Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
File:                     Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft (raw, json)
Hash identifier:          K4TwbfZ2LD8SChM+72oQDM6/WuL51I+0c27dt8hRieo=
Subject key identifier:   E9:51:80:33:83:BD:6A:71:24:73:C6:EA:CB:66:FD:79:B1:D4:DE:33
Authority key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Certificate issuer:       /CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Certificate serial:       0194BB293743835C83D02D3328C7C88F0898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
Manifest number:          0ABF
Signing time:             Fri 31 Jan 2025 07:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:27 +0000
Files and hashes:         1: JwPrp9zPI8mSIbB_O0eMHGoYapY.roa (hash: IwCg2TuOsRRHQCPAN/Mgxb8cdQtIJjR9uHKISiCsG7Q=)
                          2: Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl (hash: BCOIQs+QxNcHvOa1PpQU5nwO+SJEwKAfIp4fP46fAq0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:37:43:83:5c:83:d0:2d:33:28:c7:c8:8f:08:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
        Validity
            Not Before: Jan 31 07:00:27 2025 GMT
            Not After : Feb  1 07:00:27 2025 GMT
        Subject: CN=e951803383bd6a712473c6eacb66fd79b1d4de33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:5d:5e:27:1c:6b:e2:10:95:13:99:73:05:
                    66:4b:d5:24:3e:89:4a:87:35:6b:d9:91:b5:6d:fc:
                    20:f4:91:dd:c3:ca:ca:63:60:41:8e:50:cb:2e:99:
                    9d:5f:21:e4:49:86:02:97:1d:58:35:07:89:32:38:
                    0a:0e:cf:b7:f3:d6:2a:8b:0b:4e:38:69:a1:25:ad:
                    ac:50:3d:d7:3f:ee:65:b5:2c:0a:0b:79:f5:0b:20:
                    77:82:50:11:e9:aa:94:9a:98:11:bf:aa:5b:c9:b5:
                    ec:28:04:e7:00:6a:56:d6:ab:69:a5:73:f5:85:b5:
                    38:00:f0:e0:f5:57:ef:fa:20:01:ea:c1:36:f2:23:
                    f8:da:08:48:86:5f:70:34:21:aa:43:db:20:f0:ec:
                    a0:44:f4:9f:30:07:61:bb:4b:1c:d7:9c:f9:fe:77:
                    91:c1:33:8d:39:1e:c1:f8:ee:72:84:d8:91:f2:b2:
                    f1:0e:d4:00:31:5d:3d:5b:6c:a6:1d:7d:9f:88:d9:
                    da:d0:cb:50:f6:a0:f7:c7:da:de:f1:f4:55:25:da:
                    d9:3a:e3:c6:1d:75:54:cc:20:4c:23:d6:c7:35:2f:
                    e2:a6:be:e4:fe:58:c7:40:93:13:6e:9e:4e:bf:28:
                    8e:1b:78:11:1c:5d:04:b7:96:c3:c3:9d:a2:d6:18:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:80:33:83:BD:6A:71:24:73:C6:EA:CB:66:FD:79:B1:D4:DE:33
            X509v3 Authority Key Identifier:
                keyid:66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5f:ac:8d:e0:d6:22:b6:2b:ad:a3:cb:69:92:c8:73:49:87:
         38:c7:38:92:19:65:82:90:77:14:88:8a:25:58:b3:ee:6d:1a:
         96:b2:f9:ab:45:c4:67:5a:c7:6f:84:ff:22:8a:dd:60:01:8d:
         20:e8:e8:f1:48:1b:5c:f8:5c:6b:09:bd:db:f7:d2:f3:2e:4a:
         af:fd:5e:3b:8e:6d:d8:e4:33:62:c4:bc:bf:54:e4:76:d5:e1:
         52:2f:b1:54:35:8e:a0:90:3c:62:77:c9:14:f5:be:7a:87:08:
         b5:85:d9:1c:51:50:27:6e:3e:50:f0:cc:46:d4:2e:13:ef:33:
         76:67:b6:4c:0f:65:42:eb:48:19:d8:e3:a7:a7:5c:0a:b2:95:
         c5:92:db:38:ce:70:e7:01:19:83:cd:94:78:66:98:b9:2f:77:
         f4:ae:50:ce:60:4d:0c:70:5f:9a:72:05:fe:70:aa:b6:9e:f6:
         fc:58:14:56:d8:d4:ba:09:cb:e4:31:8e:54:ae:94:8e:41:09:
         aa:ea:1a:21:47:fc:40:50:4e:02:e7:45:93:78:99:68:ca:1d:
         2d:41:cb:5b:b6:64:a3:23:56:80:f5:3e:8d:ce:54:ca:fe:6e:
         9c:87:6c:c2:d4:1c:11:38:be:f1:96:98:e3:6f:44:66:ae:bc:
         79:b7:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:02 2025 by rpki-client on console-fra.rpki-client.org