJBsOqB0OilSv+HjSzrNMLY3ig96WxBI=
Subject key identifier:   12:D6:3E:7C:71:6E:84:1F:3B:1F:DC:A2:86:5A:BD:5B:90:BD:2B:A5
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer:       /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial:       0194BABB6137560ED49CBFC8FE180C61EEA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number:          039B
Signing time:             Fri 31 Jan 2025 05:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:29 +0000
Files and hashes:         1: 7ASNkD6Hgbsnqd8_wWp-_aAYGqE.roa (hash: LJjg55n4xVGP9vBgMbP2ScHffsmfqIcNY661vZ01XEY=)
                          2: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: rY9W7mE3vJqkghBxDwxItEk+CaikCdzqRoy/FaSyx2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:61:37:56:0e:d4:9c:bf:c8:fe:18:0c:61:ee:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
        Validity
            Not Before: Jan 31 05:00:29 2025 GMT
            Not After : Feb  1 05:00:29 2025 GMT
        Subject: CN=12d63e7c716e841f3b1fdca2865abd5b90bd2ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:48:2b:26:13:ef:d6:14:01:08:64:99:56:
                    19:6f:e3:9c:38:85:7f:1c:6f:38:4f:d2:d6:63:50:
                    19:87:9c:78:53:56:a7:11:ae:d4:78:c7:6f:d5:a9:
                    da:01:f2:43:57:97:a7:00:9b:55:8a:b1:14:ac:b0:
                    b5:40:02:05:6d:81:7c:a2:47:f4:3f:3a:45:ce:08:
                    f5:77:8f:88:fb:bd:53:f2:ac:67:d7:bd:7a:fd:97:
                    39:56:74:af:33:db:5e:24:1d:5b:90:6c:51:97:f1:
                    e0:ca:b6:65:1e:a5:ba:98:f4:62:42:56:2c:4d:54:
                    37:fd:a2:a3:89:74:04:4d:b9:83:fa:c5:87:c9:a5:
                    87:7d:2a:00:36:31:e1:8a:71:14:4d:8f:4b:17:a3:
                    d0:4d:53:f6:77:30:68:63:08:9c:fa:c6:45:97:7b:
                    ee:36:13:7d:9c:3c:19:ea:74:85:54:b1:74:74:a6:
                    34:ac:89:d0:b1:ac:c8:0b:9f:d8:f6:62:11:f5:f4:
                    d7:02:94:2c:7f:98:8e:65:9c:28:b4:2c:40:6a:0d:
                    82:58:85:70:fc:39:ea:e5:df:98:ae:e5:af:79:d6:
                    c3:09:01:87:26:30:f8:c0:a6:3f:f7:99:b6:d1:ef:
                    c5:3c:bb:98:fd:64:00:f0:f0:b0:52:7e:a8:1f:93:
                    d8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D6:3E:7C:71:6E:84:1F:3B:1F:DC:A2:86:5A:BD:5B:90:BD:2B:A5
            X509v3 Authority Key Identifier:
                keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5a:b3:bb:42:05:1c:1a:b8:da:fd:e7:db:5b:cf:c0:14:7d:
         34:ed:11:82:57:f3:6c:60:c6:ed:2c:44:e7:af:82:e5:7c:16:
         fd:28:54:66:fe:3d:7f:fc:86:cb:3d:03:14:f7:51:18:0a:f4:
         d4:5a:9a:52:b2:ec:38:71:f5:ae:0f:d4:3f:00:ce:e5:24:b4:
         73:8d:14:73:9b:8a:33:4d:37:0a:5a:62:b6:1b:7d:ea:b4:e4:
         93:97:5a:72:73:93:48:69:17:5d:33:ce:99:9b:6c:d0:9e:47:
         48:2a:bc:05:de:66:91:6f:a8:01:56:4b:70:d7:26:e8:fc:47:
         e7:6e:a3:57:93:a7:19:de:7a:69:26:33:ad:93:a0:b4:4e:35:
         82:bc:96:73:7a:bb:ae:d2:fc:ee:19:31:70:5e:6f:87:0e:98:
         12:f0:c3:4f:4c:44:25:d6:5b:26:a9:56:2c:d1:29:e1:d4:4a:
         9d:e9:a2:ea:8d:fb:42:66:79:c6:74:af:75:9f:b2:c9:8f:f7:
         d1:3b:d3:c6:59:cd:6f:f4:63:a9:90:90:63:2d:9b:91:40:08:
         85:65:76:1f:3f:c1:e0:02:73:a0:a6:64:87:de:3b:37:f3:ef:
         c9:10:6d:a3:82:b0:2b:b8:5e:e2:f0:e0:5d:40:96:d6:cb:d4:
         2f:2f:51:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:20 2025 by rpki-client on console-fra.rpki-client.org