Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
File:                     5uitxyAU5Xp04wROsWbnYJaPI5U.mft (raw, json)
Hash identifier:          R7cxMgFtKdeX7oRELxPMwnjLrtWs3n/FsDnZsez7iwA=
Subject key identifier:   60:BF:8B:26:25:E0:92:68:88:02:72:19:EF:E1:BE:9E:EE:B2:23:B2
Authority key identifier: E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
Certificate issuer:       /CN=e6e8adc72014e57a74e3044eb166e760968f2395
Certificate serial:       0194BA84C01196E0159107BA2F59739C85C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
Manifest number:          09FA
Signing time:             Fri 31 Jan 2025 04:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:49 +0000
Files and hashes:         1: 5uitxyAU5Xp04wROsWbnYJaPI5U.crl (hash: IiSfoAnWdkS6F6ues5tT4unEE6Q+stsmwgq4HFPSFjg=)
                          2: Vd7ep1V7ja8rYIgwKvFOtZq4gy0.roa (hash: qbkrw3ma+AsEEUvI47lqqCL8eAGk/ZsP3EmHAoTEO0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:c0:11:96:e0:15:91:07:ba:2f:59:73:9c:85:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e8adc72014e57a74e3044eb166e760968f2395
        Validity
            Not Before: Jan 31 04:00:49 2025 GMT
            Not After : Feb  1 04:00:49 2025 GMT
        Subject: CN=60bf8b2625e0926888027219efe1be9eeeb223b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:02:ea:31:d4:39:a9:47:f4:62:7e:e3:18:
                    21:c4:19:42:f5:3d:61:73:0d:ed:f4:57:20:9a:be:
                    9b:c5:34:89:1b:c9:5c:73:e3:3f:02:8e:8e:0b:f3:
                    9e:6d:55:36:89:50:2e:fa:79:12:48:94:c5:11:ee:
                    46:d5:12:ad:b2:42:b1:23:af:fe:a3:de:5b:c5:32:
                    66:ed:77:e6:6d:58:71:64:55:ad:d9:9f:ea:bc:96:
                    5d:4e:72:f4:87:4c:24:89:04:5e:33:c4:88:69:51:
                    95:42:43:bc:c2:60:40:9a:ec:47:f7:a1:98:4c:20:
                    08:b0:66:41:0d:58:27:6c:56:15:00:59:4b:bc:b8:
                    81:3e:59:08:3f:96:e2:1b:1d:a6:a1:c0:04:5b:12:
                    a5:92:b3:3a:06:1a:9f:fa:b6:d4:45:ff:b1:c8:00:
                    36:be:d3:d1:47:a0:e7:7a:42:c4:87:7d:4f:cb:ba:
                    05:cc:91:3a:47:63:35:75:ee:4a:f8:37:77:75:03:
                    30:77:08:28:77:e3:f4:f1:d7:c9:14:f7:12:88:69:
                    8f:c3:bf:ec:34:d6:97:05:d1:d5:ec:a5:b0:fa:53:
                    95:ee:ab:82:b0:f5:41:1b:5b:c4:21:af:54:93:5c:
                    d7:1e:00:36:37:57:41:9a:62:58:68:99:b6:f5:57:
                    de:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BF:8B:26:25:E0:92:68:88:02:72:19:EF:E1:BE:9E:EE:B2:23:B2
            X509v3 Authority Key Identifier:
                keyid:E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:6c:c5:1c:d1:ee:bf:a8:b3:46:9d:33:0d:bc:ec:c2:07:
         31:74:06:c9:63:9e:79:15:3b:2d:82:a2:f4:a2:ed:71:22:dc:
         28:d6:63:33:b3:31:03:c0:7c:a1:02:d8:d3:15:23:57:3b:2f:
         8e:66:31:89:97:07:28:76:de:ea:f6:f0:d8:4b:40:b4:57:93:
         a8:f2:d3:ef:37:e5:8f:33:9f:a5:35:6a:67:43:6d:cc:cc:78:
         c5:92:3d:b5:5e:15:98:36:be:c6:63:9c:48:6b:be:24:90:50:
         94:8f:a7:60:f1:46:1f:68:59:1c:fc:e2:40:2e:5a:11:29:7f:
         06:61:a3:26:85:6e:f3:a5:ad:a6:0e:55:6e:cc:52:52:eb:8d:
         5e:a5:e2:17:38:c3:26:c9:cd:1d:ef:67:96:a6:bf:03:60:00:
         6b:db:57:c2:f4:6f:64:50:5f:ed:d0:7a:15:6a:a9:67:09:77:
         24:ed:4c:64:4d:79:f1:32:b7:b8:35:c1:97:f0:7e:e0:d8:fb:
         eb:c4:06:b4:8a:48:63:9b:ce:be:2d:c4:89:f3:80:31:e4:a3:
         69:90:2b:82:22:ce:01:67:8e:46:1e:c5:87:db:46:a8:ec:ec:
         f5:66:42:a6:70:19:fc:d8:1a:78:5f:e3:7c:2e:09:8a:03:1d:
         d2:3c:6c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:59 2025 by rpki-client on console-fra.rpki-client.org