Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File:                     CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier:          jgI0ycBHaGhyzViABmWJauxUEllPwuQwn2m2JbU2bag=
Subject key identifier:   F1:1C:79:B5:EE:8D:71:55:45:6A:70:11:59:43:CF:E9:90:2E:ED:AD
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer:       /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial:       0194BABB28216428515A0E8F967E35535794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 05:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:15 +0000
Files and hashes:         1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: fiHzgQYDkVYJ2VqRBuCkTg9XBwmvqud30HWB9pYHXQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:28:21:64:28:51:5a:0e:8f:96:7e:35:53:57:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
        Validity
            Not Before: Jan 31 05:00:15 2025 GMT
            Not After : Feb  1 05:00:15 2025 GMT
        Subject: CN=f11c79b5ee8d7155456a70115943cfe9902eedad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:5e:f4:57:62:4f:4a:a9:92:66:38:49:4c:
                    a1:30:ee:db:cb:8c:41:31:e4:a0:bd:c6:1b:c2:61:
                    34:1a:ce:61:7a:cc:5e:9f:0b:be:f2:82:f2:a1:c1:
                    c7:bc:a1:d4:e3:7d:54:6c:e5:e9:29:fb:e5:3f:09:
                    56:9b:0c:5e:a0:65:8d:4d:52:9e:25:1f:10:3c:f3:
                    36:2d:92:30:19:30:b6:f2:f6:22:4b:c4:54:3c:15:
                    e8:b1:b6:ac:d2:c4:ad:49:60:c1:fe:2c:1d:9f:31:
                    a7:b0:64:37:95:69:a5:11:fe:d3:04:5c:00:b5:87:
                    fe:08:3f:6a:a3:c5:2a:e0:8e:3c:e5:ce:de:c2:52:
                    9d:b4:2a:ea:98:34:46:ab:c0:00:cd:cc:06:ab:c6:
                    ff:a9:7c:dc:65:31:40:c9:b6:e9:f7:63:d8:ea:48:
                    d0:d5:4a:01:da:df:d9:62:1b:e0:8d:d7:7c:69:2b:
                    da:ff:d9:d9:75:1e:d5:78:ff:52:7b:48:c6:91:53:
                    a5:8b:3a:8a:8b:73:34:90:a0:f8:2a:cf:0e:13:40:
                    5f:a3:b9:fb:18:97:3a:9b:ad:df:99:1c:c1:1b:d2:
                    13:e2:2a:59:d0:58:ac:fd:00:be:47:af:6d:42:b8:
                    e0:81:f1:48:7a:35:a5:1c:0b:3c:fd:7e:a8:74:a3:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1C:79:B5:EE:8D:71:55:45:6A:70:11:59:43:CF:E9:90:2E:ED:AD
            X509v3 Authority Key Identifier:
                keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a7:8b:a6:fa:69:4d:6b:82:16:21:4c:d5:0f:7d:40:fc:67:
         54:a9:72:9f:55:84:36:fe:0a:7c:99:b8:a6:e5:62:c2:a0:f7:
         d6:c2:62:2c:61:f3:53:f5:31:4f:06:1b:1c:66:2c:8b:58:5e:
         f2:07:49:60:aa:dc:0a:a3:2a:f7:e9:b2:df:61:c4:18:69:56:
         8e:47:62:51:06:14:b0:37:71:49:6d:05:36:0c:8d:47:a6:3c:
         d4:08:0d:ee:74:9f:b3:36:4c:b3:9e:85:49:25:43:b5:73:2b:
         7f:1b:16:f7:d5:59:fd:ee:dd:e3:5b:ef:6d:be:12:81:ef:b7:
         35:1a:5d:ad:34:f5:bc:2d:57:57:89:55:fd:f7:f5:0c:48:e3:
         02:7f:14:18:5d:84:45:a3:1e:40:dd:05:c1:b7:99:b0:c2:af:
         24:03:92:f4:30:6d:f6:22:c8:6b:bb:ed:bd:9a:41:fb:a8:1b:
         7e:da:08:21:92:4c:80:0c:d4:b1:5c:72:c9:e3:e8:b4:7e:90:
         59:93:e3:4e:e5:58:f9:4e:82:5f:f0:58:a9:97:a4:fb:dc:5b:
         b3:8e:d8:b8:29:a3:b0:20:7f:c8:5d:98:28:7f:e4:55:32:a8:
         ec:c6:49:b8:1c:46:b9:1a:de:54:d5:e7:aa:af:d4:a4:66:40:
         07:cf:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:07 2025 by rpki-client on console-fra.rpki-client.org