Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File:                     COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier:          Okk2ti09qvkHQ+hX3VC8BbKCF6VkVzVM39ITdbe53ok=
Subject key identifier:   13:6B:C6:F7:AC:6F:B8:59:0A:7A:18:A6:34:49:9B:E2:E1:BE:A5:1F
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer:       /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial:       0194BABB246B58E797647F8F5B09FDE79828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number:          48
Signing time:             Fri 31 Jan 2025 05:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:14 +0000
Files and hashes:         1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: SyQu1PM00XBXpE+8gJFcQBEU2r2T2TtNQXewjrbFZI8=)
                          2: xBEy6xBfQ6xkWNnMM3b-8Ps1FR0.roa (hash: Ym4zKNNqMflGb0dAEycHEmUQAQN+DoJITr/UvN/UU8U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:24:6b:58:e7:97:64:7f:8f:5b:09:fd:e7:98:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
        Validity
            Not Before: Jan 31 05:00:14 2025 GMT
            Not After : Feb  1 05:00:14 2025 GMT
        Subject: CN=136bc6f7ac6fb8590a7a18a634499be2e1bea51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:78:72:9e:55:fb:3f:9d:ff:f9:38:a0:7c:
                    2a:34:5a:d9:2d:2b:fd:2d:c9:f1:ed:65:89:bc:48:
                    b3:5f:40:c3:32:60:bf:f2:58:f5:79:46:7c:26:89:
                    16:d9:fc:1a:f1:ae:70:1a:80:7c:af:b8:35:2e:5e:
                    7c:e4:f9:a1:05:3b:5e:56:f9:68:7d:0e:7a:b8:be:
                    0e:1a:ee:48:c0:47:3f:b1:87:2e:57:79:c1:9d:f1:
                    1e:c3:25:c8:74:65:c7:c4:87:cb:78:01:3c:3b:7c:
                    52:de:9f:b3:56:43:6f:4c:c2:3d:6e:0e:ba:d7:00:
                    24:6b:7a:17:b1:3f:0e:70:0b:74:48:40:da:4b:8c:
                    69:9d:26:3c:13:d5:75:a2:b6:bd:ba:14:4c:82:41:
                    6d:69:8e:19:55:35:63:99:ee:4a:02:53:d7:a1:8c:
                    94:49:0a:03:b6:01:9c:73:07:78:40:1f:9e:71:ab:
                    40:a3:e0:f8:1e:78:8f:ca:8b:5c:bb:09:49:19:d5:
                    bf:af:db:3b:d6:c1:b1:2e:5a:84:b1:86:b6:42:95:
                    62:f1:3b:80:71:8e:8b:c6:89:e2:1b:44:45:2a:72:
                    65:1d:41:ed:6a:1e:47:5c:ea:76:22:6a:43:ac:74:
                    9e:2f:be:11:d6:fd:43:3c:38:32:6b:33:89:a0:96:
                    0f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6B:C6:F7:AC:6F:B8:59:0A:7A:18:A6:34:49:9B:E2:E1:BE:A5:1F
            X509v3 Authority Key Identifier:
                keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:85:96:ab:e5:d7:74:a6:de:91:4f:84:37:58:96:2a:06:
         7d:9b:82:d8:10:7e:ea:0a:22:b5:bc:32:38:d9:93:f5:94:cf:
         99:e1:9b:3a:79:0b:05:8c:6d:17:6a:9f:13:bc:cf:40:a8:1f:
         dc:c2:38:ab:29:cf:2b:eb:68:b7:37:ad:6d:ef:f5:24:24:3a:
         8b:59:48:6c:0b:a1:3e:a4:5b:d8:b0:01:5c:1e:f1:ca:ff:8d:
         b1:e6:e9:2b:9c:bb:84:56:9d:e2:24:da:10:5c:2b:97:bb:ce:
         af:e0:61:63:c1:fc:25:b4:2c:42:b2:a3:e6:fd:96:b6:d2:82:
         29:1e:a1:00:46:6d:93:71:aa:1f:95:8b:eb:61:9e:be:81:c5:
         d4:1d:02:19:e4:5e:5d:dc:12:1d:59:b3:98:36:bd:86:18:88:
         29:27:86:67:dc:ac:97:7c:25:a2:9a:01:86:13:09:b1:d9:f0:
         8d:8f:3f:bb:a7:ef:b4:e3:60:dc:7d:83:30:e2:59:3e:2a:dc:
         12:1e:01:c3:cc:2a:b6:c9:6c:ba:b0:dd:f2:c4:6c:9e:18:7f:
         d5:d4:24:b5:0d:11:5a:ab:e6:2e:ab:37:67:96:42:3f:54:0a:
         1c:7d:e6:0c:a0:b9:13:9a:21:11:5e:d9:4f:bf:4f:da:7c:2b:
         5e:ce:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:58 2025 by rpki-client on console-fra.rpki-client.org