Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
File:                     05SToXmX0x6NWqbMyaa9dX8VwDA.mft (raw, json)
Hash identifier:          /tis8fjcMJ67R34YS/emngmjFVfmzBbmhsmbFXXcMHQ=
Subject key identifier:   65:82:30:8E:FA:EE:AF:EF:E4:54:62:F8:1C:41:30:AA:68:F3:5F:AA
Authority key identifier: D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
Certificate issuer:       /CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Certificate serial:       0194BAF2376BA9B63A9B6D7F5E03A1E9C999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 06:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:23 +0000
Files and hashes:         1: 05SToXmX0x6NWqbMyaa9dX8VwDA.crl (hash: 8ce17jW5cAVuga5067dn7X1eisxwY5K6t4+l/lmdt3k=)
                          2: 0FFuSWeP_xnZLwOhaaaPqbHXLc4.roa (hash: R/kohk8zDnLTG4mp1rru94qAndg3iws6yZ+eZfkkPz4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:37:6b:a9:b6:3a:9b:6d:7f:5e:03:a1:e9:c9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
        Validity
            Not Before: Jan 31 06:00:23 2025 GMT
            Not After : Feb  1 06:00:23 2025 GMT
        Subject: CN=6582308efaeeafefe45462f81c4130aa68f35faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:2a:f7:a3:4d:90:f5:89:32:80:3a:c1:17:
                    c2:40:b7:6b:b8:13:cd:ff:df:ba:41:b7:bd:b2:95:
                    c5:b5:58:bc:a9:84:59:3e:bb:be:8d:e8:f5:97:65:
                    f5:28:51:c0:7d:64:81:7c:f9:90:07:a8:a5:c0:5c:
                    b2:26:74:27:bb:3c:76:58:78:30:8f:bd:94:f5:51:
                    36:06:39:02:0a:06:61:d3:e7:78:34:eb:a4:5d:43:
                    3b:8f:97:03:19:8b:d9:c3:8e:a9:25:13:13:84:a6:
                    da:92:c9:81:c1:b2:49:f0:be:61:a2:09:0b:82:0f:
                    1f:5e:c0:f2:71:ca:2c:d7:9d:9b:c9:36:d4:6a:62:
                    56:ce:2d:1b:30:ee:23:f1:81:ad:78:8e:61:53:63:
                    da:55:68:9c:0c:05:eb:26:2a:ae:67:67:0d:eb:f7:
                    4e:cb:d4:a3:9d:84:4b:d5:da:ce:ff:11:bd:24:c0:
                    d5:11:a9:40:d7:e1:e0:c0:3d:21:7c:7b:e1:89:fe:
                    9c:13:dd:6f:e8:0b:36:75:b4:7f:96:1a:67:9f:e5:
                    6a:27:b3:fe:ff:2f:e8:79:ed:c4:d2:13:cb:b1:f0:
                    18:1b:d2:61:70:e5:24:5d:c0:3b:a1:86:52:0a:91:
                    fc:b8:58:1b:a9:25:96:e0:02:a8:4a:6b:99:5c:98:
                    82:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:30:8E:FA:EE:AF:EF:E4:54:62:F8:1C:41:30:AA:68:F3:5F:AA
            X509v3 Authority Key Identifier:
                keyid:D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:dc:51:d7:64:85:91:92:a4:5a:c2:62:96:21:c4:d3:23:ae:
         17:82:96:ee:cc:e3:d3:40:f2:26:96:da:ea:00:69:d5:9d:75:
         9b:b8:b5:00:e5:0f:66:85:45:e4:9a:8d:82:35:5c:29:13:f8:
         ec:6b:3a:5f:69:31:5d:c6:48:73:31:79:0a:a1:ab:33:14:de:
         dc:41:f7:e8:34:b6:3e:b1:73:36:05:3d:cd:45:64:cc:48:fe:
         a0:2e:05:da:8e:20:cc:ac:fe:03:04:43:e2:a6:03:84:a1:65:
         c7:da:6a:0c:64:f9:3f:f9:2c:a6:da:a8:3b:70:3f:2e:bc:7c:
         19:c2:08:30:8d:ba:7a:42:bf:ca:3f:93:a7:61:a0:14:25:a5:
         ee:23:d9:dd:8a:53:99:78:19:73:71:01:6e:a1:03:69:04:69:
         4e:8a:26:cb:56:23:7b:74:42:3e:2c:a2:07:58:17:12:40:6a:
         bb:17:57:8b:d5:e0:dd:47:7d:be:5e:04:49:e5:4f:1f:31:07:
         7a:fa:26:c6:23:23:ef:43:a5:35:ff:f0:6a:8d:ee:e8:4f:7d:
         c4:e3:7e:9b:c6:2d:37:00:de:73:0c:f9:43:7e:03:03:76:3c:
         74:12:2b:65:16:93:f7:e1:80:88:f8:e2:c0:55:01:8e:67:fa:
         b7:27:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:33 2025 by rpki-client on console-fra.rpki-client.org