Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
File:                     yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft (raw, json)
Hash identifier:          3nyffFyts1ifKk4loJWDI3F743YgLtQT53MEzgiVZtE=
Subject key identifier:   4B:E6:D7:0D:D8:16:33:EA:1F:C5:68:F0:21:E2:B2:FC:17:90:16:80
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Certificate issuer:       /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial:       0194BABB796692D082DE3C4FF553E1290014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 05:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:35 +0000
Files and hashes:         1: Fdf0vtB1gT4L0JunIsm8qNZYmQ4.roa (hash: Hfh7wbvCwd9LX8YiFV9RA+et4MH+5Md9SfCGKXu907E=)
                          2: WzbbS-CvpAp-X59KDM_38Kb2Q90.roa (hash: nHcAVErDor/w6cF6rsBmTNyYVia/mJgseR3zdZens+w=)
                          3: iUi7thjoE_NSerMmdG4mBc-A3aQ.roa (hash: XBvqQypf6zmJJtMlo2u++NDcjCA5xpacY+hSBCY97kY=)
                          4: rmFmeiHNGZqQIM8I3hQZlTQLSPU.roa (hash: +4TH3iY83i5mgX2X206BcOV0PV0agK4VaBkhFLKmwRA=)
                          5: yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl (hash: ywyKYcBt7C9j2nfTv4zWLOYtiRWPdCdNN6TOX6sx9vY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:79:66:92:d0:82:de:3c:4f:f5:53:e1:29:00:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
        Validity
            Not Before: Jan 31 05:00:35 2025 GMT
            Not After : Feb  1 05:00:35 2025 GMT
        Subject: CN=4be6d70dd81633ea1fc568f021e2b2fc17901680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:68:33:94:13:e3:92:53:7b:6d:9c:90:fb:
                    70:a9:c8:21:14:b4:87:9e:31:8f:2b:65:b9:88:cc:
                    13:f0:5d:3b:c3:0e:fa:39:7f:b2:75:9a:74:77:9f:
                    c1:5e:5e:19:39:71:e2:5d:3e:dc:e9:65:b3:d4:de:
                    e8:94:46:60:b9:08:00:be:43:ad:68:e0:d8:61:54:
                    ef:d8:a3:ef:55:41:c0:b7:70:94:aa:59:85:f2:63:
                    4c:9f:a8:ab:fb:0f:0c:c5:e2:6d:46:fe:4a:24:ea:
                    89:c4:42:69:a2:60:90:85:ea:98:fc:99:72:92:7e:
                    b3:a3:7a:c6:65:35:0f:07:87:e8:3c:42:37:28:3a:
                    a4:81:80:9d:6d:74:22:ca:0d:46:40:34:97:57:2c:
                    a8:6f:7d:c4:8a:48:15:f4:ac:64:6e:10:5e:e7:a7:
                    b8:c4:4c:e3:4d:05:a7:85:41:ce:48:2a:65:ea:de:
                    b8:0c:8f:07:39:ac:f7:76:7a:af:70:4f:e5:43:23:
                    0f:49:98:0e:06:78:2b:ed:19:c6:a5:4a:4d:c9:49:
                    64:a1:d3:48:5e:f8:1b:0a:88:96:c8:af:6b:24:3d:
                    06:20:4a:4e:ee:14:be:73:c7:57:e1:1e:61:a6:50:
                    35:65:55:af:e3:85:12:5e:76:01:52:91:c4:15:16:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E6:D7:0D:D8:16:33:EA:1F:C5:68:F0:21:E2:B2:FC:17:90:16:80
            X509v3 Authority Key Identifier:
                keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d4:59:76:9b:20:32:05:71:56:6f:8b:a1:7b:94:2f:84:8d:
         ee:c4:64:58:2c:5b:dd:ee:8d:ce:0f:55:ae:36:c5:13:c5:e7:
         a8:d6:39:8b:df:e7:f6:1c:5c:80:39:78:42:03:f2:24:ad:6b:
         bf:ff:66:c7:3a:ec:85:3a:f3:6a:1d:a2:bf:d9:df:de:28:11:
         00:df:61:e6:9c:d8:c9:6a:02:ad:04:94:87:5c:0c:e6:3e:a5:
         d9:e0:1f:80:31:5f:14:8f:98:fd:9b:ea:db:f9:53:43:e9:0d:
         4e:30:99:00:16:e7:77:e2:20:b3:e9:64:af:16:29:03:a3:07:
         18:a3:7e:d4:e1:15:30:1f:d5:e8:3a:81:96:0a:d2:55:c5:5a:
         e5:5f:58:96:61:c4:81:6b:a2:0b:d7:b7:e5:31:80:a8:f1:f4:
         6e:80:87:d2:66:4b:3d:55:65:ac:7e:cf:01:8a:e4:55:5d:ef:
         2b:d5:8f:b7:e6:e9:87:fa:4a:55:56:fe:d4:b5:55:67:9c:97:
         e7:a0:5c:1f:42:e1:45:38:33:ad:03:d7:ef:ba:4b:46:99:a5:
         fb:49:6a:c8:14:91:ac:f4:21:09:64:1e:c5:7a:46:5b:e4:ea:
         af:89:86:ce:bd:e5:ad:27:76:0e:7c:f6:da:7c:4f:7c:91:16:
         1b:8a:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:34 2025 by rpki-client on console-fra.rpki-client.org