Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File:                     3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier:          RLLe58P/S8Ib6vWvl7q9IARHzR7Vbn2Si8WS0y8X/iI=
Subject key identifier:   86:00:96:1A:4A:34:38:E6:D5:EE:25:5B:7B:0D:F6:E8:75:6B:9B:5B
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer:       /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial:       0194BAF26C18803ACE6BA4DCF03A2F95D6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number:          08AA
Signing time:             Fri 31 Jan 2025 06:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:37 +0000
Files and hashes:         1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: YLJ4wBrdzBJm7nkL5zJ10THeYHBRj1QH14UtwDDwezI=)
                          2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:6c:18:80:3a:ce:6b:a4:dc:f0:3a:2f:95:d6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
        Validity
            Not Before: Jan 31 06:00:37 2025 GMT
            Not After : Feb  1 06:00:37 2025 GMT
        Subject: CN=8600961a4a3438e6d5ee255b7b0df6e8756b9b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:c1:e1:01:d5:78:1e:2b:dc:15:b7:d4:6e:
                    dc:a9:2f:fa:1d:29:c8:b4:36:92:8f:1c:4f:d0:dd:
                    cb:58:93:de:42:f4:61:a4:82:a8:4b:88:e2:d4:d3:
                    c5:3e:34:f4:22:3f:f4:1b:f0:37:84:c2:13:1f:7c:
                    9d:cc:c7:78:51:38:ae:d3:d7:0d:ad:2d:a0:7a:47:
                    af:24:94:00:c7:7c:c5:97:c2:b4:95:67:75:3a:36:
                    7f:80:4f:c6:c1:54:fa:c1:0a:e9:fe:e1:ba:a6:5c:
                    64:36:e6:e6:1e:a6:d0:da:53:2d:2a:8b:c1:bb:c2:
                    3f:fc:86:f9:19:f4:4c:f4:db:d4:55:04:60:ae:59:
                    07:29:2f:70:12:e2:b6:aa:97:3c:1f:cc:c6:c3:ad:
                    96:ea:1e:4d:88:a0:28:7c:2a:1c:c9:aa:22:3e:c0:
                    bf:65:6d:fe:01:ee:a4:39:01:4e:20:1e:78:e5:4f:
                    0a:49:79:b9:42:dc:ee:b4:5d:b8:58:5e:39:3b:ee:
                    cc:12:47:ac:4f:6d:fd:ef:f3:b0:56:90:e5:44:8c:
                    44:64:a9:38:6b:bb:74:ef:eb:49:ae:85:96:99:a0:
                    9d:c5:cb:1f:2f:e4:67:c3:59:40:91:69:fc:ed:35:
                    cd:27:dd:d6:49:c9:de:fd:76:a4:b2:a0:e4:4c:24:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:00:96:1A:4A:34:38:E6:D5:EE:25:5B:7B:0D:F6:E8:75:6B:9B:5B
            X509v3 Authority Key Identifier:
                keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:ba:f3:3e:b0:e2:8f:a6:41:f4:4c:82:4f:8d:20:38:13:
         84:cb:c2:5a:22:32:41:04:7c:58:c6:7f:92:b7:fc:32:87:85:
         93:9e:fa:1a:4f:18:7a:bc:f3:2c:83:e2:86:f7:b9:5a:01:18:
         69:e3:88:5a:6d:d3:1c:07:b0:92:5d:7d:a9:2e:cd:28:eb:ff:
         d0:f5:d0:eb:10:0e:21:60:04:00:d8:60:7b:d6:ce:ad:fe:9d:
         59:ab:8f:18:ce:db:79:7d:9d:01:ee:b0:a3:a9:96:52:f8:a0:
         8c:37:54:55:db:58:3b:6b:65:c6:0c:7d:fe:37:38:73:eb:2f:
         7b:86:83:51:81:9e:05:45:85:ad:57:08:28:f5:e1:ec:12:46:
         c2:5d:d6:15:d5:73:a9:ce:3a:39:04:b9:31:a1:c6:b2:b0:c2:
         8b:b7:bf:9d:e3:b4:55:15:75:17:f4:8e:51:82:e9:d1:d9:63:
         55:f4:a0:d1:3a:b1:55:ed:82:f0:4a:4a:ba:90:33:cc:fc:44:
         fe:e5:14:6c:1d:ff:99:95:76:b5:6c:52:2e:dd:d7:dd:85:8c:
         8a:00:e9:2b:b0:f9:fc:d7:a7:df:22:b4:64:12:5b:46:e5:41:
         de:e3:c3:eb:f8:79:6b:71:13:a3:3f:fa:e9:28:d4:67:db:b4:
         50:43:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:04 2025 by rpki-client on console-fra.rpki-client.org