Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File:                     Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier:          1ywr3wsWmUq7Sv+bU28KQjw0WpNhFysz+LOG7xpV1MU=
Subject key identifier:   63:C6:91:67:34:24:A8:2A:76:C0:C7:45:C8:D0:48:68:76:99:C2:5E
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer:       /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial:       0194BAF23B2A6F379D311FF1A370A1F179B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 06:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:24 +0000
Files and hashes:         1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: 0cSBSSZIrTDARnRfZ+7E6f5VLAGq+p2HbUfDeVXbuw0=)
                          2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:3b:2a:6f:37:9d:31:1f:f1:a3:70:a1:f1:79:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
        Validity
            Not Before: Jan 31 06:00:24 2025 GMT
            Not After : Feb  1 06:00:24 2025 GMT
        Subject: CN=63c691673424a82a76c0c745c8d048687699c25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2e:a2:e8:1d:a6:1d:6d:50:86:27:28:51:6d:
                    c5:e5:0f:87:65:ad:47:24:e7:53:29:6d:64:76:07:
                    61:42:66:57:23:80:66:8b:e1:22:a7:cc:98:4f:74:
                    d9:12:c7:3a:36:76:3a:26:bc:ce:b3:5f:87:10:7e:
                    a8:a3:d9:6c:19:12:33:15:40:f9:40:0b:48:4f:9f:
                    db:b6:e6:aa:19:f7:a1:7a:7f:97:8f:bf:67:4f:19:
                    51:35:82:6a:4d:58:5b:73:e7:9f:0b:c9:ea:72:7c:
                    4f:ac:6d:88:d6:78:76:7f:d2:c6:25:5e:91:df:ff:
                    0e:21:b2:fa:7d:09:4f:a1:f7:73:cc:da:2f:08:90:
                    87:2e:d7:84:e2:87:a0:3f:28:df:36:28:35:66:ee:
                    ca:02:21:0b:72:90:bc:bf:87:1b:c9:2a:1c:2c:c4:
                    34:ee:db:9d:3f:d6:56:76:1c:56:96:15:89:af:4b:
                    04:ab:81:ed:44:e2:f0:d5:0f:b4:67:02:a1:8e:65:
                    51:3a:0e:ee:8d:66:97:6b:ee:b6:b2:2c:b9:0f:d1:
                    e8:0e:4b:af:c9:68:76:ee:d3:6f:77:1a:d1:56:b0:
                    a4:eb:2e:28:d7:fd:9f:5c:d3:65:ae:78:48:d7:37:
                    59:a7:28:5e:5a:d2:cf:e1:67:c0:b1:7a:2d:c3:ac:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C6:91:67:34:24:A8:2A:76:C0:C7:45:C8:D0:48:68:76:99:C2:5E
            X509v3 Authority Key Identifier:
                keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:08:35:cc:75:97:39:22:6f:38:3f:e9:1a:3c:45:f7:02:86:
         de:ba:f4:fc:56:9f:53:3d:e3:48:d4:d1:9e:7f:ca:04:ae:14:
         a5:3d:75:be:d3:88:7e:c8:8d:e3:b9:37:81:23:e5:eb:df:6f:
         d7:ea:81:53:94:3f:15:ee:1d:0c:b4:37:84:83:ea:75:cb:2a:
         91:75:d4:d1:64:77:a7:26:05:75:c3:76:05:2e:46:e8:53:d7:
         6c:28:4c:74:12:db:51:26:56:05:f8:57:a6:7b:8a:f5:6d:84:
         f1:1d:a7:1f:ee:d1:c2:8b:ec:10:3e:99:5b:88:12:2a:cf:88:
         79:4e:4f:45:46:91:10:f6:84:16:d3:08:a9:a6:3a:49:9e:9d:
         b5:bf:8a:c2:d7:c2:d4:77:76:a5:c0:b7:c0:2a:3d:d8:6b:d2:
         dd:d1:14:01:a5:e1:b5:3f:4b:9c:5f:25:a4:a5:bd:75:92:91:
         ac:8c:d7:e4:f0:fd:5f:1e:d0:1c:c4:7a:a9:fc:c8:d8:e4:d6:
         ab:77:23:bc:45:95:2b:83:3b:97:94:0c:7c:2b:05:a7:7f:71:
         12:3d:36:e0:01:f0:60:e7:1b:2c:d0:4c:7d:58:53:60:d1:6e:
         de:09:74:a4:44:23:fc:0f:bf:47:dd:e2:20:4d:8a:81:bd:ef:
         4a:bd:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:18 2025 by rpki-client on console-fra.rpki-client.org