
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File:                     I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier:          jG/5UlBCIZLcECkqIC+dbZK6v20ORmOovZhkNfsjo80=
Subject key identifier:   AF:DC:F2:D8:C2:63:63:C1:85:6C:55:C9:B8:3F:5F:E4:91:49:B1:3C
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer:       /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial:       0194BA84823321F4D3606380A572803510B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 04:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:33 +0000
Files and hashes:         1: 0R9hBHck9goXLckWs83vfzxcFiw.roa (hash: obv3yvxGMmGg4JBfXp95o/8uj2ocziHcF4Wd0qYKBC0=)
                          2: 2ZLinOVEwJGKFicgX--T-MLOzJk.roa (hash: c5tPFVJAjAdrD/biJVfWeRiWObKwMs1MmzB2QE9giIE=)
                          3: 9unXgezNMxzwNg4bzifOYAuCs0o.roa (hash: g4XwuMrRwxeGeiZBFLLb9s8Q1VZBOHGp5ebHoGbs+mc=)
                          4: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: SwOoHP2gbWnlxTRkFNkx6ETZBQKIiXtwyfWekDs8Pqo=)
                          5: dK0aI2R_s129Y-75FIrpBYL1yE8.roa (hash: R66OS8lUtMZTTbo9eo/xMi56yXXva1T37X0KuifJS+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:33 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:82:33:21:f4:d3:60:63:80:a5:72:80:35:10:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
        Validity
            Not Before: Jan 31 04:00:33 2025 GMT
            Not After : Feb  1 04:00:33 2025 GMT
        Subject: CN=afdcf2d8c26363c1856c55c9b83f5fe49149b13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:da:ad:84:ee:f5:46:4b:7a:72:01:b2:9d:
                    fc:a4:fd:fb:89:04:9c:2b:ef:28:e7:d7:87:18:39:
                    09:89:3e:39:dd:2d:d4:b6:03:04:73:8e:08:df:a7:
                    12:9f:4e:aa:fc:f1:a0:9d:07:6a:14:6b:08:fe:d8:
                    c7:a5:39:62:11:90:cb:4b:1d:ea:5c:80:c2:a8:da:
                    b0:9a:08:db:71:a7:30:b6:e7:a1:6d:6e:71:4b:03:
                    11:0e:77:ee:b0:a8:3f:ba:b8:ad:7d:84:88:56:92:
                    e7:47:47:a2:5e:b5:61:e9:b9:d2:21:80:77:04:04:
                    8c:9c:9d:ca:f3:e7:f0:eb:f0:85:b4:4e:50:ab:7e:
                    2b:c7:c9:61:c1:fc:df:bd:6d:0f:e9:9b:33:bd:59:
                    cf:ff:61:b4:ea:ce:99:af:c0:b8:e1:af:12:bd:81:
                    ee:3f:31:d9:4b:55:b1:75:a7:65:39:39:18:c5:f6:
                    20:76:f7:15:eb:91:dc:bd:d8:17:e8:cf:06:65:c8:
                    ba:e1:66:3c:e4:ff:4f:a6:6b:f0:8b:37:b0:58:28:
                    ab:d0:8e:4c:d1:8f:39:a8:c6:10:13:80:05:7f:51:
                    4b:06:69:fd:11:a6:48:cd:61:cc:0e:b9:07:64:fe:
                    74:c1:09:c5:a9:a2:f3:21:89:92:70:25:ea:7b:6e:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DC:F2:D8:C2:63:63:C1:85:6C:55:C9:B8:3F:5F:E4:91:49:B1:3C
            X509v3 Authority Key Identifier:
                keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         b2:1d:ea:38:14:8c:24:00:eb:ae:f0:1d:3b:42:7f:95:e5:13:
         b1:59:60:fe:14:53:c0:42:9d:ba:3f:9a:fb:5d:b9:0c:29:53:
         17:11:04:65:69:09:11:74:3e:02:ca:99:0c:40:95:a3:73:40:
         a9:d2:b8:db:de:34:28:1a:54:0f:1b:df:1e:9d:89:29:ac:e6:
         ab:0d:78:a5:37:84:9b:47:9c:67:c0:e9:21:48:36:f0:9a:96:
         de:91:7a:28:fc:8a:28:5e:34:32:5f:e0:40:81:10:e0:af:b7:
         a9:bb:a3:0f:be:64:ae:40:3f:98:40:ad:b2:7c:36:23:ca:57:
         f3:23:87:18:d5:98:71:a9:fd:07:31:b6:13:99:66:3b:13:f3:
         a4:8f:46:78:5b:06:ca:08:02:cf:78:c7:a8:5f:58:ab:f6:12:
         70:f4:44:18:43:c1:c7:d3:bc:ab:a9:fc:b2:4a:88:de:ff:ec:
         da:66:77:bd:85:97:ce:13:eb:bb:dd:1c:71:ac:7e:de:2f:f7:
         02:13:8c:b5:43:45:44:a7:e3:f3:fb:51:8d:f6:74:fe:3b:58:
         6f:40:a8:17:e6:f8:70:96:40:f9:5e:de:ca:5f:80:00:a0:83:
         2e:33:eb:c3:6e:7c:0b:aa:df:06:e9:22:7c:94:03:96:08:dc:
         fc:bd:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:01 2025 by rpki-client on console-fra.rpki-client.org