Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File:                     0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier:          CUJlcroxpW9I6ZiPuPCUkC4+eyGDXRvfCmoREk/sEhM=
Subject key identifier:   91:6A:B3:88:F3:C9:82:D8:14:EA:F7:9C:FF:C1:F1:58:D2:C2:88:D5
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer:       /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial:       0194BB96D556D9F3E34363155B67D92B66E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number:          09F4
Signing time:             Fri 31 Jan 2025 09:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:11 +0000
Files and hashes:         1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: bKbBmGSP8jhxc/RKK3RfK+ODdDR+o5mU72LRvbWnqPo=)
                          2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:d5:56:d9:f3:e3:43:63:15:5b:67:d9:2b:66:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
        Validity
            Not Before: Jan 31 09:00:11 2025 GMT
            Not After : Feb  1 09:00:11 2025 GMT
        Subject: CN=916ab388f3c982d814eaf79cffc1f158d2c288d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:f9:db:0e:46:53:1b:54:0f:6b:31:e0:e3:
                    ff:75:87:ed:e2:3d:c3:90:72:f4:de:45:9a:37:7b:
                    e7:92:52:0c:4d:e5:c0:48:50:8d:24:d6:c7:98:e9:
                    2f:c3:33:41:ee:2f:9e:56:49:44:5c:81:35:77:94:
                    40:ef:0c:6e:86:c2:c0:6e:c5:4b:b7:7c:2a:8a:a7:
                    5f:69:0c:fe:00:fb:28:1d:b3:35:22:01:d5:32:c1:
                    86:56:bc:45:84:78:e2:27:1c:e0:0a:73:2e:86:40:
                    32:ba:29:7f:11:f5:a0:8e:77:8d:43:ae:5a:e8:e5:
                    e1:ca:4b:e4:9c:c6:d8:6b:5c:33:7b:34:f5:16:5a:
                    ef:5f:17:51:1c:31:51:ca:fb:93:c4:b2:a2:7d:c3:
                    6c:76:a8:4b:8c:b6:7c:f6:1a:5c:49:1f:93:ef:89:
                    2c:ca:65:2d:6f:f8:2c:b3:1e:c5:1f:17:71:18:79:
                    48:92:8d:73:bb:fa:42:c8:6d:f0:b0:6f:54:b5:eb:
                    5e:ec:e5:6f:d5:12:e2:41:21:cd:d9:2e:ac:c1:dc:
                    b6:14:b1:96:0c:f0:01:32:e8:30:df:57:7c:e2:35:
                    ad:7e:99:b7:06:7a:d4:e1:08:ad:78:c4:f0:16:28:
                    eb:bf:c5:48:60:7c:0c:c8:a3:f1:7a:c5:2e:f1:b7:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:B3:88:F3:C9:82:D8:14:EA:F7:9C:FF:C1:F1:58:D2:C2:88:D5
            X509v3 Authority Key Identifier:
                keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4d:f6:fb:85:71:94:80:21:91:85:da:d5:3d:b1:43:93:21:
         7d:99:2d:b4:c9:a8:77:a5:32:a3:29:98:dd:6e:a4:bb:b3:78:
         46:11:d7:8a:d3:ad:6c:4d:ad:0a:dc:fd:c0:86:78:1a:d3:ac:
         ca:f9:c0:79:9e:b6:e7:f3:6e:f1:81:8d:f8:1d:2e:d0:5e:b1:
         dd:67:1b:04:e5:82:94:ee:4a:f5:04:37:68:a4:b8:82:df:1e:
         32:95:df:b1:d9:50:8f:be:7d:36:70:48:31:d9:bc:ad:d9:f6:
         c4:b6:16:d2:be:57:49:06:56:3a:8a:85:0f:2e:6a:09:01:b4:
         e9:c7:ac:7b:cc:fd:09:0f:6f:e8:c5:9d:8a:eb:0c:16:31:c6:
         94:4c:0f:5f:c0:8c:5f:ae:ab:b6:d1:f1:e4:2d:62:47:f3:3e:
         cb:ec:06:49:ab:73:a7:85:29:fb:fd:80:bd:3a:91:6f:6a:48:
         ba:25:a8:b1:e9:08:97:79:64:5f:83:3c:52:5e:4d:0b:d2:4d:
         51:f6:97:48:0c:2a:3a:3a:f4:0f:bc:ec:ea:9f:98:cc:5b:03:
         bd:54:4d:00:76:ea:22:7d:a3:a8:00:91:c8:6f:3d:25:46:13:
         d3:86:44:27:8e:a6:4f:ce:81:34:d2:71:5b:b2:f9:05:d4:a7:
         12:ef:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:00 2025 by rpki-client on console-fra.rpki-client.org