Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File:                     Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier:          zNHErL3OIDULVIpFX7x4nfQc+qO6aCB2kqNyiyF+aco=
Subject key identifier:   CD:AA:CC:3B:F9:27:4C:74:29:4D:45:CB:B2:CE:F1:A7:44:48:80:F1
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer:       /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial:       0194BB2946C71CE8E9AF178332E5146554E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number:          03AA
Signing time:             Fri 31 Jan 2025 07:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:31 +0000
Files and hashes:         1: 41Kf3SCwnWPoeI3gwt6SuiM3U8E.roa (hash: u7Hgq9t6aNSvvpN1ap2hOUlss087XACBIUhudiFtYGg=)
                          2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: aB4WUU55zM2J8P3TZ/NnVO7o4DxHVTFAjU79JnpouuE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:46:c7:1c:e8:e9:af:17:83:32:e5:14:65:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
        Validity
            Not Before: Jan 31 07:00:31 2025 GMT
            Not After : Feb  1 07:00:31 2025 GMT
        Subject: CN=cdaacc3bf9274c74294d45cbb2cef1a7444880f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:b4:8e:5f:92:a7:c0:83:68:94:9a:b5:8f:
                    70:e1:c2:67:ed:75:41:1f:ef:04:ed:84:0a:ba:84:
                    b9:af:d6:36:05:bc:d7:c7:21:c5:0f:2a:8d:a5:46:
                    5d:fe:1f:ea:ef:ec:c0:36:db:e1:eb:27:ac:b9:41:
                    ad:20:6a:f3:48:f3:fa:03:78:62:46:62:ac:ae:00:
                    b4:21:0f:02:3f:40:95:b6:ea:0a:67:dd:5c:92:fd:
                    6f:f7:e8:9e:87:a5:3e:d7:87:3d:73:c1:1f:60:f0:
                    b2:8d:9b:1d:f9:ec:91:da:c5:72:fd:c4:b3:b1:fb:
                    be:3d:34:c3:e7:12:54:4a:57:e0:6d:e9:ec:9b:e4:
                    bb:9f:4a:7a:8d:f9:06:8e:45:1b:dd:48:ec:09:71:
                    aa:f7:bb:9a:73:30:58:73:b0:e7:67:86:82:4d:18:
                    6b:e0:71:7d:13:9d:74:89:30:5c:45:07:fd:92:2b:
                    43:84:4b:08:ef:85:2d:52:ab:25:b2:f8:88:6b:c4:
                    a2:24:c0:b6:53:94:3b:3b:d7:e1:2b:55:87:c3:6f:
                    43:eb:0b:d7:11:5d:fb:ac:e2:92:46:57:e7:4a:37:
                    87:6c:ea:88:90:e6:79:91:23:b7:b8:94:a8:7e:05:
                    a3:96:f7:15:b7:11:87:45:5c:d4:bb:81:a7:b5:56:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AA:CC:3B:F9:27:4C:74:29:4D:45:CB:B2:CE:F1:A7:44:48:80:F1
            X509v3 Authority Key Identifier:
                keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1e:de:51:66:fd:2c:3a:26:9c:08:40:6f:0b:7c:c2:52:bc:
         bc:a9:7f:9f:74:66:3a:28:03:43:a4:7a:8e:d0:ef:79:65:15:
         57:bc:d2:47:c4:67:8e:42:d7:2e:95:94:fa:24:2d:a0:fc:6f:
         10:cd:a2:28:ee:2e:61:89:37:40:93:32:ad:e3:a7:97:74:e5:
         00:ad:79:fe:ed:73:f3:c8:49:fe:80:5b:24:e7:11:1c:49:55:
         1f:1e:89:c1:d9:d2:72:2d:8d:ca:56:d7:53:15:7a:79:eb:b0:
         23:c8:4d:23:2b:48:25:c1:64:99:73:36:5e:78:f8:ca:e9:dc:
         9e:e4:63:14:38:f8:b1:d6:e1:cd:96:c9:bc:5e:61:ff:ce:b5:
         9c:a9:b1:06:06:19:5f:08:40:75:f9:33:23:10:70:16:d2:e5:
         a5:46:d5:32:1a:3d:29:24:f5:79:76:fa:50:f2:4c:27:d8:d1:
         a2:cc:f4:4a:ce:66:fc:86:f0:dd:82:f1:88:d5:de:6a:9a:53:
         cd:f8:8f:83:49:22:f5:82:0e:23:ea:c9:6f:5c:ef:0a:bc:f9:
         96:27:52:40:a0:4b:8a:9c:c2:db:59:17:82:09:de:23:d7:2c:
         d2:eb:61:c8:95:f5:f4:80:cb:4d:e7:2b:ab:bc:58:36:1f:7c:
         34:e8:6f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:08 2025 by rpki-client on console-fra.rpki-client.org