Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File:                     3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier:          VYf/uFIWvtO4WCI5EQtLdLItQDjMmDWcecPX+vbpWEA=
Subject key identifier:   64:7F:9E:1F:72:CE:45:85:D0:F7:93:72:95:7E:AE:9F:3B:B2:16:41
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer:       /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial:       0194BB297832AAF88590B52A703667F4E4AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 07:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:44 +0000
Files and hashes:         1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: 83mZyUMoMKGwM8Alo4JfPALypiG5FJHY3rQsTnH+uk4=)
                          2: A1Kij3UmuqlYPUgtFwkRpc3mYFI.roa (hash: 7eehR/MKaZhrxZxZgGixZL1BWxFDBQrZZYdPEfeskDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:78:32:aa:f8:85:90:b5:2a:70:36:67:f4:e4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
        Validity
            Not Before: Jan 31 07:00:44 2025 GMT
            Not After : Feb  1 07:00:44 2025 GMT
        Subject: CN=647f9e1f72ce4585d0f79372957eae9f3bb21641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:f9:0d:e7:54:ab:0d:30:ce:43:06:fc:32:
                    31:9a:f9:ac:1a:46:72:0e:34:5e:42:21:0a:9c:b1:
                    ae:ba:51:23:94:f9:f1:cf:6f:b1:7b:ec:4e:d1:e4:
                    fc:61:cf:eb:9b:d0:fb:9a:8b:77:c8:32:b7:cb:df:
                    1b:cd:8e:95:69:12:8f:1e:02:d9:fb:e0:43:c3:51:
                    14:10:f7:50:2b:ea:bb:d0:f7:83:f5:39:65:80:9e:
                    89:d1:55:b2:51:99:9e:93:eb:46:50:8c:bb:54:24:
                    e6:59:4c:f5:69:07:4a:23:d7:ac:44:22:3c:3a:42:
                    ee:ac:4f:48:57:6b:17:52:3d:bc:76:90:2e:fd:1b:
                    2f:ec:ec:ec:33:73:75:5d:16:3b:0f:59:a3:92:6c:
                    ba:e0:c2:21:46:ed:79:ea:04:1c:30:17:fb:48:4d:
                    5f:fe:8c:f8:94:83:3b:5b:bb:b3:5a:a5:ae:86:b7:
                    f7:0b:82:67:bd:04:0e:3d:3a:64:e3:8e:e8:1d:25:
                    71:db:10:77:df:2e:4e:28:d5:f2:8c:fa:ad:86:28:
                    a4:8b:fa:da:34:7e:6b:ce:e7:cc:a4:dc:fe:1b:45:
                    0b:aa:62:ea:75:3f:49:95:c9:64:04:3b:ea:87:e2:
                    f1:7c:76:68:69:e9:14:26:51:e5:fc:83:84:e7:cb:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7F:9E:1F:72:CE:45:85:D0:F7:93:72:95:7E:AE:9F:3B:B2:16:41
            X509v3 Authority Key Identifier:
                keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:19:9e:72:4f:6f:43:ba:aa:4c:ce:48:72:86:80:7b:4b:06:
         19:a8:27:2a:65:f0:ae:41:8d:e7:b5:75:be:78:70:ae:c7:de:
         8f:ea:80:9a:f3:f9:9b:18:4f:9d:93:03:96:3b:44:f8:1b:8e:
         88:95:ed:61:63:ab:9e:82:59:dc:b8:cc:99:d5:e7:85:94:3a:
         06:21:75:4e:28:79:80:a2:bd:6c:b2:0b:46:36:6a:88:aa:9c:
         95:ad:51:b6:ed:36:4f:67:3a:44:92:51:5f:7f:c0:78:1c:f8:
         f8:a4:f7:d3:bf:18:93:23:ed:f9:3e:ea:f4:74:f8:20:20:2e:
         3f:82:b5:59:ef:fd:da:eb:bc:ba:b4:97:20:f3:11:0c:b5:de:
         36:e1:95:78:05:22:77:a0:83:fc:32:19:a9:4a:98:e8:6b:e1:
         3d:e2:2e:d1:1a:5a:f1:81:1f:f1:f3:b1:99:0e:de:74:96:c2:
         3f:f7:c0:3d:82:05:1d:62:98:fd:63:4c:c5:33:1c:80:16:3d:
         84:c4:d7:a5:c7:b7:9b:44:c1:a9:4b:aa:c1:fa:d2:f5:4d:11:
         c4:c5:d1:41:46:1a:13:2b:91:1c:6d:44:4a:41:dc:c2:a1:e7:
         46:4d:98:02:a5:a2:f4:8c:8b:e3:e8:d6:b7:c6:08:37:0f:4d:
         a0:46:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:32 2025 by rpki-client on console-fra.rpki-client.org