Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
File:                     bu85c9bgdoFBm66Ge9UUVF599do.mft (raw, json)
Hash identifier:          BGOZBcqS4G2Cdycq29vvLvCOIf6ChLCy/+NmespfibY=
Subject key identifier:   5E:9B:36:30:5B:DE:94:75:5A:74:98:86:F9:98:2F:EB:A2:68:4B:AF
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Certificate issuer:       /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial:       0194BA846F28E160CE9B102B4DD52FF54F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 04:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:28 +0000
Files and hashes:         1: McJBsphQoDhzeVnNZjQXJIWaZ6Y.roa (hash: yKUH9/jSgEvNGo/3nepkm1/S5OFTD0l9/lzqCHYZgCY=)
                          2: QbMtJCyeS1UwQoNdxpT73PMGteE.roa (hash: KMhN38u0GEau5JeuxrI2EEIJMxGmIw0+9n/GLuFP0so=)
                          3: _67lsUignKt8Nnk8BSoRjTdfgFs.roa (hash: EwUQ5YdDP6IxVHJrGKIoeKh0+wuab5Kte+I8jHzRujs=)
                          4: bu85c9bgdoFBm66Ge9UUVF599do.crl (hash: mNyFjxKZBKOAIBPS9A5H4DNYtZryVNCJDMOCJkJQowE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:6f:28:e1:60:ce:9b:10:2b:4d:d5:2f:f5:4f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
        Validity
            Not Before: Jan 31 04:00:28 2025 GMT
            Not After : Feb  1 04:00:28 2025 GMT
        Subject: CN=5e9b36305bde94755a749886f9982feba2684baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:51:15:10:36:f6:24:0e:f4:30:ee:28:51:
                    22:74:7d:04:36:50:95:d5:74:31:2c:1e:13:9a:9f:
                    75:90:b9:9f:b4:4d:d5:ce:d3:5f:a4:3d:81:e1:db:
                    e2:d7:7e:1d:05:05:35:d2:96:f5:e5:d7:65:83:ec:
                    46:db:e2:bd:d6:a4:19:ae:c6:f9:02:e9:bd:98:c7:
                    08:cc:51:3e:8a:df:25:53:d0:63:76:01:b8:c3:b0:
                    df:23:c3:22:c2:99:c2:3b:ca:1d:be:75:85:bd:e3:
                    06:ed:ec:33:ee:18:e0:14:ff:6b:28:88:82:e9:97:
                    dd:04:8b:8e:a5:1c:0e:49:d7:df:ab:cd:04:76:a1:
                    09:65:1b:57:ac:89:33:e8:87:86:f8:52:95:90:22:
                    60:84:41:3f:f4:57:80:d0:05:80:32:28:dd:53:e9:
                    e4:72:41:11:5c:27:b2:51:44:b6:f9:f9:2a:5a:dd:
                    71:52:7d:6d:de:74:c2:b4:6b:0e:e6:9f:67:ca:fe:
                    96:c0:9d:b0:c2:d7:af:9b:8d:a1:9e:7d:4c:d4:d3:
                    b7:87:64:00:0c:0f:e9:7a:3d:97:8e:6c:0d:33:71:
                    56:93:c8:bd:5b:e8:76:79:4e:30:d4:9e:46:a7:9b:
                    40:b5:47:38:ab:b7:6c:ac:96:71:40:cd:84:f2:60:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9B:36:30:5B:DE:94:75:5A:74:98:86:F9:98:2F:EB:A2:68:4B:AF
            X509v3 Authority Key Identifier:
                keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:bc:cb:44:d4:73:f4:d8:b8:4f:eb:e4:02:ab:79:6f:50:
         50:1d:0b:2e:6e:62:10:57:d6:8a:5d:b9:79:d1:a9:78:2d:35:
         f5:0c:c8:5f:a0:5a:f1:0f:16:77:92:fb:10:83:c3:65:84:e0:
         c2:68:71:a9:0e:59:06:28:ab:61:0f:c1:48:ab:fb:d2:86:09:
         f4:f6:b8:2c:16:7c:76:d8:b4:8e:08:a7:41:40:8f:5f:a7:f6:
         3b:47:20:9b:70:4d:04:df:79:50:b0:da:ea:c0:c0:48:d1:6a:
         3d:ca:78:73:0f:46:ad:4e:51:a2:7f:c0:b7:63:51:6b:d5:59:
         db:f3:9d:f5:37:e0:04:90:5f:42:c5:8e:9c:26:8e:68:0b:2b:
         97:45:37:22:1d:8d:2a:b1:a7:7d:35:0a:c0:e7:f7:81:a1:d4:
         7f:d4:2c:12:7c:d2:8f:af:ed:12:25:cd:cb:33:46:de:13:ae:
         51:c6:9a:0f:f1:59:b3:4a:4e:25:19:af:f4:77:8b:cb:29:37:
         ab:9c:89:e1:2f:14:bb:46:cf:a6:37:62:3f:80:77:25:d1:84:
         64:6c:72:24:f6:34:97:20:93:fa:1f:eb:32:cb:62:b3:0c:e0:
         45:e8:b1:36:f9:87:0e:ec:a8:bf:bf:c4:3a:a2:33:17:bd:ea:
         82:08:40:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:11 2025 by rpki-client on console-fra.rpki-client.org