Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File:                     dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier:          DdwS6r0R9kJNt4e9v6Wje4YymsOvgRfjLcu9ZRqdrx4=
Subject key identifier:   B4:C9:50:1E:36:EB:1A:00:0D:13:C5:B2:9A:91:FE:B5:7C:F2:D7:22
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer:       /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial:       0194BABB1E6273844008F7C90E7C0F7AD70D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 05:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:12 +0000
Files and hashes:         1: 3DXXEnpw8Kq8exXKbL27_UtPX4M.roa (hash: PH+r8FXGuNWkdvccxwTfvbjUFdbtdPYMtKDMmyDHBUw=)
                          2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: sTHA+EbG6Wuw2S0WsX66DVf1w883m4U0Q7fGv37TWlc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:1e:62:73:84:40:08:f7:c9:0e:7c:0f:7a:d7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
        Validity
            Not Before: Jan 31 05:00:12 2025 GMT
            Not After : Feb  1 05:00:12 2025 GMT
        Subject: CN=b4c9501e36eb1a000d13c5b29a91feb57cf2d722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:d1:0c:dc:3b:82:31:7a:f3:51:1e:c0:a6:
                    af:52:a7:d3:ea:a6:88:5f:69:cd:74:2e:e5:e0:d0:
                    55:2b:e2:3a:ae:87:cc:1a:d6:3f:1b:cf:fe:a4:89:
                    9e:02:10:75:cb:cd:11:a7:ba:8c:c2:88:b3:bc:23:
                    c5:13:c7:b6:26:69:83:1e:a5:98:ab:78:51:d7:51:
                    34:95:88:e5:32:cc:48:55:49:43:5f:27:49:96:6a:
                    06:b1:b9:66:2a:72:f0:d7:03:7a:67:bb:c1:3d:41:
                    a4:09:59:8f:ba:e5:41:69:53:f6:ea:80:08:91:41:
                    7a:a2:43:05:89:46:e2:33:08:c6:eb:04:87:11:97:
                    89:84:29:31:38:d5:95:1d:d9:af:a4:6b:59:77:43:
                    7f:a9:50:63:7b:01:a5:52:39:f8:00:8e:60:29:09:
                    6f:c3:54:74:76:9d:03:5a:12:90:38:7a:b8:79:8d:
                    d3:cf:43:e1:71:40:6f:99:16:60:f2:8a:9e:5a:0d:
                    2e:36:ac:d1:74:ab:81:a5:4b:7b:13:f3:bf:1a:19:
                    b5:e3:86:68:ad:a4:53:ac:84:24:53:52:75:f7:d9:
                    00:46:16:67:94:1f:4d:c4:21:c2:08:af:fe:05:8d:
                    1f:ee:ed:95:75:2d:db:83:24:f8:17:04:d1:5c:65:
                    85:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C9:50:1E:36:EB:1A:00:0D:13:C5:B2:9A:91:FE:B5:7C:F2:D7:22
            X509v3 Authority Key Identifier:
                keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:53:6f:d7:dc:7c:ba:5f:c1:05:0f:e7:c6:ef:e8:bb:93:f2:
         2b:25:f1:5d:24:44:30:dd:e9:b9:47:67:c4:7e:78:14:c4:49:
         7e:1d:e3:56:c7:3f:e1:b0:02:1c:08:f7:c7:d4:7e:cf:c5:69:
         77:65:b7:68:e4:11:77:d4:9e:26:f2:27:de:ab:06:b3:f3:6e:
         2e:c4:3e:04:e4:d5:7e:d6:35:42:1e:7a:5b:e5:26:80:eb:2c:
         ff:1d:15:6f:18:86:c6:bd:04:76:b1:75:20:e6:e6:fe:3f:3b:
         e7:9b:1a:65:93:77:25:08:e3:8d:0c:d0:1b:f9:1b:50:f9:14:
         db:4c:ce:ce:e8:cb:26:44:08:84:8a:0e:36:cd:bb:6e:af:28:
         2e:98:3e:77:3c:65:f1:9b:e5:c6:50:b8:0e:5a:7a:c4:67:19:
         a5:86:a0:7c:cc:b8:f5:e9:db:5c:fd:ec:a5:f1:09:3e:75:5a:
         a4:a5:ee:ae:dc:de:65:a8:9a:4a:05:d6:c8:4d:27:c7:62:bb:
         7c:f6:5f:dc:ca:f4:6e:86:0c:c4:78:49:a3:e8:7c:48:21:de:
         e0:00:b9:00:41:ff:82:fb:da:05:6a:aa:1d:51:ab:2e:36:41:
         5b:76:c4:d1:bd:ad:0c:f8:b2:a7:ff:21:69:19:36:26:83:43:
         84:4b:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:58 2025 by rpki-client on console-fra.rpki-client.org