Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
File:                     uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft (raw, json)
Hash identifier:          gIwKMffOjZ24y/5idNVGUJl8fjrKcS8UzMviuGIYPrw=
Subject key identifier:   33:20:C1:5F:74:3E:53:D6:35:DE:F1:70:C9:CF:72:1B:CD:40:18:2C
Authority key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
Certificate issuer:       /CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
Certificate serial:       0194BA84441C9F28E0801A696B55E12475D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
Manifest number:          0385
Signing time:             Fri 31 Jan 2025 04:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:17 +0000
Files and hashes:         1: oXndQEWLAi93Q3gStogUAMhpojg.roa (hash: 3yyWwrPlKu/PVm4mmaMjgKzNXRTuMyz0HTS/+PODjNA=)
                          2: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl (hash: IjNsE4hLTjnB/Oye5uxfnB8zsu0YuBPkEZuOOrYAf2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:44:1c:9f:28:e0:80:1a:69:6b:55:e1:24:75:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
        Validity
            Not Before: Jan 31 04:00:17 2025 GMT
            Not After : Feb  1 04:00:17 2025 GMT
        Subject: CN=3320c15f743e53d635def170c9cf721bcd40182c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d1:8b:46:27:87:95:b7:94:64:3b:ac:db:3a:
                    73:34:33:87:15:6b:76:c0:51:49:79:26:b0:76:27:
                    e4:39:33:27:30:3b:7c:f6:42:ff:44:2b:c8:ec:2b:
                    f1:0c:7d:fd:bc:eb:e9:23:8e:d5:a6:62:fe:2d:7b:
                    e5:fa:e9:2a:b3:91:34:41:e8:16:91:9b:be:41:6b:
                    d4:89:c3:d0:b0:92:b3:15:b3:ef:d8:75:7c:26:01:
                    86:e7:5a:85:8e:d9:eb:50:f0:dc:b0:34:e7:74:35:
                    02:d6:1d:4b:90:2b:b4:69:23:bf:ca:3f:2c:31:32:
                    19:74:31:67:a0:3e:4e:9e:fb:d9:83:54:de:0a:5b:
                    18:5d:15:a7:38:df:bb:0c:7b:3a:b4:db:5a:50:83:
                    ee:61:45:54:eb:57:ce:8c:2f:23:b0:86:a1:16:83:
                    b3:11:2c:71:7c:d8:ab:72:34:b5:d3:e0:2b:85:18:
                    d0:ea:d1:6f:22:5f:b0:f3:b8:96:7e:04:b6:aa:98:
                    b7:37:c1:2c:7b:e5:b8:26:35:ba:86:09:16:b6:95:
                    d2:a9:af:5e:85:65:a2:ae:49:9f:a0:bf:82:8e:54:
                    d6:21:d8:f6:a5:e4:b8:fd:f5:b8:90:83:7f:83:85:
                    be:ad:b2:39:24:bb:b6:8a:02:2b:11:82:ac:ab:21:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:20:C1:5F:74:3E:53:D6:35:DE:F1:70:C9:CF:72:1B:CD:40:18:2C
            X509v3 Authority Key Identifier:
                keyid:B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6b:ab:50:17:4b:dd:d7:53:58:4d:4c:c3:5e:2b:45:bf:44:
         0f:b8:20:11:65:64:53:38:b2:69:b9:23:b6:f3:cc:37:57:f2:
         13:33:8f:da:ec:8c:e4:fe:4a:30:d2:d9:0e:0a:e4:2e:90:0d:
         df:9a:d3:27:5d:ba:5c:dc:b3:76:95:8e:d6:e2:aa:cb:b3:d3:
         7b:90:e4:e6:bb:f4:d3:f0:76:62:61:3e:db:7d:13:53:92:90:
         a6:60:fc:a6:ef:ef:7b:3f:d0:04:b7:75:84:4c:23:89:0b:d3:
         f7:7d:ed:e5:b2:ed:ed:26:75:17:9d:1b:53:10:fd:73:1e:dd:
         32:bb:54:57:3b:cb:19:ba:dd:d0:25:4e:2c:4c:0c:99:5a:1e:
         d3:27:25:fc:6d:d5:13:f9:f1:a1:78:f4:04:88:bd:88:13:52:
         f4:15:31:de:10:9c:2b:88:9e:28:53:e1:89:1e:09:74:4b:fc:
         d4:71:e6:fc:8e:e9:1a:81:1c:72:60:50:d4:b1:7f:51:e7:04:
         f3:43:31:c6:7b:88:eb:49:d4:f2:b7:fa:a3:b0:c8:a9:39:a1:
         e2:e4:d7:28:57:3a:e4:56:04:fe:94:ab:da:40:ce:ba:26:16:
         fb:a3:db:27:e8:74:a4:58:c0:9a:b3:d0:6e:27:ef:f0:1f:04:
         1f:45:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:19 2025 by rpki-client on console-fra.rpki-client.org