Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
File:                     Ezm5qJRtJr4tj__mwePCLLk-BIY.mft (raw, json)
Hash identifier:          kUTSQnp1c0VL0Nz8L7wEDaF5MNRzKrFEKSR7esmJOrI=
Subject key identifier:   13:20:AA:0F:34:F3:9C:73:6E:18:B2:3E:44:86:4F:9E:CF:FF:CA:29
Authority key identifier: 13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
Certificate issuer:       /CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Certificate serial:       0194BABB6A224857A0E698BC0AC35E1B4AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
Manifest number:          0AF2
Signing time:             Fri 31 Jan 2025 05:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:31 +0000
Files and hashes:         1: Ezm5qJRtJr4tj__mwePCLLk-BIY.crl (hash: +g3+8I8qUH4zcZrhzY+WbDozJ6bAKGRJkJdC39oL0yY=)
                          2: Pd_TRMzeLXmR4l_ISjIRf3kfJG8.roa (hash: eMT9U1JgE9Qp7ruvpzaw9x/RY238h1ceOul754xPuwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:6a:22:48:57:a0:e6:98:bc:0a:c3:5e:1b:4a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
        Validity
            Not Before: Jan 31 05:00:31 2025 GMT
            Not After : Feb  1 05:00:31 2025 GMT
        Subject: CN=1320aa0f34f39c736e18b23e44864f9ecfffca29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:e2:2c:a5:17:f3:d9:40:55:b7:82:86:e3:
                    44:16:7d:04:d9:76:79:61:68:09:f9:81:49:ed:60:
                    71:71:0a:47:8f:e0:fc:71:bb:10:71:a2:3c:8c:93:
                    5d:46:9c:c3:ca:79:91:57:ed:81:50:a1:4c:c4:65:
                    d2:c6:da:c8:a1:b9:31:ec:97:6f:0c:33:87:f1:ec:
                    87:80:78:36:09:5b:27:9a:b3:95:25:ca:de:a7:5e:
                    73:ae:f7:26:2b:77:bd:7d:b8:25:e9:a9:bb:50:15:
                    70:85:c7:c8:5a:77:64:05:18:3d:6e:ca:20:23:d9:
                    15:47:99:91:f0:75:be:1f:ab:4e:15:aa:d8:e5:4d:
                    69:10:3d:cc:3a:22:9f:10:27:bd:8c:50:60:69:16:
                    c1:8a:93:16:e2:4e:4b:73:47:c6:79:07:45:cc:60:
                    0b:11:b3:f5:3f:c9:c5:cf:7f:35:31:e3:60:c6:b1:
                    da:a6:1a:05:07:64:87:03:92:f6:81:37:17:bd:0a:
                    00:34:ae:69:64:08:88:d7:00:d1:ed:9f:ce:e5:7e:
                    f2:7f:5b:3f:de:14:19:8a:cf:8b:19:dc:0e:0c:45:
                    14:07:cf:36:69:6c:ae:1a:fd:d0:55:68:91:3c:c6:
                    af:65:fa:2c:1d:e8:88:b1:e6:9d:e5:7a:fc:bb:38:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:20:AA:0F:34:F3:9C:73:6E:18:B2:3E:44:86:4F:9E:CF:FF:CA:29
            X509v3 Authority Key Identifier:
                keyid:13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:26:90:18:41:a2:73:ad:1c:fc:40:f3:2c:ce:37:1f:b8:34:
         c5:0a:47:b6:6f:50:af:c5:d5:70:7a:69:04:9c:4d:c0:15:15:
         8d:97:2a:9a:82:13:60:b8:f0:a4:5a:d5:08:b7:39:b4:e1:a4:
         b1:4c:2e:66:e5:fa:03:87:6d:53:91:e8:47:76:09:03:5e:1c:
         f5:39:af:5e:54:55:ef:ee:b9:a9:7c:6f:dc:84:95:00:25:48:
         1f:4c:fd:86:63:fa:c4:42:e0:75:2d:07:53:2e:58:4a:ee:ae:
         de:78:1c:1f:59:ea:f2:20:3c:b1:c1:fb:4e:93:e1:80:f3:52:
         22:16:a1:76:db:b7:22:05:b7:27:fe:50:55:2b:e7:1a:5a:bd:
         c5:d9:0b:a6:fa:70:76:45:3d:4f:af:91:70:5a:65:f6:0e:7e:
         dc:73:97:c9:b7:d4:a0:84:70:9a:4a:d4:54:86:6e:3b:53:f0:
         9b:98:b7:f3:05:43:c2:7b:3a:51:bd:9d:ba:3b:b6:c0:df:00:
         e7:ac:a9:b0:8d:18:93:39:5a:14:34:62:50:3f:0e:35:ab:d8:
         45:76:9a:93:18:ce:ab:2c:b4:06:e7:d0:38:49:2c:03:f5:f1:
         c2:c1:6d:31:2a:02:0f:65:7c:d8:a4:75:bc:b0:26:f6:42:6b:
         a1:b5:31:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:40 2025 by rpki-client on console-fra.rpki-client.org