Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File:                     jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier:          swDiDsG3TjEn8ppw11NHKVrnCflASxahWBpLrpfeZlQ=
Subject key identifier:   36:92:00:E1:EB:45:94:64:0F:FB:E7:50:F5:F3:E7:7C:92:80:07:55
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer:       /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial:       0194BB29856C01BAD4F4C4B601EADC0B4B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 07:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:47 +0000
Files and hashes:         1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: KdhS4wFUq9SK5uuLHyZbslHIJcrqf/ssZy0WKghuJIk=)
                          2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:85:6c:01:ba:d4:f4:c4:b6:01:ea:dc:0b:4b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
        Validity
            Not Before: Jan 31 07:00:47 2025 GMT
            Not After : Feb  1 07:00:47 2025 GMT
        Subject: CN=369200e1eb4594640ffbe750f5f3e77c92800755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:11:1a:52:6f:5b:92:84:cb:f3:31:d3:fc:
                    2a:2d:11:05:50:06:7b:d5:db:c3:0c:ba:fa:64:1d:
                    24:6c:5c:1b:4b:77:92:c4:55:61:50:a5:7f:69:38:
                    e7:fe:6e:e9:39:46:f3:25:11:5b:b5:4d:5c:12:67:
                    1b:03:f7:2a:4b:51:86:eb:5e:fd:00:b5:5e:16:d4:
                    17:e3:18:87:51:c2:06:24:ad:e9:5b:80:de:f0:38:
                    b0:d1:70:53:80:3b:c7:09:39:a6:62:d1:38:1f:74:
                    96:7c:e6:99:91:e2:84:f4:ec:3d:b6:61:04:de:82:
                    6d:68:c5:4f:f0:b2:7c:f1:f1:b5:96:de:29:e6:67:
                    da:14:a3:82:19:d5:92:d5:dd:e7:08:8e:94:89:38:
                    9c:35:ee:a9:a4:06:dd:ef:3d:10:c8:13:4c:b1:dc:
                    c8:f2:e6:53:f0:62:9a:c6:7d:ce:b0:f9:4a:35:59:
                    55:02:1f:47:91:c8:57:0c:a1:fd:24:1c:ad:b9:3b:
                    47:74:ad:bd:7b:35:61:d7:a8:6a:ed:d1:97:ff:87:
                    ec:08:31:45:be:0a:c2:77:5d:c1:1a:7c:3b:28:a5:
                    37:ea:83:bc:c1:f1:6d:e3:c8:e3:24:21:e0:9a:b5:
                    6d:62:2d:0b:4d:10:3f:16:ba:bf:9c:45:2a:d0:5f:
                    6c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:92:00:E1:EB:45:94:64:0F:FB:E7:50:F5:F3:E7:7C:92:80:07:55
            X509v3 Authority Key Identifier:
                keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:34:6a:fd:47:ca:e7:98:1a:d5:39:85:bf:6b:b2:69:c8:80:
         03:37:4c:d8:a2:47:c3:a2:d0:f5:55:3a:e0:5e:1e:5d:8e:70:
         c4:20:34:52:2e:92:3b:07:2c:ec:e3:10:f9:0d:ee:aa:15:f9:
         de:e5:af:2a:69:dd:ce:62:b9:cc:ac:83:22:0a:fe:1a:ae:40:
         1a:05:ff:44:79:5c:45:9c:22:8a:7f:14:b4:2d:88:95:4c:48:
         cb:c0:d9:44:3a:fd:2f:9b:f1:d6:09:88:93:0a:6f:36:9b:26:
         29:b1:15:9a:09:a0:ee:03:7a:00:0f:cc:f9:e3:71:bd:83:01:
         23:dc:0d:af:3f:99:cd:9c:fd:4c:20:fe:96:5d:38:cc:cb:99:
         a7:8c:6c:47:b5:d9:a3:48:bc:9e:10:f7:91:0d:5b:69:72:d8:
         e1:02:d8:f0:99:9d:3e:47:a8:3f:a6:df:69:ed:81:d4:b6:0a:
         c7:3b:75:3d:68:66:23:4b:f4:2f:77:63:53:94:41:2a:78:6f:
         5d:b7:ec:68:2b:31:65:af:10:43:89:5d:a8:b6:3a:0c:05:36:
         8e:bb:cf:ca:2e:6e:6b:51:ef:db:4d:32:af:4e:5c:e2:05:fc:
         6f:95:5f:e5:ce:ae:e7:36:97:a3:58:44:f2:43:1c:89:e7:af:
         49:83:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:08 2025 by rpki-client on console-fra.rpki-client.org