Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File:                     pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier:          Qd+BJF7HKh7d3Qc50diNhgHnRKghJnxL8lsYc1RKo9I=
Subject key identifier:   CB:9A:60:E9:75:2A:AF:DA:B3:B6:01:43:D9:E8:D0:37:6F:0F:DE:18
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer:       /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial:       0194BB5FDEADE48D98DFE6D060281BF068ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 08:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:09 +0000
Files and hashes:         1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
                          2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: hT6+dfopM4Vhq6PVnfKjViUEcY1qBwaW82EltiknyjE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:de:ad:e4:8d:98:df:e6:d0:60:28:1b:f0:68:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
        Validity
            Not Before: Jan 31 08:00:09 2025 GMT
            Not After : Feb  1 08:00:09 2025 GMT
        Subject: CN=cb9a60e9752aafdab3b60143d9e8d0376f0fde18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:3a:43:84:97:b4:f3:38:3d:5c:a6:26:b2:
                    e1:f9:60:fd:dd:95:ba:f2:2d:9b:49:d7:9d:48:84:
                    49:05:53:f4:8c:29:43:d8:d1:26:0f:97:75:6a:34:
                    c5:4f:96:ca:74:16:2b:05:02:fa:0c:b9:87:ac:a7:
                    6d:79:b3:ec:c2:1b:a0:8b:3a:59:d0:f2:c0:66:98:
                    62:0f:e0:35:67:4d:ee:84:f5:40:ae:50:38:06:a8:
                    3c:d0:4a:c8:5f:2b:0f:93:1e:fd:59:cf:58:3e:54:
                    9f:30:77:15:c9:87:7a:93:f2:29:a6:ae:88:fd:b0:
                    83:cb:d5:e4:65:05:70:ab:ee:31:0c:2a:50:d1:1d:
                    0a:bb:34:73:13:20:ea:a1:d6:de:42:fa:68:e5:a4:
                    54:de:b8:f2:18:60:98:62:7c:bf:4a:e3:29:d0:b1:
                    99:dc:2d:92:58:77:0b:0e:c3:80:ec:64:db:b6:1c:
                    d2:09:6f:2e:b8:b7:fb:b8:99:74:fa:ae:91:b4:38:
                    6b:c4:7b:f2:18:e3:10:ea:f7:fe:cb:61:a2:1f:83:
                    70:77:ba:5e:cd:02:88:6c:aa:6d:94:62:d6:77:ea:
                    29:96:57:b9:16:90:64:dd:cd:f2:be:56:4e:2c:5c:
                    b0:df:f7:5c:57:57:27:3d:ef:61:05:c3:bd:af:21:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9A:60:E9:75:2A:AF:DA:B3:B6:01:43:D9:E8:D0:37:6F:0F:DE:18
            X509v3 Authority Key Identifier:
                keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:40:03:3c:b6:87:8e:34:99:c9:15:7a:b7:61:0d:64:65:42:
         49:7e:50:70:40:33:e0:73:37:fc:ca:38:0a:84:35:c9:fa:6a:
         80:94:f5:24:29:9f:17:74:07:55:10:78:9d:12:91:7c:61:7e:
         d1:27:d6:b4:85:db:22:1f:1f:80:32:4d:13:d6:07:4a:bd:76:
         b6:d4:4c:17:50:46:3a:8a:d5:6b:e3:c7:f3:07:c0:31:8e:1a:
         d6:6b:2e:ac:9a:cb:a0:e3:f4:07:f5:08:71:cc:b2:b5:0b:cf:
         f6:bf:1f:15:de:8e:ed:74:38:cf:9c:30:32:43:cf:1a:b1:59:
         ed:8e:01:1e:4c:97:cb:85:fd:0d:a3:a5:e4:c1:50:3f:45:32:
         c3:a6:69:4b:4c:c2:7c:e4:9c:97:8f:d6:ac:a2:91:8f:cc:a2:
         85:01:82:31:e2:36:67:72:38:76:45:16:0f:02:2c:bc:fd:5f:
         47:45:51:4f:49:b2:f7:c3:20:3e:6f:85:d2:05:68:45:0d:7c:
         33:09:17:ba:23:86:fe:10:44:a7:6b:0a:e1:25:6c:f2:2d:9a:
         cc:60:49:43:97:7b:9f:16:4e:79:a5:29:5d:46:c4:2d:38:da:
         21:83:e6:41:3a:b7:c2:9a:99:9a:de:5e:65:79:a2:ac:7c:6e:
         bb:70:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:23 2025 by rpki-client on console-fra.rpki-client.org