Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File:                     l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier:          mYS2VrxqJltJC8NO9xRMeUTFEsT/Bidjxo2cDa/15ww=
Subject key identifier:   04:49:9C:3E:00:BF:FC:02:90:08:2C:07:85:39:F4:7C:91:FD:C9:D6
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer:       /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial:       0194C49A23AA9C762376BFC439D11C5DADEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number:          142E
Signing time:             Sun 02 Feb 2025 03:00:23 +0000
Manifest this update:     Sun 02 Feb 2025 03:00:23 +0000
Manifest next update:     Mon 03 Feb 2025 03:00:23 +0000
Files and hashes:         1: 1-sigTPJAC1PNSATn-sK6lRfTKyQ.roa (hash: jOHa8XaZlnY37LiuZhg9CFenWtMsktZUfeaX7d5RSx0=)
                          2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: suN9pSpGAuonzW4G+ewGs/jTZzyy9nmwTaarlMIdXUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:9a:23:aa:9c:76:23:76:bf:c4:39:d1:1c:5d:ad:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
        Validity
            Not Before: Feb  2 03:00:23 2025 GMT
            Not After : Feb  3 03:00:23 2025 GMT
        Subject: CN=04499c3e00bffc0290082c078539f47c91fdc9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:93:42:57:e1:2c:b1:36:c1:88:07:89:0f:
                    0b:fa:25:0e:bb:d4:3b:ce:66:ad:d2:6b:d0:be:30:
                    91:37:86:d1:b8:22:f9:dd:18:81:a8:b2:ba:53:87:
                    62:69:b3:d7:9a:84:0f:d8:c5:a4:76:c9:e4:cb:fd:
                    a5:66:0f:a2:a2:71:3e:3d:aa:0b:4f:2e:74:45:6d:
                    80:b5:d4:af:d4:fc:29:e0:fa:92:38:b7:0a:97:fe:
                    ab:d5:12:5e:a2:d0:30:9d:75:c7:93:41:7b:72:22:
                    9e:1c:b1:f7:bc:5d:8c:b5:97:58:b4:63:ac:a6:e5:
                    bc:fe:14:1a:58:92:1c:75:aa:2e:9a:1c:08:09:49:
                    74:45:2a:12:a9:cd:56:c5:9b:25:f6:92:d7:9b:ee:
                    49:36:1f:3a:47:9f:f1:d8:ed:95:fe:98:90:52:85:
                    a8:03:32:d4:3c:37:f6:e4:54:b6:0b:db:cb:f8:8f:
                    62:70:66:5e:ea:b5:02:ab:d5:29:3e:6f:e6:6e:87:
                    cb:25:ba:c7:38:14:49:04:1d:df:df:91:8f:ea:8b:
                    f1:1b:41:8f:35:c5:db:da:1b:af:fc:28:61:75:02:
                    cd:13:4f:c0:20:9a:03:1b:26:62:d9:c1:7c:ba:82:
                    61:0a:97:ac:40:b6:12:2d:30:ec:36:ac:18:93:50:
                    21:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:49:9C:3E:00:BF:FC:02:90:08:2C:07:85:39:F4:7C:91:FD:C9:D6
            X509v3 Authority Key Identifier:
                keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:ad:a6:39:0e:ab:08:99:95:7c:a0:d5:94:4a:7c:ca:6b:
         17:c9:b6:26:d7:74:ad:28:f1:04:75:4e:c9:97:72:72:0a:aa:
         4c:22:33:dd:2b:55:54:a7:ae:64:1b:37:84:5a:c1:74:a0:24:
         86:f2:47:1f:c9:e3:59:31:1f:89:ec:f0:96:4a:0b:b5:e7:7c:
         bf:91:22:86:58:85:5c:63:c0:29:70:e8:80:b0:5f:89:c6:cc:
         a6:3a:b2:ad:f8:d0:86:2b:52:da:02:0f:5c:82:f8:1e:f3:49:
         5e:62:fc:f1:59:7d:03:e1:0f:13:a0:26:12:cb:1c:71:b7:f8:
         58:93:3b:fc:9d:24:e3:54:95:46:5c:7a:a2:27:ce:88:1c:0f:
         63:fa:c2:b2:9b:52:3d:78:70:08:47:f3:ab:cb:5f:6a:c9:7a:
         c4:82:8e:53:52:b6:0b:23:7a:f0:75:62:e6:29:20:5c:e1:b1:
         c2:7c:fc:c5:4e:bf:3e:dd:23:5a:a2:5e:00:db:3c:15:96:f5:
         ae:16:cc:04:ce:9a:b0:09:5a:24:41:ff:cb:55:ce:21:26:4e:
         cf:0c:68:e7:2f:12:c4:12:c3:f6:2e:9a:2a:a0:23:b8:80:f3:
         4b:20:3b:be:18:76:54:13:35:cf:84:21:a5:bb:cb:cc:3d:8c:
         e4:98:9f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:05:28 2025 by rpki-client