Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File:                     FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier:          DlBklx2Vda4p3/2KAWXzLfCr1oK1kHzUeG9/ZMcIrZw=
Subject key identifier:   9F:7B:30:E0:84:45:A8:8D:70:4A:3E:D8:9D:4A:6C:16:8B:F1:64:B7
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer:       /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial:       01940758FD79659712DB2BA6459FBCFB6B6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number:          05A5
Signing time:             Fri 27 Dec 2024 09:00:59 +0000
Manifest this update:     Fri 27 Dec 2024 09:00:59 +0000
Manifest next update:     Sat 28 Dec 2024 09:00:59 +0000
Files and hashes:         1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: uNXr0cLADztK1qDQNbuAusSbg7N2JZlyQMrtMcqG8zM=)
                          2: Qu7yyD6p8Xqu7jSzdVwEkKbOxTQ.roa (hash: 08GYJzUz0FIxrHD0dOoyYwjeXS/M8kAi1lDBmOAWqsE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:58:fd:79:65:97:12:db:2b:a6:45:9f:bc:fb:6b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
        Validity
            Not Before: Dec 27 09:00:59 2024 GMT
            Not After : Dec 28 09:00:59 2024 GMT
        Subject: CN=9f7b30e08445a88d704a3ed89d4a6c168bf164b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:45:f1:e4:2c:08:1d:38:40:81:40:6e:e7:
                    5f:b5:6e:8d:93:55:07:77:fb:ef:5b:1f:99:03:53:
                    0d:7d:d3:60:57:5f:18:e6:ad:70:2a:21:c0:b7:b6:
                    1b:5e:de:b1:57:dc:3d:fe:c7:96:f2:ff:88:31:f1:
                    ce:a7:c0:c7:ff:ed:3d:b5:db:17:f7:0e:f1:1b:1e:
                    36:43:c6:dc:8d:56:51:19:ec:1a:3f:4e:60:70:d0:
                    36:0a:5e:9a:33:4a:b7:dc:74:8e:f0:8d:1c:f0:c6:
                    28:c4:63:6d:b7:3d:0b:b0:75:4b:36:d9:ec:72:ef:
                    97:a8:a1:7f:3a:c4:c7:46:97:81:91:dc:35:08:9e:
                    0a:47:4d:6f:a8:fe:70:18:b1:d2:97:34:c0:1a:30:
                    f8:69:22:e9:1a:61:37:66:20:69:2a:e6:b6:aa:ce:
                    8c:82:2b:5f:c7:69:d1:10:18:63:9e:bb:bc:37:90:
                    91:d9:39:ba:28:ba:3d:8c:09:6f:df:f2:84:72:32:
                    73:d8:f1:d0:f6:61:37:84:a9:85:e5:d2:93:be:be:
                    96:7a:2b:c1:4e:35:0a:a9:6e:27:a5:a3:b4:5b:79:
                    39:78:3f:7f:cb:80:07:5b:77:76:9f:f0:e1:b6:a8:
                    97:55:fd:ff:3b:33:77:bb:b6:89:b4:1a:6b:34:f6:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7B:30:E0:84:45:A8:8D:70:4A:3E:D8:9D:4A:6C:16:8B:F1:64:B7
            X509v3 Authority Key Identifier:
                keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3b:51:ce:7f:69:dc:44:82:17:cd:c4:2f:4b:fb:d6:76:90:
         35:ac:de:07:44:c0:cd:7d:a1:6b:7f:ea:b3:86:bb:d6:db:45:
         b0:9a:b5:03:cc:3f:06:44:03:19:87:85:78:3a:49:18:4f:ba:
         68:a3:e9:60:fc:a8:b4:4b:a8:06:c1:bd:9a:d9:ca:1b:42:46:
         c0:af:b0:c2:ea:56:b2:d0:70:fc:9b:69:b4:7f:62:60:77:1f:
         f8:aa:a1:05:c0:9c:8a:9b:13:1f:44:74:62:72:59:af:a0:6d:
         cb:12:08:78:7d:77:d0:f3:ad:b1:ff:d3:c5:be:f5:cd:37:74:
         29:4a:4e:9e:5b:86:95:31:18:c4:78:98:9e:8e:d1:ae:b5:25:
         17:4b:52:4e:51:32:77:66:19:21:ae:67:ac:ab:c3:0b:68:d1:
         87:0a:ce:28:29:bb:67:ad:ef:95:2b:70:52:a5:a5:51:50:44:
         58:ee:ee:b2:66:df:22:4d:b1:e8:a5:36:2f:14:8f:ae:b2:1c:
         14:2d:66:5a:62:68:23:84:bc:2b:8a:14:96:5c:37:d4:04:31:
         ed:44:2f:8a:35:19:95:b7:88:85:0e:15:75:8c:83:d3:e3:72:
         87:74:50:a1:43:c4:1b:b9:bc:d1:c1:a5:df:b7:08:59:cd:49:
         ce:f6:97:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:44:29 2024 by rpki-client on console-fra.rpki-client.org