Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
File:                     exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json)
Hash identifier:          TlxXbdjapynxZmHZQccrbASEmqewBbB25V47VvLkJEs=
Subject key identifier:   12:08:C7:BC:F2:93:BD:D3:20:59:6C:96:D9:D3:B6:33:EA:8A:DD:C7
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Certificate issuer:       /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial:       0194BB29211920A9B36C1F9CC09A1A7964CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
Manifest number:          0B0A
Signing time:             Fri 31 Jan 2025 07:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:22 +0000
Files and hashes:         1: HyKdTkKV5STn1J4Rxe8JxbMCpv4.roa (hash: 6If9g5ZI4fy1JxA85rEnX+2Sovu9Js7JocSs132zGS0=)
                          2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: uJQH0Q9jAvJ3kU6OdqVOovdaK9+JxHJEtGpxUq+OmEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:21:19:20:a9:b3:6c:1f:9c:c0:9a:1a:79:64:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
        Validity
            Not Before: Jan 31 07:00:22 2025 GMT
            Not After : Feb  1 07:00:22 2025 GMT
        Subject: CN=1208c7bcf293bdd320596c96d9d3b633ea8addc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:30:6e:da:d9:29:70:d9:c0:08:33:93:14:
                    19:03:63:bc:1b:84:ff:83:72:e0:8c:70:df:80:f4:
                    0e:e4:78:6c:5d:9f:22:e6:da:59:58:96:94:73:11:
                    f9:ca:43:ef:ea:3f:9f:8e:9d:49:d5:bd:ef:2c:d1:
                    0a:bd:cf:aa:5e:0b:a5:a7:ea:de:7c:0c:f4:08:9a:
                    cb:c8:7b:49:78:0e:08:ed:fd:2c:da:9a:41:24:b6:
                    c4:33:ad:cc:4b:f3:bd:48:fd:e7:62:05:6c:b6:28:
                    dd:a6:dc:5e:9a:7d:0f:0d:1c:7a:17:6e:2b:ed:3b:
                    18:cd:bb:0b:37:8c:7f:d4:46:c8:00:6a:ec:65:fb:
                    07:3f:c1:38:6a:c3:f0:1a:37:11:38:ec:2b:5a:d7:
                    02:73:03:1c:a9:db:14:a3:7f:9b:7e:c0:f7:7d:d6:
                    2e:d7:4d:5b:01:38:11:a4:60:ae:d8:9a:87:d4:d8:
                    16:63:59:45:ea:bb:d8:7a:97:25:0d:08:5a:bc:10:
                    17:1f:43:87:71:9e:54:fc:a6:3c:d1:4b:ff:25:a6:
                    67:42:6b:4a:69:f6:91:bd:68:5a:15:72:9e:b8:7d:
                    03:f6:6a:a8:f5:41:f8:e3:f5:a3:a6:3a:d1:c5:59:
                    40:3f:2f:ce:2d:69:a7:00:30:d8:d3:0e:b7:72:4b:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:08:C7:BC:F2:93:BD:D3:20:59:6C:96:D9:D3:B6:33:EA:8A:DD:C7
            X509v3 Authority Key Identifier:
                keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:d3:27:9a:3e:6b:e3:19:e8:7b:5f:53:a1:d5:c9:d9:9b:
         4b:80:2a:cf:fa:b6:9f:84:e6:33:29:b8:72:d0:85:de:6c:27:
         77:47:d4:74:7c:0a:ae:f6:a5:4f:33:d3:97:df:4f:ef:69:18:
         71:8c:78:7d:0b:bf:24:b5:8e:ee:d0:fd:19:61:3b:fd:18:7b:
         87:d5:63:c6:c5:c3:e6:2a:16:dd:eb:d2:0a:43:a3:f7:80:29:
         49:c9:a1:86:9f:ac:bf:dc:7d:33:28:dd:64:94:62:41:a6:ba:
         d0:11:3b:cc:58:26:41:e6:e2:9e:39:27:13:8a:5a:54:05:69:
         19:fb:ec:f0:d8:1c:80:90:ac:9d:95:4f:c3:6b:5f:f5:1b:3e:
         19:01:11:31:b5:d9:a3:35:0a:ff:5f:62:e5:26:f0:f2:c5:8f:
         d0:14:67:f8:28:66:8d:56:3c:62:5e:d1:81:3a:da:a7:b7:f6:
         4b:0c:2b:df:3f:dc:f0:f4:20:25:12:7b:82:93:38:bb:62:a7:
         93:bc:27:19:d7:2c:f5:f7:b6:96:1e:57:55:6b:69:b8:29:41:
         6f:ee:6f:0b:69:02:78:76:80:6f:6e:1c:1f:78:f6:d6:a0:43:
         7e:7f:7d:92:79:c7:a4:58:f5:f5:e5:dd:ed:9f:95:a7:64:a9:
         6b:c0:4a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:34 2025 by rpki-client on console-fra.rpki-client.org