Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File:                     exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier:          Pwu2EB8QODg1OjZuh6k4qdUL77yvZQE6Tyn6gf+yL70=
Subject key identifier:   B0:FE:C7:4B:61:39:20:44:DB:D5:CB:E3:D8:8D:5E:12:CF:62:C5:68
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer:       /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial:       0194BB97422EE8812758BA4098423EC67B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 09:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:39 +0000
Files and hashes:         1: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: aGs5CvLaNTcHEBU2tTlXH5Tkp5hNMwshdEn7hmcXetg=)
                          2: iUoNxOhwebXoe8b72BR2AhmpSeA.roa (hash: tWfhDKNLJhumUMuEB+92tFSBgGLOO7GXSiupWsvky5w=)
                          3: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (hash: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:42:2e:e8:81:27:58:ba:40:98:42:3e:c6:7b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
        Validity
            Not Before: Jan 31 09:00:39 2025 GMT
            Not After : Feb  1 09:00:39 2025 GMT
        Subject: CN=b0fec74b61392044dbd5cbe3d88d5e12cf62c568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:cf:21:7c:76:12:21:e2:3f:44:27:56:81:
                    ea:13:70:90:a1:8d:21:a8:18:ce:d6:f9:ac:be:b7:
                    9e:8e:4e:84:0d:17:7f:bc:98:20:88:56:93:ef:72:
                    52:28:f4:2d:6a:08:cb:b5:66:09:c5:d8:1d:07:4d:
                    bf:f4:35:36:bb:8c:34:e5:bc:ee:cf:eb:4a:94:27:
                    16:84:3b:72:cc:5f:65:ba:c1:31:a3:d8:69:a9:39:
                    24:d5:01:3d:83:b7:72:87:9a:f6:b0:6a:45:1d:d0:
                    95:e9:23:1e:ce:be:32:2d:ea:e4:08:67:87:a4:f1:
                    3d:d4:e5:c8:68:c1:73:a1:5a:a0:e3:f8:c5:27:56:
                    a2:c8:8d:2b:99:ed:8e:51:88:27:4a:b1:e9:3e:72:
                    e8:8b:d8:6c:5d:9e:c5:aa:cd:4a:bd:56:7c:32:e4:
                    54:d5:b2:1d:eb:b8:b9:d4:28:d3:bc:ff:3a:6b:70:
                    be:10:cf:c3:2c:2f:17:ca:42:bd:0d:01:d7:c7:5a:
                    49:18:8b:d2:46:7a:6f:c4:89:52:ac:3e:c3:e9:1c:
                    84:1b:31:0f:ce:df:36:0e:34:e6:0e:19:b0:f9:81:
                    63:c1:fc:de:12:5a:14:f8:3d:9e:35:cd:1d:29:6a:
                    a9:d2:68:a3:41:5f:2f:a6:1b:2c:13:1d:79:3c:82:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FE:C7:4B:61:39:20:44:DB:D5:CB:E3:D8:8D:5E:12:CF:62:C5:68
            X509v3 Authority Key Identifier:
                keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:64:6e:2a:71:c8:38:89:8c:5c:18:88:24:c9:90:6a:e0:46:
         cf:1e:5f:f3:95:b9:6f:ad:ef:13:0c:bb:a3:41:f0:30:73:e2:
         2a:e5:3f:2d:5d:ad:80:61:fe:ae:25:eb:ff:66:81:6d:4d:ba:
         11:84:44:2b:d4:44:bc:10:93:9c:49:81:a6:13:f9:29:3c:58:
         08:a9:0f:3d:dc:b1:a6:10:f0:0a:66:ee:db:1b:81:27:49:79:
         61:bf:d3:85:8f:10:7d:ef:77:6e:ec:07:2a:49:9c:39:b3:ac:
         87:4f:d1:e2:ff:12:5e:69:05:cb:4a:b9:25:94:d3:a6:7b:7f:
         e6:ff:2a:ce:88:8b:a7:47:e5:5d:9e:74:2f:94:44:04:ee:55:
         f8:e8:1c:60:eb:31:37:83:6a:b6:40:2e:3a:87:6c:82:39:4f:
         a5:fe:06:69:3d:7f:73:23:45:7f:1c:35:df:56:2f:46:4a:f4:
         91:ca:2b:e4:e9:00:bc:2f:b4:66:16:b7:aa:81:ce:e7:4c:c4:
         64:3c:32:3b:f5:72:1d:81:09:4a:ba:e3:bb:42:4a:a0:51:50:
         6c:39:0c:8e:ea:f2:66:3a:e8:c5:49:ca:1f:54:af:b4:bd:e7:
         ac:f7:d8:cd:ad:be:4f:ac:53:47:13:f3:f3:9f:17:4f:2a:a9:
         97:ae:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:45 2025 by rpki-client on console-fra.rpki-client.org