Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
File:                     tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json)
Hash identifier:          sOUGcZ6SVFXjMP2oATWisGDE4cGy7qoucC4LDQc+JRM=
Subject key identifier:   F5:21:61:64:66:7E:4B:45:7C:6A:A6:D5:10:14:14:95:BF:A4:A5:47
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Certificate issuer:       /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial:       0194BAF27F4588347D4CCFFF866D6293CCF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
Manifest number:          11E5
Signing time:             Fri 31 Jan 2025 06:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:41 +0000
Files and hashes:         1: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: /9b6MESlIxADocEuam63Keo22/hMIZosD44RJdEvYcU=)
                          2: vBSjooCv1VbYtFGvr_WsQil5zco.roa (hash: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:7f:45:88:34:7d:4c:cf:ff:86:6d:62:93:cc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
        Validity
            Not Before: Jan 31 06:00:41 2025 GMT
            Not After : Feb  1 06:00:41 2025 GMT
        Subject: CN=f5216164667e4b457c6aa6d510141495bfa4a547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:8f:71:8e:0d:e5:65:c3:4c:90:3a:fb:bb:
                    a3:75:6c:99:df:2e:4f:87:73:9d:7b:f9:fb:94:4f:
                    1e:d4:af:1c:99:44:9b:67:8e:b6:ce:88:52:02:66:
                    15:6c:08:62:b2:40:59:7b:c9:81:85:5b:1b:fa:2c:
                    89:5d:32:a1:8e:00:4c:b6:a9:a7:f6:62:ce:75:ea:
                    6d:6a:8c:fe:06:63:2c:8c:4c:f6:e8:c9:05:02:70:
                    4f:94:dd:af:60:c6:e2:41:f9:e9:a6:ce:4f:d0:16:
                    ee:c7:36:b7:b9:93:2c:28:91:c5:7b:52:43:b2:78:
                    72:cc:8a:2b:ca:29:c3:c2:80:a0:d9:07:26:2a:9b:
                    f6:2c:d5:32:22:97:a0:dc:29:90:e0:38:d1:64:bd:
                    29:88:ac:b1:f2:29:99:2f:ec:0e:87:91:f9:b8:0d:
                    9f:94:5f:e6:05:dc:3a:b6:ea:56:2e:62:a5:a2:9a:
                    db:2e:8e:9e:d7:69:63:99:39:e6:b0:48:85:7e:a5:
                    bd:8b:13:7a:40:dd:e6:bd:ce:19:7c:64:8b:43:43:
                    ce:21:93:ef:49:7d:c7:1d:6b:db:7d:77:f5:c6:5d:
                    8e:cd:a7:2c:bb:b5:9f:ab:b9:39:d5:4b:c5:5c:65:
                    b2:dd:8c:0e:f1:be:aa:f8:d6:e8:77:7e:78:b9:43:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:21:61:64:66:7E:4B:45:7C:6A:A6:D5:10:14:14:95:BF:A4:A5:47
            X509v3 Authority Key Identifier:
                keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:7a:8c:9d:da:27:d7:36:07:83:35:22:7b:fe:82:cf:6e:
         56:34:49:ad:e3:b2:51:97:7e:34:6d:57:3d:5f:47:0b:2f:d4:
         3a:e2:f3:97:8c:48:7e:61:7c:f2:20:fd:60:7e:ba:19:03:e7:
         0d:19:43:b0:84:0c:ae:a9:da:84:08:a9:98:34:df:ad:bd:e5:
         54:9f:cf:b4:e1:1a:5b:7a:85:bb:93:17:72:87:31:b1:29:4b:
         43:7d:9c:f7:b3:75:f2:35:af:52:fe:5b:7c:06:5b:f4:94:60:
         ca:e7:c9:8c:b1:b6:95:9e:93:db:e1:44:b4:81:5c:c9:c2:d5:
         29:5e:b2:4c:74:db:64:4f:05:53:3c:94:70:19:0e:91:51:0b:
         df:d0:41:1e:89:e5:74:c1:dc:8b:6a:27:be:02:2a:a2:80:57:
         f9:3a:6a:ab:7b:45:94:b7:d7:37:92:5e:f1:5c:80:ed:a4:8e:
         9d:d2:6c:c6:77:24:91:28:12:10:e8:04:76:6d:e3:75:0c:41:
         ee:52:6b:37:aa:e8:17:c6:e8:ab:d2:85:85:2c:2a:b5:29:a2:
         94:c5:6d:26:f8:56:23:24:b0:07:5b:a8:c9:60:77:b1:d9:87:
         d4:d5:50:0f:8c:0d:4d:92:7e:c6:0d:ca:08:8b:8e:a6:a8:1a:
         37:16:61:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:33 2025 by rpki-client on console-fra.rpki-client.org