Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
File:                     csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft (raw, json)
Hash identifier:          ofbQwHiKvCR1JHS+71zD3iYJoXcE9f/jaGIybAas7t8=
Subject key identifier:   38:57:2F:34:39:61:BA:49:0A:C6:69:BD:C4:AD:C2:B9:3D:7C:78:32
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Certificate issuer:       /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial:       0194BAF205BE1F64392024A4F948722844C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 06:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:10 +0000
Files and hashes:         1: E21NAhDVeJIjhOGEeA7dZ6TV82c.roa (hash: 2Eo54WpqIcZduXMVnpn6V9sW+3m4FmzZ4Mra+/DmCe4=)
                          2: OloEbYDAzotqcqXrtsOE7C-nKdM.roa (hash: 1KugMutAlYxY9yVUop07GWwG3g/6VO6RKLlHRWpDAD8=)
                          3: WlRuTCJYddDH_ysVV5GnnWoYfEE.roa (hash: jZDPo73pyYZ9ohlhaHX22v8gbqxDIovMw2lLztIeSfo=)
                          4: csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl (hash: LtoKhmdmKrHp5NDNl9lec9GhJuTCXtl/QxK1r7kzi4w=)
                          5: wtvWqQ83Z8viC8HujIFlaW94qzA.roa (hash: VRgdy/dQRtIj79oCA101wOc6cM5MVJQHJUw47Ux2YB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:05:be:1f:64:39:20:24:a4:f9:48:72:28:44:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
        Validity
            Not Before: Jan 31 06:00:10 2025 GMT
            Not After : Feb  1 06:00:10 2025 GMT
        Subject: CN=38572f343961ba490ac669bdc4adc2b93d7c7832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a6:46:e8:41:cf:23:76:4d:ba:9e:f8:f6:5f:
                    d1:55:0c:0e:74:c6:7e:ce:2b:2d:76:82:92:6c:f9:
                    c2:25:20:fd:4b:23:95:3c:c8:04:34:2a:c7:88:aa:
                    b4:6c:58:65:04:e9:7a:c4:67:6c:32:64:7c:ed:ef:
                    06:64:5d:d0:a8:a9:4f:6f:05:b8:0c:ea:07:81:0d:
                    8f:2b:55:7b:9e:b0:49:c3:a3:3f:41:ae:df:22:bb:
                    3a:25:46:94:a9:fc:69:08:57:96:d3:25:db:82:02:
                    6e:73:e6:18:41:03:dd:5c:f5:c0:04:9e:45:61:39:
                    c1:cf:6e:92:f0:66:c9:2b:9c:c0:db:70:c6:f6:25:
                    98:a0:0f:21:52:50:5c:b9:f3:d5:f8:41:5b:5b:0b:
                    18:b6:57:64:07:b0:25:fc:28:03:cb:48:c5:42:ec:
                    9b:f3:f2:b0:be:e3:c2:b3:93:5e:32:ce:b8:08:3a:
                    44:1b:c0:9f:28:50:f2:39:94:ec:b1:f6:8f:58:2b:
                    70:b3:22:fe:3b:13:da:9c:96:5a:86:a2:41:ef:f2:
                    b5:bf:e0:15:b9:b0:f1:89:ba:2a:c6:0f:34:ab:9c:
                    a6:ec:03:e5:6a:36:14:a9:ce:01:ba:e9:5a:5d:90:
                    c4:de:3d:1a:23:45:11:e0:bf:38:81:37:97:b7:29:
                    15:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:57:2F:34:39:61:BA:49:0A:C6:69:BD:C4:AD:C2:B9:3D:7C:78:32
            X509v3 Authority Key Identifier:
                keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c8:43:8b:a8:ee:61:cb:1b:a0:c4:85:9a:fc:f5:17:33:e5:
         f6:07:1e:9e:2b:f3:0c:15:b7:09:5c:4d:5c:02:28:6c:ac:f8:
         42:b1:a8:d6:11:55:4c:44:f8:3f:01:d8:96:d7:17:dc:f2:b2:
         cf:cc:27:28:1f:39:2e:a2:73:f3:1c:80:04:a9:78:b2:ad:78:
         4f:42:74:34:d6:db:bc:aa:f8:0a:f3:5c:de:fe:b1:cd:ce:2b:
         ea:08:14:99:b7:30:c8:26:bd:e6:08:69:31:4d:c2:3c:10:a5:
         66:dd:ca:80:83:9e:b7:57:88:fc:0a:99:f5:cf:39:87:d0:3d:
         5a:cc:39:e6:bc:d7:fd:a5:f5:82:f8:49:f7:31:d0:b6:91:92:
         d2:41:7a:3f:a8:93:af:d7:f0:2c:45:59:10:78:51:8e:c1:93:
         d9:af:cf:f3:d7:40:08:0f:de:34:3a:eb:81:12:61:d1:59:93:
         02:67:ed:7d:33:10:95:a4:41:bb:96:c9:55:5b:db:65:3a:1b:
         c4:bb:6b:84:57:21:8d:60:bd:87:f6:8f:5a:51:ae:29:ae:a0:
         52:0b:db:cc:f9:3f:6a:9a:6a:a0:ad:e7:3d:19:c3:ba:71:56:
         d8:fa:b7:7e:26:05:00:68:ee:34:ad:b5:97:63:a0:1b:47:ef:
         06:ab:b5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:45 2025 by rpki-client on console-fra.rpki-client.org