Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
File:                     LOuI0A5SCtZgtBbZIInGDVyPE-E.mft (raw, json)
Hash identifier:          dmnmaBwUjmOm2b+5RrajTP4Pv6B87R64UlaAblqykHA=
Subject key identifier:   C9:6F:36:D0:EA:27:19:CC:C0:D6:62:ED:AB:0C:74:A4:78:3D:3C:78
Authority key identifier: 2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
Certificate issuer:       /CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Certificate serial:       0194BABB7B813C911BB3A90022850E2F2C97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
Manifest number:          9A
Signing time:             Fri 31 Jan 2025 05:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:36 +0000
Files and hashes:         1: LOuI0A5SCtZgtBbZIInGDVyPE-E.crl (hash: oiJKybXJhuU3/8dihzpo9aEBPa/kUqqC5Lw/zmQiJG8=)
                          2: Y46vCOXYHw7rQaQKH4vVvjsoPj0.roa (hash: x4bPgE4P0Zq2nwgUR4AjUuUSz6sm/lpYmxdn5ktx7oM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:7b:81:3c:91:1b:b3:a9:00:22:85:0e:2f:2c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
        Validity
            Not Before: Jan 31 05:00:36 2025 GMT
            Not After : Feb  1 05:00:36 2025 GMT
        Subject: CN=c96f36d0ea2719ccc0d662edab0c74a4783d3c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c9:6d:8a:7a:cd:53:1e:ae:40:37:f1:e2:dd:
                    55:eb:11:70:14:fb:80:96:e8:a2:88:83:bb:73:85:
                    9b:3c:31:85:a5:2d:b6:60:ac:71:c1:73:3f:db:1d:
                    57:5b:27:74:61:10:c4:94:9d:f3:32:f0:0a:a3:1e:
                    a9:62:3b:68:52:91:0c:f3:9e:41:09:72:b0:3d:8d:
                    b2:ea:ad:fa:c3:1b:0b:bf:4d:34:d2:ce:ad:b8:cf:
                    ef:cf:58:75:98:5b:a5:88:a1:0d:c3:d9:6d:13:a9:
                    0c:a3:4d:f7:ed:87:bd:bc:93:e5:c9:54:c7:9b:8d:
                    6a:ba:e6:60:ca:88:f2:61:18:8a:8d:d2:5f:73:2a:
                    11:53:a5:d5:80:21:df:7f:8e:0c:0f:f4:4d:66:3d:
                    44:b1:11:4c:a7:0d:2c:76:32:08:67:d6:ea:43:50:
                    a6:79:81:bc:b7:fa:e6:5c:8f:81:bf:b0:9e:69:3a:
                    08:74:80:7f:9f:21:25:d0:2a:d0:84:20:6f:29:bc:
                    06:bc:18:8e:ae:76:8b:3b:4c:15:ac:7e:04:0d:8d:
                    7e:9a:08:ad:bb:85:16:31:71:99:56:44:d7:ee:25:
                    bf:36:1d:63:00:f5:e8:93:41:56:c9:8f:82:ad:7e:
                    7b:d8:f2:71:6f:47:46:01:15:bb:dd:48:af:2c:11:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6F:36:D0:EA:27:19:CC:C0:D6:62:ED:AB:0C:74:A4:78:3D:3C:78
            X509v3 Authority Key Identifier:
                keyid:2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:11:8a:67:9f:63:7c:54:3e:f1:64:f1:6f:80:a4:7b:12:
         24:69:6c:1d:92:51:ef:38:b3:b3:69:f9:46:da:93:af:95:33:
         f7:e8:a5:78:59:3c:30:70:d2:19:25:16:a6:52:76:9f:1b:13:
         73:56:3f:54:b1:52:c9:60:d6:c9:c3:84:7b:e4:26:4f:91:45:
         37:33:40:b2:31:d8:f6:26:e9:9e:78:95:88:17:3f:02:03:e5:
         99:51:94:01:94:64:64:95:24:35:1a:5b:76:24:97:7d:32:33:
         77:8c:89:65:b5:0c:ce:89:af:e9:43:1c:14:ce:1d:dc:ac:20:
         60:37:58:e6:9e:0b:e8:d2:ba:76:8d:1b:63:c8:63:4b:2f:93:
         72:33:ee:b0:88:74:a1:a7:43:dc:87:fc:c0:ef:d2:68:7a:8f:
         9f:01:ad:75:18:cc:14:20:32:07:43:2a:df:30:b8:c0:df:37:
         ea:63:c3:b8:4b:53:53:e0:e7:ba:7d:9b:e9:38:7f:f3:3a:a9:
         e4:c5:7e:7c:06:81:c3:ac:0c:0a:3e:7d:52:76:7b:d1:e1:30:
         09:9d:9c:97:05:8b:73:39:dd:1a:7e:89:26:1b:e0:be:51:5e:
         84:28:3e:fc:d8:32:39:7e:78:4b:a2:c4:63:33:b6:61:80:2e:
         bc:d3:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:21 2025 by rpki-client on console-fra.rpki-client.org