Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
File:                     ehDuIoBzMoosIIHLsqls0SZNvvE.mft (raw, json)
Hash identifier:          sQYTY2PKS9N8fXunRnrj0UriwGRHvXjIZ2GBt+OO4qs=
Subject key identifier:   51:AB:2B:C5:DE:22:EA:B3:C3:AC:CF:0E:F2:3D:61:E3:3E:72:9E:97
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Certificate issuer:       /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial:       0194BAF229C3B8596415B1A5A5F8CA2F241D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
Manifest number:          0412
Signing time:             Fri 31 Jan 2025 06:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:20 +0000
Files and hashes:         1: 9SFdi7V4q-05lNgfIa-K_CLlxc0.roa (hash: Kxe5R+STpor8dRXj7m0AfgFUBqqAzp8M8cMC2zERYAE=)
                          2: YOoATeftAqa3NPiX4GaHabwS1wo.roa (hash: DFj5QH8pLrMMR4sLFXByWiOjYdjY2qX4JxhZH4EeUc8=)
                          3: ehDuIoBzMoosIIHLsqls0SZNvvE.crl (hash: r5AKWuLeJNTLNwm2xm0AuZMz0TqkxUDBos7/OHvjby8=)
                          4: iId92xKtiFHP1gLGCJzcRznJ-x8.roa (hash: K/cBgrLnI3n5D0y566D4mvg3caFRpTqECvwpfj65k50=)
                          5: nGtIZ1A0r3xiykXpIIhUDVqM2rM.roa (hash: GlsG6Os9dw7nPxzZGJzrKgTYWqeKyXt9Ngu3pmbbKe4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:29:c3:b8:59:64:15:b1:a5:a5:f8:ca:2f:24:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
        Validity
            Not Before: Jan 31 06:00:20 2025 GMT
            Not After : Feb  1 06:00:20 2025 GMT
        Subject: CN=51ab2bc5de22eab3c3accf0ef23d61e33e729e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b0:4d:1d:ca:83:e8:6a:f6:6b:69:54:fc:b0:
                    d0:7c:c1:0c:6e:36:2d:43:84:2e:03:92:6c:81:4f:
                    2c:29:59:3c:40:95:56:d9:4f:73:01:b3:39:be:19:
                    28:14:2d:b7:d6:f4:05:fa:24:b4:63:24:da:d2:0e:
                    b7:13:67:7a:01:0c:6c:31:da:cc:3f:e1:98:41:c3:
                    db:42:34:c4:d8:67:9d:c4:2e:6d:30:40:e9:19:9a:
                    42:17:38:59:42:fd:42:33:a1:3c:67:97:8e:83:44:
                    d9:57:11:9b:94:6f:9a:35:c3:9a:f7:b4:7a:67:6b:
                    be:6d:a2:3b:c8:74:3b:37:93:c2:a2:b5:d4:f9:d8:
                    97:f5:e3:34:53:0d:08:83:fe:46:6a:46:9d:3e:97:
                    bd:f3:5b:89:08:f9:e7:3a:bc:90:b1:c1:8f:3f:2d:
                    09:c7:32:3a:a4:e6:76:08:49:11:f1:fc:a7:49:a0:
                    78:b3:12:ae:f3:09:e4:62:cd:e3:6c:aa:46:45:da:
                    e6:94:85:cd:1c:d7:9e:fd:38:90:94:72:92:84:ee:
                    e6:91:da:17:dc:72:d8:0b:3b:03:b6:13:c6:73:b4:
                    cf:63:06:45:36:ed:12:9c:d7:80:b6:cd:1b:60:e2:
                    bf:26:b3:25:d4:7a:f1:bc:8a:66:ba:f8:be:40:23:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AB:2B:C5:DE:22:EA:B3:C3:AC:CF:0E:F2:3D:61:E3:3E:72:9E:97
            X509v3 Authority Key Identifier:
                keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:b8:0b:b9:42:f1:73:8b:47:d3:cf:29:e1:34:c0:71:ee:
         54:68:aa:58:71:8a:14:39:52:94:81:2d:f5:76:cc:ef:7e:34:
         90:24:21:98:61:63:87:a5:b2:1b:e5:d8:06:ba:f1:8b:a5:8d:
         79:a5:af:be:fd:6f:30:22:06:ff:4a:a4:68:79:02:94:d2:9b:
         fc:f3:ea:13:9f:91:07:fd:e6:71:c3:f5:f4:08:2f:65:f8:fc:
         13:7f:70:69:55:c4:a7:c9:d8:20:3d:93:f2:59:96:5a:ab:89:
         ef:53:52:9d:0a:f2:21:d7:67:c9:34:df:e5:93:0a:48:ff:60:
         fd:f9:45:f3:b5:00:f7:38:d8:9f:0e:44:3c:30:ab:77:92:df:
         b0:21:1a:07:8b:be:80:41:40:2a:a9:5a:f2:8a:28:1e:f4:c2:
         54:ac:10:38:02:b4:cc:99:bd:71:5d:0a:5d:5f:98:f8:89:b9:
         26:4b:b2:15:88:aa:4f:9d:b9:a5:82:6c:37:77:57:a7:8a:1d:
         65:5b:89:b0:46:06:53:cf:c5:ac:f2:22:9d:65:9e:6c:1a:26:
         7d:ef:83:e5:4a:40:87:47:1c:78:c9:47:f1:af:d8:71:f9:79:
         05:43:01:1e:17:dd:b7:5b:b6:bc:d9:51:c9:b2:e9:a2:06:6d:
         1f:9f:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:29 2025 by rpki-client on console-fra.rpki-client.org