Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File:                     l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier:          uqvGY9pRZFwF3CYtS/gEmhQzwL4ltf6/0QR7tnmuFnk=
Subject key identifier:   DC:64:3B:13:EE:AE:00:E5:2C:CC:82:6C:7F:D7:2B:C0:84:F1:37:08
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer:       /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial:       0194BB28EF74FEE7DBBD7D4FDEB1DBB5ABD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number:          1220
Signing time:             Fri 31 Jan 2025 07:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:09 +0000
Files and hashes:         1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
                          2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: s+23KJnngnJDsSE6uSmyw/nvYNTc69RXO0scsr6JrO0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:28:ef:74:fe:e7:db:bd:7d:4f:de:b1:db:b5:ab:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
        Validity
            Not Before: Jan 31 07:00:09 2025 GMT
            Not After : Feb  1 07:00:09 2025 GMT
        Subject: CN=dc643b13eeae00e52ccc826c7fd72bc084f13708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:9d:bc:44:6e:41:cc:02:39:ee:ae:56:9b:
                    83:ef:00:01:fe:87:91:36:aa:8e:be:ee:3f:9a:46:
                    2f:b1:dd:0b:6f:1f:db:7a:9f:f2:0b:8a:13:58:05:
                    fe:f8:4e:30:d8:e9:0c:9f:76:35:f0:84:43:00:aa:
                    f8:60:27:e3:86:c4:29:ea:76:a3:ed:3d:1b:f8:ba:
                    81:92:61:a6:db:92:18:2f:9b:35:28:69:5c:08:5f:
                    54:4f:39:d4:4c:aa:75:a9:e9:c6:fa:73:79:3b:45:
                    f9:26:b6:ef:bf:68:fd:c0:63:b5:b8:f7:46:d7:2e:
                    a4:46:08:1b:bd:78:f3:aa:c9:1b:7d:b1:40:6a:f6:
                    05:e2:4d:eb:6e:3d:08:25:ac:43:41:fa:ef:ac:45:
                    74:18:14:52:84:e2:73:c8:aa:6c:69:fe:a3:03:02:
                    95:72:07:4b:02:62:e7:32:f6:c6:ac:e8:14:d0:09:
                    60:ed:a8:6f:0c:72:a0:fc:ec:8f:28:33:9c:01:e0:
                    5e:70:65:c0:88:d9:d1:29:22:d8:f5:63:65:bf:b3:
                    c7:b0:bf:c8:b5:26:f8:03:6b:ad:cb:33:aa:5a:14:
                    e6:0c:e9:b6:55:7e:13:81:fe:d6:54:0a:0f:30:bf:
                    40:20:11:53:83:a2:0a:18:f9:e7:33:65:d6:dc:2f:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:64:3B:13:EE:AE:00:E5:2C:CC:82:6C:7F:D7:2B:C0:84:F1:37:08
            X509v3 Authority Key Identifier:
                keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bc:05:c9:03:39:f8:0f:37:29:e6:98:61:5d:bf:fd:ca:40:
         2d:68:07:30:32:ee:b9:e3:7e:25:81:76:92:9b:c8:33:2a:91:
         b7:96:1a:d6:d6:71:0a:34:56:fe:9d:c4:ff:2f:05:81:fb:97:
         12:1b:48:53:88:f6:ac:87:8c:aa:5f:55:eb:ce:d8:58:82:85:
         7e:ff:ef:70:21:27:1f:56:d5:ae:6a:5f:d5:b7:7a:53:a0:1f:
         56:e8:a1:b9:fe:6b:97:84:d9:12:51:89:28:07:3b:52:c2:b1:
         0b:23:c9:82:5c:12:b6:51:5c:1b:4a:37:4f:4f:e0:d8:80:6d:
         35:f6:ff:d3:3d:78:0b:61:db:d4:1d:bd:e9:32:36:e8:73:cc:
         21:b5:a1:0e:01:94:aa:e2:32:f7:c4:40:2b:fa:0d:ae:a3:24:
         74:54:11:3b:78:78:c7:8e:76:93:fb:d2:05:5d:fe:6a:7d:72:
         f3:b6:61:f6:06:77:7d:d1:d9:e7:38:17:15:67:44:0b:7a:79:
         dd:cd:3f:96:45:03:c2:47:7b:67:2d:9e:2e:fc:bd:06:16:86:
         86:9a:3c:c6:5e:72:e9:f6:b0:b3:48:1f:b5:26:d8:d4:a4:15:
         65:e6:a1:05:94:50:8b:a0:60:63:51:ac:07:7f:fd:a0:e2:27:
         76:20:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:38 2025 by rpki-client on console-fra.rpki-client.org