Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File:                     ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier:          8i3DhEflVyxIyyabNOJSrb/x2+UXZk3i/KVfu/L8l1s=
Subject key identifier:   8C:D3:2D:49:7F:D3:90:1D:38:77:A1:96:39:9B:F8:39:35:8C:19:F9
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer:       /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial:       0194BAF25D71265BCE354E31A79E5FE82B0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 06:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:33 +0000
Files and hashes:         1: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: IrYJyFlk0eVYqs2X7SpOQKg3ki4Vr336lergF0BkYyE=)
                          2: ckxfsidkq0zDgn8HR-xIWsqm2AQ.roa (hash: WdjOIbcaJnLXbL/Nx00pV5xdwXgfnCo9JLmJy57TSjE=)
                          3: rS8McXzCkBbcVb5uezFTBLPdaiQ.roa (hash: KC6Lr4AJ8lP/HwGwdQX+pnrzkPDHp47sMoI3Dyq3FbM=)
                          4: uYm5oYNq-JACxgzZxNgku-KZuSg.roa (hash: mMvblRec/LXUeEQXaAaSvKQKI7NqUb/x663S4SMp3Ck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:5d:71:26:5b:ce:35:4e:31:a7:9e:5f:e8:2b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
        Validity
            Not Before: Jan 31 06:00:33 2025 GMT
            Not After : Feb  1 06:00:33 2025 GMT
        Subject: CN=8cd32d497fd3901d3877a196399bf839358c19f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:78:02:ff:bc:bf:5b:89:9f:87:99:6a:ad:3b:
                    f5:c9:73:6e:a9:0b:81:0e:d1:17:b6:32:ab:22:8a:
                    06:0a:ad:04:b9:ca:f3:aa:72:68:10:94:47:b4:5c:
                    97:dc:b7:da:83:b4:40:7c:3b:e2:84:41:2d:82:7a:
                    94:19:9b:46:d7:eb:cd:f6:f0:43:d8:9e:66:df:b2:
                    c9:e2:d9:b9:26:bd:db:2d:64:6e:9c:6e:9b:62:0c:
                    e5:54:54:a7:8d:ff:de:84:48:69:b2:d1:79:bc:5e:
                    d7:bf:8c:4f:83:bb:cd:b8:98:34:52:40:dd:e3:88:
                    21:f3:4e:47:26:17:f5:e3:f7:fa:95:fa:26:04:f9:
                    66:d5:0f:c1:34:db:dd:6a:5f:c2:85:8d:ca:77:b9:
                    29:0c:d0:af:d2:6e:71:02:db:43:26:16:fb:ed:fe:
                    93:63:84:3b:8a:3a:df:9e:12:ec:a4:8f:4b:f9:75:
                    73:61:59:d2:d4:7f:1a:ca:08:8f:34:7d:9f:93:84:
                    a6:fc:bf:1a:c6:21:af:c6:5d:63:39:4f:7a:4d:34:
                    68:45:b7:89:44:8a:3d:2a:62:56:12:84:fb:8d:b2:
                    6c:af:3d:04:be:ad:58:fe:3d:0d:7e:fd:d7:99:e0:
                    ae:2b:b2:41:5e:b2:ea:4e:54:0d:c2:be:7e:3b:27:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D3:2D:49:7F:D3:90:1D:38:77:A1:96:39:9B:F8:39:35:8C:19:F9
            X509v3 Authority Key Identifier:
                keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3f:42:45:cd:0c:8d:d6:a9:76:d4:f9:16:e4:6c:a6:5d:ad:
         60:2b:91:54:36:d2:e3:dd:66:43:69:9c:cd:85:0c:b0:d8:25:
         5d:dd:f0:81:c4:94:be:44:11:d0:d3:ea:74:0f:81:92:68:8d:
         af:05:84:92:a1:79:2c:44:7e:ff:36:ea:55:0b:15:e0:6e:ed:
         16:6c:ad:8f:4e:1e:7b:47:eb:f9:a1:02:6c:c3:37:ca:f3:df:
         a6:37:e0:2e:b9:8e:9a:13:ad:91:2e:25:6a:9f:f9:60:5a:44:
         63:f4:f7:a2:e1:09:2a:7a:e2:1c:a5:7d:ac:eb:15:c4:3d:19:
         4f:a2:a8:f9:24:f4:7b:b0:26:14:5e:1d:02:14:9b:c8:4b:b8:
         f2:07:81:21:0c:fe:93:d2:7b:8d:7b:a3:ca:96:39:45:22:d5:
         75:84:12:b9:13:a4:35:95:21:fc:51:b4:35:1e:91:23:d5:59:
         f6:65:f4:86:bb:c9:17:18:af:6d:4a:38:22:49:59:33:c3:18:
         8d:75:f1:82:1f:95:38:bf:47:f3:a5:10:2f:41:fb:5e:90:03:
         2b:42:66:69:93:1b:13:ed:f6:98:9d:3b:4b:c0:52:41:cf:1a:
         86:6c:e1:12:3f:3d:ed:1c:bf:5a:02:14:87:08:4a:77:73:63:
         6f:f7:4e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:13 2025 by rpki-client on console-fra.rpki-client.org