Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
File:                     J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft (raw, json)
Hash identifier:          SJf9EH+fbBOrXCR9YKVW12GBsJ8HYh5xW7QqtCbdPhI=
Subject key identifier:   15:41:17:31:44:E2:E7:0F:C1:A0:B9:EC:24:C9:53:A0:3E:DF:92:74
Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
Certificate issuer:       /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Certificate serial:       0194BB292920D72B54F43E254963BD490944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
Manifest number:          03EF
Signing time:             Fri 31 Jan 2025 07:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:24 +0000
Files and hashes:         1: 7DATkiQgD99Q8Hj025MMR2TwrCQ.roa (hash: obBiPPq2wWQ7VYgIzH2jHJNBrijP0sZ5WmBF7e1oncI=)
                          2: J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl (hash: dM8nJX0UdwNvqSK5ihTMoBBZmsZXUjGUA/0Jz0kyqdE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:29:20:d7:2b:54:f4:3e:25:49:63:bd:49:09:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
        Validity
            Not Before: Jan 31 07:00:24 2025 GMT
            Not After : Feb  1 07:00:24 2025 GMT
        Subject: CN=1541173144e2e70fc1a0b9ec24c953a03edf9274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a7:6e:72:74:d9:61:60:f2:47:71:60:cd:6c:
                    5b:7e:a7:00:5f:0c:f1:26:33:4e:0d:59:f0:3d:ed:
                    dc:ff:05:4e:99:05:2f:51:f1:b2:40:85:ef:3d:2e:
                    ea:5a:09:36:e7:aa:67:26:9b:df:18:8d:bb:3e:88:
                    bd:11:f9:81:46:fb:f9:26:25:a6:c7:1b:9d:d2:b7:
                    63:34:fb:a9:8a:c2:58:72:78:d1:02:50:f1:81:03:
                    43:30:fb:bf:c5:28:9e:90:1c:4b:20:f5:60:52:81:
                    b5:0a:8c:cc:05:af:d3:fb:00:62:a5:9b:51:f7:2c:
                    34:09:c2:07:26:41:7b:cf:18:0c:f5:ea:fb:48:09:
                    d2:3f:61:20:e3:30:9b:50:04:51:7b:75:07:84:de:
                    d3:df:3e:92:f9:41:30:4a:c0:a8:f7:75:3f:35:17:
                    fd:d6:ae:99:56:71:39:a9:a4:0d:1e:de:f1:d8:09:
                    b3:ac:c8:75:0a:2a:13:ba:66:58:7f:20:52:60:9b:
                    b3:8d:7f:1f:8c:c9:73:75:ff:21:98:48:bf:28:b3:
                    b7:ac:8c:fc:93:45:6d:d0:af:d6:aa:3e:41:f2:8f:
                    b1:47:5c:d8:66:41:c8:4f:f4:a7:d9:0d:9b:08:6d:
                    df:55:8f:a1:a5:04:ba:3f:b2:b9:e9:f3:ce:1e:25:
                    ec:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:41:17:31:44:E2:E7:0F:C1:A0:B9:EC:24:C9:53:A0:3E:DF:92:74
            X509v3 Authority Key Identifier:
                keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:7a:f7:5e:c7:fb:7e:9d:5d:ae:e5:a7:97:5a:5a:fe:1f:1c:
         3b:a0:fa:a5:2a:68:97:47:44:5f:9e:d5:bc:af:30:67:85:7e:
         eb:fd:02:07:83:97:aa:4c:77:43:f2:b5:a4:da:1b:04:43:2a:
         13:c1:7b:2d:2f:2c:08:d5:94:c2:1f:f2:14:85:fb:57:4a:f5:
         d9:15:ae:43:52:f7:b4:97:b6:8d:14:57:6c:1a:d2:40:75:36:
         f4:23:b6:52:b8:e3:51:63:33:1e:e8:0e:fd:dd:1e:ed:a7:3a:
         5a:8c:31:b3:cc:90:57:f5:7a:81:3f:d0:9e:ee:d4:f3:16:7b:
         75:be:64:fc:74:af:d0:ec:f2:bf:f5:b6:79:d4:09:53:60:e5:
         d5:16:b8:36:6a:cd:b6:da:a3:9b:63:96:8e:4b:fb:ef:56:25:
         95:7c:78:bc:e5:8a:05:4b:64:a9:93:49:07:7c:a9:42:36:bb:
         54:00:a6:6d:ec:c0:6f:df:88:57:2c:47:3b:61:8e:f0:02:33:
         11:88:ac:c2:05:60:b2:2b:1c:a2:2a:a9:c0:34:57:4c:a7:2e:
         04:fc:e8:3f:59:98:86:59:a2:bf:89:6d:79:bb:2a:0a:c3:fb:
         18:d7:44:ee:8e:30:44:a3:78:9e:29:1e:41:9e:11:ba:1c:0b:
         31:3d:f6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:55 2025 by rpki-client on console-fra.rpki-client.org