Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File:                     Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier:          vr77ZXRnKTd4xB8he9yI9DB/KJQEkiWIaNZ859GDkNE=
Subject key identifier:   E6:CB:B4:EF:62:AC:4A:D3:3C:BD:FB:0C:22:70:47:5D:2A:6F:21:F9
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer:       /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial:       0194BB973FB5EFCF095CE3CE745C789725E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number:          0941
Signing time:             Fri 31 Jan 2025 09:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:38 +0000
Files and hashes:         1: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: qhHPJjq/mbo3D/0Z+W/Ft0KoswwlocAqnlSi7xAgiP0=)
                          2: yeykCTxRfXSLEqjo1MZ7zObmrks.roa (hash: 1vVWF5KJNfMy/yYL5Sp0YWKLB5R7wsPTTiR6VRMJgCU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:3f:b5:ef:cf:09:5c:e3:ce:74:5c:78:97:25:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
        Validity
            Not Before: Jan 31 09:00:38 2025 GMT
            Not After : Feb  1 09:00:38 2025 GMT
        Subject: CN=e6cbb4ef62ac4ad33cbdfb0c2270475d2a6f21f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6b:6c:2b:30:fd:a0:83:ff:6a:76:96:5d:e6:
                    51:24:a6:5f:0f:c2:c0:27:d7:f7:1f:d9:18:53:4a:
                    af:fa:a2:fb:92:97:21:74:eb:a9:c2:29:aa:10:b9:
                    3e:35:f6:db:6c:53:02:93:54:41:1d:33:94:98:64:
                    7e:c0:36:f6:7e:c9:7c:2f:c6:12:1e:8a:e5:a8:28:
                    6b:ea:74:0f:98:9b:6d:0a:0a:fe:eb:d4:3e:24:f5:
                    e9:21:9b:8b:e3:f0:10:71:ef:41:26:c6:2f:4c:2f:
                    cb:b8:78:d0:bd:5f:25:12:40:11:9a:09:f4:fb:f4:
                    2f:63:fc:ae:d8:3b:72:17:22:9b:a6:41:5a:29:c9:
                    0e:93:ee:c3:35:4f:e4:d5:d3:ed:2b:e9:68:d9:51:
                    ab:35:1a:3d:60:8a:cf:3e:37:4b:ed:9a:b0:dc:9f:
                    d1:dc:07:a6:f6:fc:c0:81:dd:64:0e:c4:1a:de:98:
                    16:96:35:fd:5a:5d:d7:91:1d:cf:67:75:76:72:40:
                    65:00:33:ca:11:9e:77:4b:fd:1a:f2:ea:47:96:a8:
                    42:c6:78:cc:5e:6a:82:28:3b:1c:04:6f:5b:ce:6d:
                    4c:2f:e2:f5:b5:5b:a0:8e:19:d6:a4:08:e8:05:59:
                    49:45:f1:04:bc:14:80:04:91:ad:bd:f9:67:22:de:
                    42:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CB:B4:EF:62:AC:4A:D3:3C:BD:FB:0C:22:70:47:5D:2A:6F:21:F9
            X509v3 Authority Key Identifier:
                keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4f:21:34:aa:37:bf:ba:f6:ad:15:6d:ff:a7:77:86:e2:10:
         85:06:c9:7f:b0:43:3b:80:51:72:bb:50:95:55:0d:79:70:bd:
         ef:ed:ad:05:68:b4:8c:47:33:80:75:3f:47:35:38:3b:b2:51:
         f5:a0:a2:a9:61:15:c8:f4:ff:c3:b6:5d:79:09:b1:dc:a9:1c:
         12:65:ce:81:d0:62:bf:58:c2:12:ca:1f:af:11:47:90:83:7a:
         b3:13:bb:b0:85:19:fd:31:41:e7:54:5b:25:19:13:34:27:2d:
         fb:f7:bb:cd:50:b2:37:78:1f:1f:83:cf:71:a7:1e:b9:4b:34:
         c1:8d:27:70:7b:25:60:2c:e9:ea:e5:cc:38:5d:33:10:93:c2:
         c7:da:ab:4d:70:1c:31:8f:35:00:2a:5d:b7:4d:1a:fc:19:31:
         da:2e:36:7f:34:2c:9a:a7:8d:f8:6a:8a:6b:fb:ef:e6:e1:53:
         1d:4e:c4:c2:70:00:79:5d:42:a0:b9:56:d2:77:d4:55:6d:d2:
         19:78:53:14:15:e8:fe:fc:fa:44:f3:f4:a4:54:b9:93:3b:b4:
         3e:e5:fe:3c:70:f3:3e:a3:b7:28:50:08:26:63:33:f7:7b:48:
         ce:db:2d:8a:28:ea:fc:cf:11:51:06:4d:f5:55:bc:ec:33:31:
         ef:1c:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:08 2025 by rpki-client on console-fra.rpki-client.org