Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
File:                     q33wfyEEN2kvd-7DRpuaSCuW0ao.mft (raw, json)
Hash identifier:          sBzgfU8aUaG+oKur4/xc0wH+p8uWfQfvrBei2VfDvKI=
Subject key identifier:   58:AA:C1:49:D8:95:C7:DA:24:66:16:B3:00:78:A5:45:B7:71:8C:AF
Authority key identifier: AB:7D:F0:7F:21:04:37:69:2F:77:EE:C3:46:9B:9A:48:2B:96:D1:AA
Certificate issuer:       /CN=ab7df07f210437692f77eec3469b9a482b96d1aa
Certificate serial:       0194BAF22969F8C030E857CEC0823C8ADAF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
Manifest number:          03BE
Signing time:             Fri 31 Jan 2025 06:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:19 +0000
Files and hashes:         1: q33wfyEEN2kvd-7DRpuaSCuW0ao.crl (hash: mFbjj/Yx441bUHWDDQ7S2LPsbCkFvaxxi/+Ty++inRA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:29:69:f8:c0:30:e8:57:ce:c0:82:3c:8a:da:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7df07f210437692f77eec3469b9a482b96d1aa
        Validity
            Not Before: Jan 31 06:00:19 2025 GMT
            Not After : Feb  1 06:00:19 2025 GMT
        Subject: CN=58aac149d895c7da246616b30078a545b7718caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:ff:af:19:da:fa:f9:5b:9f:4f:ce:c9:5f:
                    e0:06:01:2f:8d:63:87:27:10:40:6f:2f:f5:90:94:
                    ae:78:df:40:ec:43:b7:0e:da:14:33:47:d7:3b:9d:
                    35:f6:b6:a2:b7:df:c9:68:69:8b:94:8a:af:fe:b0:
                    bb:35:0e:ed:66:99:ee:f2:5a:3c:6a:1e:87:c6:ef:
                    88:31:5b:3c:73:f9:36:f2:58:7d:c7:a6:ed:ce:7d:
                    12:85:bf:b4:bb:4b:d8:32:23:07:d9:b0:bb:32:0c:
                    8f:48:ec:34:08:86:ca:11:94:6b:f8:81:d6:78:43:
                    1d:22:d4:d0:df:81:66:b3:d7:ca:e4:08:32:43:e1:
                    33:6c:55:01:05:bc:9b:90:6d:b3:69:0f:fd:89:21:
                    3d:b5:72:61:63:d7:0f:e5:58:0a:26:2d:94:8e:cb:
                    a7:ca:6b:17:7e:f6:d1:2a:74:af:1f:d1:25:ff:db:
                    8e:98:0f:8b:6c:69:6e:74:aa:94:69:1e:c8:a8:f2:
                    80:1f:c8:a8:00:58:b0:f1:a4:44:77:b4:1d:42:5f:
                    00:3d:1a:4c:50:d2:ad:00:45:c4:59:e1:c7:14:f5:
                    77:68:d7:bf:95:90:75:6f:ec:12:f1:e0:b1:cc:54:
                    6a:cb:47:b4:51:cb:42:25:dd:5f:9b:1a:4e:ef:6a:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AA:C1:49:D8:95:C7:DA:24:66:16:B3:00:78:A5:45:B7:71:8C:AF
            X509v3 Authority Key Identifier:
                keyid:AB:7D:F0:7F:21:04:37:69:2F:77:EE:C3:46:9B:9A:48:2B:96:D1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:95:11:76:c6:63:06:ea:01:4c:a0:79:6c:71:b5:2c:b5:df:
         d8:c2:1a:69:95:ff:88:e1:a3:fd:aa:1b:9b:9b:b4:b1:d0:a4:
         99:fb:4c:7b:f9:ee:d9:b9:72:a3:ae:7e:86:8f:c4:8d:a6:f4:
         fe:a6:ce:73:24:fd:4b:45:4f:b6:90:2b:f5:52:ce:2d:0a:6d:
         fb:a2:b5:18:66:6e:b7:d4:c7:37:ae:88:83:cd:5e:5f:dd:86:
         1f:fe:9c:ce:6d:83:90:5c:f8:7c:2d:d7:72:90:01:bf:97:06:
         53:b3:49:35:a5:b2:21:82:7e:3b:9d:df:e3:a3:da:f4:ff:3f:
         db:b0:c9:0c:cd:a2:1f:4b:80:eb:ec:7d:85:4f:b0:a6:62:59:
         fa:d0:16:32:39:26:2d:fb:40:4f:3d:86:fd:26:ac:42:08:06:
         2c:c1:11:9b:3e:2e:8a:2d:53:a9:37:0e:f5:c5:d2:a3:25:a5:
         b7:e9:fc:af:66:21:83:19:a6:46:cf:45:a9:ff:f8:c6:a1:3e:
         22:48:4e:0c:48:f3:17:8e:af:7f:08:41:03:cd:46:5d:01:fb:
         88:f6:6d:06:d1:04:05:67:6d:ec:0f:57:ca:d0:e8:82:8d:8a:
         29:f7:d8:64:af:e1:e8:cc:77:18:dd:fb:09:ad:85:bb:f8:0d:
         d5:0c:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:46 2025 by rpki-client on console-fra.rpki-client.org