
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File:                     gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier:          GrzcJFwDxE8/CMKXQQRwOE3fgNiZfHbPkQw6z+C6YCQ=
Subject key identifier:   65:EE:1C:9F:D7:6E:44:37:0C:6F:24:7B:18:34:52:79:74:0B:9A:B2
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       0194BABB70A776A1F84E5C7BDD9E82238BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 05:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:33 +0000
Files and hashes:         1: NxiHrRFmOKs6DxSydD2sJuXQJK8.roa (hash: iNvcUhlJ9Yd5axlJbt+P6uyRKrZKBuBqEJ75zpPuiMk=)
                          2: T9JRBawWchbn8jON5Y0KsUANSlY.roa (hash: 7BHggFyR7wTe61E+5vWC0sJVPX1dUZpjUdh5hUQN4Q0=)
                          3: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: L0s29WZc79Av6l8V8OJs7GRLHQf02gBh7PVanpxohNc=)
                          4: pHamM_FeTuziFQi2w75B0pezcGY.roa (hash: YLgRRlx24P8L2COTLzTtp0xHAktWAujjPd4Z7/lgx3w=)
                          5: xeyOvAZB2wYubEBDAwwO-ACwssc.roa (hash: wLCrfhwnMuWinvjbmYmO6BBiu2MJDTwxPjX1u35nOMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:33 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:70:a7:76:a1:f8:4e:5c:7b:dd:9e:82:23:8b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: Jan 31 05:00:33 2025 GMT
            Not After : Feb  1 05:00:33 2025 GMT
        Subject: CN=65ee1c9fd76e44370c6f247b18345279740b9ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8d:eb:c4:76:da:40:da:93:61:6d:f3:5a:88:
                    cc:64:7b:43:3b:da:8f:17:d5:43:d4:9c:59:60:38:
                    ca:12:14:dc:5e:71:41:93:ce:ad:68:04:a6:5f:16:
                    2e:19:a5:20:53:0e:43:5d:16:ba:92:38:18:56:6a:
                    5e:f3:16:f5:a3:37:a9:08:c2:50:ae:b3:34:08:94:
                    e5:43:4f:20:ed:48:ec:c9:f6:d2:80:04:37:c2:25:
                    fe:8c:b3:83:34:94:ef:44:7c:bc:1f:bd:da:20:3f:
                    2f:7e:45:a3:77:03:26:7b:96:d0:b5:3a:e9:e8:20:
                    83:79:7f:54:35:5d:f9:fc:95:04:b1:ee:18:76:fc:
                    c4:bd:46:5c:50:28:47:39:11:67:63:bf:bb:97:fc:
                    25:1b:d9:ca:5b:57:e8:9e:9f:28:1d:7f:ff:d7:f7:
                    8c:37:69:6b:08:de:fe:7f:39:04:05:15:ac:a6:5e:
                    c4:82:27:b6:4a:7f:72:ad:94:a7:85:3f:04:f8:45:
                    16:a3:d4:43:1b:8c:ac:20:ad:b1:8c:88:8a:01:01:
                    06:43:50:99:72:4b:b3:29:95:d7:5f:a7:05:c7:b6:
                    6a:34:4d:ad:ba:d5:b9:c0:c3:e9:86:15:0c:4f:c9:
                    65:6c:5a:0a:4b:24:e5:53:f2:a2:01:89:bb:d3:76:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EE:1C:9F:D7:6E:44:37:0C:6F:24:7B:18:34:52:79:74:0B:9A:B2
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         6b:5e:be:d9:13:2e:06:3e:19:e6:cf:a4:d0:e7:3a:41:c7:40:
         25:b6:34:f2:4d:e7:34:ad:a9:3d:ae:ad:12:b4:55:7f:39:12:
         97:fd:9c:08:6c:ff:31:e8:be:dd:38:d8:14:53:60:b9:e0:fd:
         9f:95:69:8f:64:b1:57:58:80:c9:5a:45:63:97:43:c6:e7:c3:
         58:21:b9:3f:4c:45:4c:7b:3e:ee:9c:3e:c1:89:8c:74:c1:a5:
         d1:2e:59:03:f7:95:43:0a:b9:a3:cc:b4:eb:c3:9e:83:fd:f5:
         5c:4c:3e:4e:df:1e:88:3f:d8:87:3e:1f:36:3b:b3:bb:37:90:
         d1:15:a5:9b:e6:8a:a8:8e:d3:5e:f2:3a:30:02:25:91:fe:01:
         03:e3:57:56:a6:0c:0b:2f:7c:f0:a9:dc:47:0c:b1:85:bb:49:
         ac:45:ad:a0:60:83:ee:fc:1f:f7:0c:21:f9:48:7c:1c:eb:85:
         e3:78:27:f7:0d:58:de:2e:0e:ea:c1:bc:57:9a:e1:ce:97:0f:
         33:06:4f:e7:5f:4b:a2:34:62:3b:07:94:60:3d:28:60:75:ef:
         be:88:77:02:d4:2e:17:52:84:c7:57:fb:12:73:05:bc:a3:c5:
         81:06:3f:44:ed:0f:f3:3e:45:48:d5:28:50:b4:8a:85:23:0d:
         63:b0:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:01 2025 by rpki-client on console-fra.rpki-client.org