Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
File:                     c5ddXanaigdLM_vLXAnVA6O0Q6E.mft (raw, json)
Hash identifier:          vTf4DOiQJ8hykiePPevmaVCV6Z+5Xan/eHr4HEaADlE=
Subject key identifier:   D8:0C:88:74:F8:ED:5C:B5:2B:82:E1:A9:E9:74:C9:AD:DE:7E:FC:E4
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Certificate issuer:       /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial:       0194BAF2279D7954046887A0D59F9BC416B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
Manifest number:          1442
Signing time:             Fri 31 Jan 2025 06:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:19 +0000
Files and hashes:         1: 5hi4oRUV3-lKQNDaUn51nnT1qK0.roa (hash: JinYSimT/Wg2ItaoADr26fHiavicFEOuho5581RUh7s=)
                          2: SjDGqMtyA_tOZOFH9qEhztndPDA.roa (hash: SYm04LsgP1kHh1UhWwOlwBd3q7mezHyPYrt9bFb03b4=)
                          3: T7iXt4sJUoDnHP-qWowXfwJDp5I.roa (hash: KTxUHbHDaHdkVbRY7Vka++NBqUDid63y2hSOJuy207k=)
                          4: c5ddXanaigdLM_vLXAnVA6O0Q6E.crl (hash: Mu6SqrxjIpPuifwIZfho7hItlw5nCZ1wpIACqAZTzAk=)
                          5: cJwqie2X40_QNltIbFm8mbtEYgg.roa (hash: 3tSp6jg9Ep/kPYXuczS90i3Bn6SwmlbgTSU/wFhXkuM=)
                          6: gE2C1EfDuVwxxJDKotTRnz-Yq4w.roa (hash: pwL0fRQakGirIxsJOmpHF82vAfTBBCME2LVYmBIAzQA=)
                          7: iSqhLAHx-OPTgee6HZU05Gn7mrg.roa (hash: /LTwUnCBfctjGJbeDzhYKUgsItn5b+f1/FLcjg7y0VU=)
                          8: il1qN-6b575Qrhubx9ECJYw-ExA.roa (hash: l3cKFcZsIxHBwQmjzQTRktanLJGMwjOlGIjh3dsWi3s=)
                          9: nwasxCIPFFaQLDFGjgREeCDdEJ0.roa (hash: l3Qci4Ma0ZBc/BJswSuk3N16gUqszJQ2M5qXeNWO8Z8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:27:9d:79:54:04:68:87:a0:d5:9f:9b:c4:16:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
        Validity
            Not Before: Jan 31 06:00:19 2025 GMT
            Not After : Feb  1 06:00:19 2025 GMT
        Subject: CN=d80c8874f8ed5cb52b82e1a9e974c9adde7efce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:4b:33:ab:a0:71:6d:19:ce:28:cc:6d:23:
                    34:13:db:ca:eb:28:27:f0:ad:13:b6:bb:68:b2:c3:
                    97:ff:58:c7:e1:d7:d0:c8:96:87:cd:2a:15:d8:df:
                    51:88:be:ad:33:dc:56:85:78:43:56:a2:e5:55:79:
                    b2:5a:f7:5e:0a:03:62:50:d5:3a:d2:0a:d4:84:53:
                    95:b5:7d:21:eb:4b:a6:52:01:b5:9b:ca:15:e0:06:
                    6f:89:a2:19:68:51:03:82:43:66:72:fa:d8:fe:50:
                    19:e8:81:e8:4c:d1:3e:f5:6d:a9:64:36:8b:1f:56:
                    b4:aa:a9:4c:c2:14:cc:e0:7c:a8:3b:cc:cc:50:35:
                    4e:4b:78:c4:d4:0e:32:6c:5e:e4:b3:cb:34:68:19:
                    2a:a1:7c:7f:48:65:7e:e5:4a:84:9c:a3:95:e0:bb:
                    86:1f:bd:b8:6f:12:00:1a:af:bf:f1:fd:9a:32:aa:
                    fe:37:77:2c:2b:91:b6:03:48:c5:40:46:0e:7f:5d:
                    5b:ef:36:ac:68:1f:52:f8:39:5a:5f:8e:b4:eb:c6:
                    17:87:fd:b3:15:14:10:7a:3a:94:9a:cd:40:f7:fc:
                    8c:bf:63:5c:93:17:9e:c3:ac:df:e1:ed:4e:68:05:
                    54:fb:34:05:f1:3e:26:7c:75:c8:ed:8e:16:89:49:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0C:88:74:F8:ED:5C:B5:2B:82:E1:A9:E9:74:C9:AD:DE:7E:FC:E4
            X509v3 Authority Key Identifier:
                keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3f:ac:f6:17:4f:1a:ce:eb:e2:57:21:8f:5f:ce:04:c1:73:
         4b:cd:b7:e0:80:33:67:95:b6:bd:a2:ee:ff:c5:34:44:ed:d6:
         32:8e:63:4c:65:f3:a2:a1:d4:cf:6b:c9:99:d1:ff:1b:3d:ed:
         d0:ab:f4:22:d6:43:69:ea:9a:92:c1:0f:49:49:a7:eb:f3:30:
         bb:76:56:bd:4d:2b:4f:5d:26:41:50:73:cb:bc:f9:f0:9f:b7:
         a7:1a:e7:27:56:1e:19:18:02:95:f0:db:cd:63:cb:df:ae:d7:
         96:3a:85:3f:56:32:b5:65:f7:8f:e6:3b:cc:ea:06:6d:bd:e5:
         8c:1e:f8:7d:b2:b3:13:a7:d2:e5:ec:ca:0f:63:68:b5:08:96:
         94:e3:b5:e8:cc:16:de:c0:f4:e3:33:70:fc:49:31:25:18:ec:
         5a:d8:de:41:b0:3a:b2:5b:8d:fd:aa:fb:81:3d:3f:98:8b:a4:
         86:25:76:c9:ea:d3:2f:bb:12:d2:f4:b4:0d:b0:62:52:63:44:
         fd:58:43:b4:6d:47:54:a1:26:6a:3f:f1:92:57:bf:7a:08:2c:
         ca:74:f5:b0:02:a1:2a:58:db:22:97:08:0f:49:81:1c:af:9f:
         60:8f:71:be:70:6a:13:d0:59:bd:e8:26:6c:39:7f:3a:e3:77:
         61:3f:95:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:27 2025 by rpki-client on console-fra.rpki-client.org