Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
File:                     u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json)
Hash identifier:          2f8t+ygksIWknNy2XWo6x88kK/ezMaF0mCoC1PyCbgA=
Subject key identifier:   AB:44:5D:45:45:43:C3:CB:D7:14:4D:5F:AD:3A:F6:74:FD:53:21:A3
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Certificate issuer:       /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial:       0194BB96F7268A8082BCD6EEE4AE1913BA0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
Manifest number:          1460
Signing time:             Fri 31 Jan 2025 09:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:20 +0000
Files and hashes:         1: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=)
                          2: 3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa (hash: 8QA8TR1b1eaSEAsPrBsT2EeJQQNKv/ChzK9Nd3Kvl/4=)
                          3: LVgNtXZByEHJ83DgmSnAoPqPgRo.roa (hash: r+RQkWmJb/KjkZA/rl5nElwIOTgHXX3vwrRsFdnNxQs=)
                          4: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=)
                          5: X1siZ9Qw-Qdr1rdQOI3YLEys8HM.roa (hash: 5qhy7PA4ouPLqHLfVTzhYKTNogFI0I7BWVsffjGnW/g=)
                          6: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=)
                          7: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: Ynnrc66I1xSH2SMVA62h+i+JWWdDzX0y2f+chI0VNS4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:f7:26:8a:80:82:bc:d6:ee:e4:ae:19:13:ba:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
        Validity
            Not Before: Jan 31 09:00:20 2025 GMT
            Not After : Feb  1 09:00:20 2025 GMT
        Subject: CN=ab445d454543c3cbd7144d5fad3af674fd5321a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:e1:80:e8:39:e9:ff:03:08:43:6d:1c:e0:
                    93:79:a4:c4:f3:5d:b2:6c:23:3b:61:5c:7a:cd:ea:
                    54:f8:84:05:c4:3a:35:79:33:52:78:69:13:46:45:
                    49:50:f9:ef:25:6c:f9:2d:a9:1b:67:aa:1b:88:8b:
                    63:6a:e8:a3:ac:24:0c:a7:78:13:da:a8:fb:e7:ca:
                    57:38:0c:68:7d:c3:26:d6:5a:1d:cb:b9:56:14:c7:
                    ae:f8:27:6d:c8:33:83:1c:de:af:1a:cb:10:bc:ca:
                    dc:4b:24:d0:7b:d5:79:4f:0c:5d:a2:9c:21:81:2a:
                    8b:c7:d1:39:ae:06:e5:01:cf:3d:9c:ff:4a:51:02:
                    9c:6f:0d:92:89:42:90:c0:34:67:f8:6e:2b:9b:7c:
                    9a:06:0d:b1:78:f1:4e:c7:30:13:7a:6b:35:89:c6:
                    2b:b9:ee:4d:dd:fa:12:f7:76:6f:cb:8a:11:75:5b:
                    81:c8:92:7e:1d:77:61:0d:5d:f2:c6:13:c1:45:6f:
                    20:88:a2:bf:eb:09:ab:2a:f1:4c:65:18:3e:47:86:
                    34:b4:4c:07:71:78:a6:7d:35:6b:d2:16:78:a0:79:
                    05:d9:da:e8:7b:4b:d6:21:14:2e:bb:5f:41:7e:b8:
                    b8:44:b3:d1:51:78:8f:96:66:c9:db:bd:e8:b5:6f:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:44:5D:45:45:43:C3:CB:D7:14:4D:5F:AD:3A:F6:74:FD:53:21:A3
            X509v3 Authority Key Identifier:
                keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:05:46:8b:05:dc:0f:55:df:98:02:2a:0f:9c:df:f2:59:55:
         5e:25:f5:e9:19:f4:e5:3b:54:0b:1e:e9:26:3d:4f:a6:5a:62:
         4f:71:af:93:70:dc:6f:36:0a:c1:f5:03:f6:53:9d:cf:9b:6f:
         9c:86:be:e4:11:e6:de:00:b9:6d:9c:b2:3d:bc:34:ee:a3:f9:
         87:ce:1b:4d:69:f4:c1:09:47:86:ab:0b:d2:3f:64:2d:ad:37:
         13:28:38:d9:72:e6:e5:4f:b6:b9:b7:e4:14:2e:a8:2e:d8:b0:
         ae:f9:ed:2f:36:50:08:1a:b8:f5:0c:43:65:2d:dc:af:4e:d2:
         ab:c8:83:9e:e5:9f:c0:5d:7d:cd:49:81:15:7b:3c:9e:df:fd:
         18:b8:23:34:44:cd:56:d9:96:53:b1:cb:a7:b5:81:18:9d:c2:
         42:56:d9:f2:1c:67:b0:9a:ca:df:f6:65:0b:e7:42:36:5f:20:
         79:41:3a:39:8d:39:fe:ef:87:78:d9:ea:f2:c7:5d:54:13:26:
         07:8d:df:a7:57:89:5e:0c:7f:87:f2:36:87:06:b8:b1:08:b6:
         fb:76:41:22:ae:04:c4:06:13:ec:6f:be:08:a8:14:55:2e:c2:
         c5:8b:25:59:9f:f4:f8:e8:2f:f2:01:48:8a:72:fa:5e:a2:41:
         31:a1:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:07 2025 by rpki-client on console-fra.rpki-client.org