Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
File:                     DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json)
Hash identifier:          b+G4ad++NHsotxUeZEmuBQk8YIbqQuhF57ND1f7MfkU=
Subject key identifier:   56:8A:86:CC:F4:1F:BF:87:96:49:80:70:75:B6:B4:FB:4F:B5:A0:BF
Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
Certificate issuer:       /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Certificate serial:       0194BABB3614FF537650C5BCE2CF53BBAF3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
Manifest number:          0E25
Signing time:             Fri 31 Jan 2025 05:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:18 +0000
Files and hashes:         1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: XCb4Blu31l+gYfbGfzAZxhlxDX8icmBvkMAqZ4BlnKw=)
                          2: clB1f_NiIoBJs06I1N2ua9KcprY.roa (hash: Hc2uBMDIF+2ALpimHYsk+DChTWTq8OrIlMci+ZWtnyA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:36:14:ff:53:76:50:c5:bc:e2:cf:53:bb:af:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
        Validity
            Not Before: Jan 31 05:00:18 2025 GMT
            Not After : Feb  1 05:00:18 2025 GMT
        Subject: CN=568a86ccf41fbf879649807075b6b4fb4fb5a0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:3f:9e:48:8d:ea:f3:e5:1f:21:cf:ff:bf:
                    e5:9a:15:a9:1c:14:7d:08:da:93:6b:26:3d:c1:90:
                    a9:61:a5:01:f9:4b:6b:7a:2e:b1:93:93:f5:6a:24:
                    4e:a7:88:02:11:b2:09:02:ea:bd:85:2b:79:6c:91:
                    f7:ea:65:82:df:f7:c0:8f:c6:35:60:32:75:58:a1:
                    86:4c:cc:a2:d4:83:dc:3a:4b:73:d7:41:96:76:96:
                    07:40:4b:48:ac:38:d2:bd:a7:30:f8:1d:47:e5:ec:
                    21:7f:18:e5:48:19:c1:73:c3:49:b5:5a:1e:4a:c0:
                    cf:a8:06:64:22:fb:e3:49:de:a2:ed:42:96:c8:02:
                    39:94:04:ad:54:a6:bb:34:e7:73:2d:fa:7a:a5:8f:
                    75:b1:6f:0a:5a:91:86:ee:1f:bc:95:fc:46:74:18:
                    8d:7f:52:b1:71:2f:1d:67:87:e8:bd:b7:3a:f9:f8:
                    22:a2:a4:01:f8:bc:af:fb:02:b8:79:21:25:39:be:
                    56:d1:a8:b8:23:5d:16:7f:2b:11:f7:22:b2:ba:f7:
                    37:0a:8d:b0:d3:d5:d7:e8:68:5e:94:06:05:5b:e9:
                    a4:17:0f:ab:5f:f4:d0:a5:97:f9:17:5f:44:71:d7:
                    b0:23:84:52:d8:72:eb:ac:19:c9:6f:01:91:9c:42:
                    6b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8A:86:CC:F4:1F:BF:87:96:49:80:70:75:B6:B4:FB:4F:B5:A0:BF
            X509v3 Authority Key Identifier:
                keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:27:d1:fb:be:3c:3d:45:bc:0a:bf:e4:26:f4:e4:e5:8e:
         98:f3:5d:d9:90:56:78:fc:92:73:29:24:c9:15:f1:61:9b:dc:
         90:00:54:53:72:76:04:d1:ee:1a:9f:3b:24:8a:be:d2:d2:d5:
         54:17:7b:b5:9d:d1:39:ec:fc:0c:04:1e:40:ed:bd:cd:86:0b:
         14:b8:9c:2e:e1:39:73:99:6f:0e:10:50:db:1d:f1:cb:a1:ff:
         55:c2:b0:5a:6f:82:54:17:d9:30:19:9a:6e:aa:91:37:be:42:
         a5:72:b5:a4:24:f5:ce:83:67:7b:7f:4b:a9:b9:6f:1b:1c:70:
         80:4c:cb:d3:d1:5a:70:1a:77:be:ee:49:8f:9b:6f:53:bc:ff:
         47:7c:f2:19:ed:2d:3d:39:fa:74:d4:96:d2:e5:bb:3e:db:d8:
         7b:10:3b:65:cd:63:1c:2c:49:24:3f:89:f8:5d:c3:c4:2c:bd:
         e7:7f:0e:c6:31:ae:7a:6b:be:69:14:dd:87:d2:1a:dd:60:38:
         a1:b0:c9:8b:cf:8a:ec:79:7d:c5:2e:9f:a5:df:9f:7f:ac:79:
         5c:25:a2:a1:2f:3e:5f:ab:21:73:bf:b3:ed:93:90:a0:7e:b6:
         0b:a2:72:01:64:8c:cc:77:1b:c9:2a:bf:21:86:09:56:d1:7c:
         70:ad:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:37 2025 by rpki-client on console-fra.rpki-client.org