Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
File:                     9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft (raw, json)
Hash identifier:          Qhfw0kjg/ivaYQzTtCKSKGKtdp5oueUYqe9Nq0YvthE=
Subject key identifier:   00:25:05:13:1C:5D:6D:06:30:C0:CA:C5:92:96:EA:A8:EE:94:95:CE
Authority key identifier: F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
Certificate issuer:       /CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Certificate serial:       0194BB9745BBB776E4910E50DBA5C9F18E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 09:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:40 +0000
Files and hashes:         1: 9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl (hash: 3a6SUm8xGuLjFSfUhEBPmh4Ye6gUJ+CsAyYHu+nTVWE=)
                          2: V341t6lFU17La723o82yJ0OztQk.roa (hash: 5ZnBvoWyakZy583RsB0+KziGW81oXH+bvf5OC8lpqqA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:45:bb:b7:76:e4:91:0e:50:db:a5:c9:f1:8e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54bfb01b03caa6fce887b4384253db20e59fa71
        Validity
            Not Before: Jan 31 09:00:40 2025 GMT
            Not After : Feb  1 09:00:40 2025 GMT
        Subject: CN=002505131c5d6d0630c0cac59296eaa8ee9495ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:e5:46:50:85:16:00:d7:99:79:fe:cb:42:
                    5d:33:50:30:22:50:ab:11:15:da:7d:d9:a6:80:0f:
                    cd:50:f2:f9:0e:16:3d:0d:e3:ed:fb:03:1e:37:53:
                    76:d5:36:bb:a5:83:a7:91:ba:b2:ac:78:f1:77:68:
                    d7:bb:7f:09:3b:33:4d:c7:6d:ad:30:2f:51:e7:41:
                    70:ec:64:fa:c4:4e:e9:16:a5:15:89:99:8d:a8:ec:
                    14:98:95:de:05:7d:ff:fc:b9:9d:04:40:ee:51:f5:
                    62:9c:96:b4:e6:3d:42:be:6a:c6:d7:49:6e:e0:e7:
                    3e:69:e0:85:47:2b:c2:ad:da:65:ab:75:35:f5:cd:
                    5d:18:90:cf:cc:72:ff:70:b3:97:7d:54:b2:66:ab:
                    4d:c8:f9:d6:80:3d:92:3d:fc:69:cf:48:a9:09:de:
                    7e:fd:cb:61:18:45:5f:ae:c4:6d:ff:91:c7:e8:33:
                    b2:34:92:47:58:c2:aa:08:35:c4:3f:01:2d:cc:9b:
                    c3:ca:be:5f:8e:99:c9:8e:4e:69:d6:83:1b:ab:5d:
                    f5:33:35:cd:50:85:29:4d:9a:34:18:8b:1a:58:44:
                    a7:c7:c3:0e:fd:a8:bb:63:91:20:76:83:ac:7c:af:
                    c9:1c:dc:35:2a:37:a3:0f:ef:f2:81:38:8f:01:ab:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:25:05:13:1C:5D:6D:06:30:C0:CA:C5:92:96:EA:A8:EE:94:95:CE
            X509v3 Authority Key Identifier:
                keyid:F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fc:c9:14:db:a2:92:cd:c0:3f:10:71:4f:59:a4:cd:02:b4:
         e8:a8:4f:b5:67:70:5e:a1:dd:be:28:d4:50:a1:ca:09:01:37:
         2f:a1:29:a9:a6:9a:3a:b1:c5:89:5a:42:5b:34:c0:aa:79:fc:
         f7:52:dd:2e:c8:27:d0:53:02:47:39:d1:ac:92:23:30:cf:f4:
         43:b8:3d:b0:fc:e9:73:87:7c:78:09:5c:e0:2c:3b:47:5a:3b:
         14:5c:68:d8:16:6b:7b:66:c9:fa:2c:96:11:5e:9c:c8:0d:bd:
         51:65:21:71:2e:c5:63:db:7d:8d:0c:d6:82:13:8f:f2:bd:eb:
         fc:a5:38:19:d3:48:c7:e6:a8:9a:ff:00:21:f1:91:9e:67:52:
         60:fc:e4:03:86:3f:d4:d9:97:b0:07:64:4e:f4:c4:fc:22:e6:
         1a:9f:2a:a9:f9:59:e3:94:49:a7:ba:4c:5c:40:d6:79:46:05:
         d6:95:9b:d7:b2:bc:cd:76:88:93:3b:53:90:d5:46:62:8e:de:
         0a:78:0d:ab:f0:51:be:84:9f:19:b0:ea:36:22:60:f5:75:33:
         f9:b8:6d:3f:29:4f:09:23:24:a8:18:ef:0c:ac:c3:7e:69:99:
         60:c5:0a:99:55:e4:4f:8e:de:59:5f:0c:e4:66:bd:0e:53:c7:
         ce:65:04:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:13 2025 by rpki-client on console-fra.rpki-client.org