Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
File:                     ApMPjGiMBNF0M6K5xySbxiW84xY.mft (raw, json)
Hash identifier:          xP3hSGOhmCEclJlYEOfz90mvZQ1Wf7TpRKloBnX5U2g=
Subject key identifier:   8F:0B:FD:59:2D:23:37:41:97:43:D7:93:1D:89:AB:34:C3:D9:85:2E
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Certificate issuer:       /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial:       0194BABBAD2C38954A46971086E844EBF332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 05:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:49 +0000
Files and hashes:         1: 1-PzmF4tvuhKnjwj3wR1qNsz6zbo.roa (hash: rCQ1A+S4WfDslZlckjYnZ133GXKciaH3+lfRZ8R/JEo=)
                          2: ApMPjGiMBNF0M6K5xySbxiW84xY.crl (hash: ebu/QlI8H9uWAdvQ46tKsGXwuuFikEjxDbDxPNp2ylU=)
                          3: PU0hNxhZ9gnygWHqNr07qXkxc94.roa (hash: wzZfk5io+9qbaGJN9m6CkPiNg3q3eNTUNIPd7O5ekZA=)
                          4: nqK8kpSYyrSKMaEvvDzkkm62DuY.roa (hash: GiB9efPeR8VDxJjx4X5Yp7E1DvjQkRODPO17/HFGvF0=)
                          5: rCEPMjGu5dMMBXkuJaxe2se2R0U.roa (hash: RyS4C53Wz4c+6Gzz512GBJ/uZaj5Sg3AxTdwiKVWifk=)
                          6: zw5WHYA5TDqrVNRIt5-8FVfd80s.roa (hash: K+1DSxDhqmdzbJYUSYY3LlUaPbN/Zqn08bbsPtcXeuM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:ad:2c:38:95:4a:46:97:10:86:e8:44:eb:f3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
        Validity
            Not Before: Jan 31 05:00:49 2025 GMT
            Not After : Feb  1 05:00:49 2025 GMT
        Subject: CN=8f0bfd592d2337419743d7931d89ab34c3d9852e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:75:7f:1f:11:e4:94:c5:d8:d0:1f:7c:50:
                    74:9f:19:05:91:f6:a0:c6:00:c1:44:8f:12:d4:d6:
                    04:a9:9e:2e:77:05:3d:09:d6:03:6a:6a:8f:ac:06:
                    b9:0d:0d:10:e0:76:06:80:51:bb:0d:fe:8a:03:4b:
                    f9:91:3f:28:c2:4b:40:d6:b6:0c:35:14:09:a1:91:
                    b4:d1:be:0e:e1:45:f7:35:6c:f6:73:86:03:78:f1:
                    73:47:d3:19:39:d8:a7:28:f0:48:68:56:de:9e:e6:
                    fc:53:98:18:e2:59:16:01:24:35:c3:14:a5:39:bc:
                    20:e6:2f:9a:e5:11:99:32:f0:12:53:8e:16:1d:b1:
                    19:c6:1a:c4:ca:d4:09:3e:64:cc:39:01:2d:f9:6c:
                    a3:d7:86:f1:51:37:3b:28:ab:47:24:f4:30:72:6f:
                    18:68:10:f2:a7:5a:bc:af:66:08:be:a2:0f:bd:81:
                    8c:e9:96:85:6d:82:a8:bb:7c:5c:a7:d8:fe:e1:0f:
                    64:d7:0e:f5:28:3e:5b:1e:1a:f3:bc:52:56:a6:92:
                    88:f9:66:f6:e5:01:b2:81:c6:27:2b:47:ec:10:e8:
                    9a:09:f2:58:a1:4b:d9:21:a3:63:60:d8:c8:51:74:
                    71:2f:a1:04:c5:96:cf:49:b2:8c:39:36:8a:76:f3:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0B:FD:59:2D:23:37:41:97:43:D7:93:1D:89:AB:34:C3:D9:85:2E
            X509v3 Authority Key Identifier:
                keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0b:39:ba:81:f1:13:a6:1b:1e:b5:89:0a:56:6a:8f:2b:21:
         17:f0:f6:45:05:81:e2:2a:62:e1:b6:f4:1c:a5:79:e1:e5:79:
         2f:fc:0f:48:e6:ac:5e:af:8d:55:9f:15:da:ad:b4:40:c6:ac:
         e8:6b:93:87:37:40:10:c3:ec:b4:5d:d2:a8:ff:01:93:15:15:
         a0:88:62:7d:6b:ad:36:24:e5:bd:f4:68:17:af:7c:8c:be:ee:
         27:48:eb:98:bd:02:09:d1:49:0c:9a:d0:fe:8a:4d:31:aa:05:
         14:c2:80:08:c5:b7:84:9f:c0:e2:23:48:d9:1a:30:b2:e8:46:
         72:ad:15:16:d3:f9:a6:87:fe:d1:c0:bf:a7:13:52:31:3a:e5:
         de:cc:08:c4:6c:13:d7:35:90:bc:52:20:c2:8e:b1:b4:2a:91:
         c7:2e:4f:b5:08:4d:f8:0a:5d:81:e2:1e:85:73:61:f6:49:bd:
         c3:1a:bf:6a:94:6e:18:f9:3b:25:3a:2d:c5:98:d8:6c:33:9d:
         2d:bc:42:a6:bd:db:d4:c5:83:ad:17:c0:09:d6:55:56:a5:66:
         28:6a:71:e4:d1:7e:f9:ea:84:be:73:d5:af:2e:e4:b8:9a:02:
         e8:0c:cc:69:a7:9c:95:82:c6:3a:16:4c:c7:cf:71:55:25:83:
         c5:2c:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:07 2025 by rpki-client on console-fra.rpki-client.org