Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File:                     p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier:          SbGvx1l4c24ZpwWjnsFcGusGD1AxxaHt1L951VAKku0=
Subject key identifier:   34:70:76:CD:D9:B2:F1:93:5D:22:EA:7B:62:47:E4:4D:AF:93:B0:28
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer:       /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial:       0194BB5FEB9DE34FF2C5BB97A841071CC87C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number:          042E
Signing time:             Fri 31 Jan 2025 08:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:13 +0000
Files and hashes:         1: oe0ViHcJehxm3wVuZHtIwUX00hU.roa (hash: RwLw3XJajb9LZZAlaGbGSJVNCQJewc1VgXJkyuKlD8Q=)
                          2: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: oGqUybax185U3OdF6t4n6bZECyILTb4PNMv7mtxfzZc=)
                          3: rEm8DnSRjF-eOZ8W-19-W5YBOlI.roa (hash: oKxbV7NuBt8nP02xM3KhblNP7v+2Q4dV/sQu1W1Wh/I=)
                          4: wsmN0GUZsWjC_T-MselV4vkxQWc.roa (hash: yTPdTeVo9RosDc+EbxC7mvYcTFyk5tLkcD8SHn8y0Zk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:eb:9d:e3:4f:f2:c5:bb:97:a8:41:07:1c:c8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
        Validity
            Not Before: Jan 31 08:00:13 2025 GMT
            Not After : Feb  1 08:00:13 2025 GMT
        Subject: CN=347076cdd9b2f1935d22ea7b6247e44daf93b028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:de:73:1a:7f:f4:e3:ef:75:e9:7b:48:71:
                    f3:01:3d:c6:e2:e0:d7:91:3d:da:84:a8:f6:f5:51:
                    0a:53:66:fb:8d:cb:b7:ec:37:14:ce:a3:49:70:c2:
                    62:83:97:e9:76:fa:ae:71:45:86:c4:1a:3c:b6:16:
                    58:9c:5d:23:9e:6a:21:79:ce:62:ce:62:70:2d:51:
                    d8:11:27:d7:12:74:a1:f3:3a:9b:56:df:a6:59:c9:
                    df:b3:78:f7:8c:7f:a2:d2:8b:3c:0a:d2:0f:fb:a6:
                    82:91:e6:98:00:8e:be:51:bc:ee:74:55:68:51:0f:
                    04:66:fb:f7:20:68:2a:ad:87:9a:bb:bd:d2:e4:51:
                    4c:a1:a9:d2:5a:87:61:6f:3a:56:94:41:02:5b:73:
                    13:0f:e1:7c:71:41:a0:23:ea:b3:43:57:42:40:6e:
                    54:a1:8d:25:79:c6:32:ae:08:51:19:b4:c2:bf:72:
                    1b:be:47:df:80:b9:01:89:22:31:cc:39:b7:3c:60:
                    f0:74:b6:b2:1d:98:12:1e:63:80:cc:6c:fe:84:94:
                    16:49:cd:19:7e:4c:d7:a0:0b:d4:c3:58:1b:20:c3:
                    7c:84:4a:55:94:a2:1d:da:80:57:9c:fa:07:b2:1e:
                    b4:4d:33:d2:d0:d1:f9:f7:46:b7:af:b3:5f:e9:25:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:70:76:CD:D9:B2:F1:93:5D:22:EA:7B:62:47:E4:4D:AF:93:B0:28
            X509v3 Authority Key Identifier:
                keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:95:50:7d:58:8f:eb:e8:29:e2:8a:83:f9:f7:54:ec:b6:73:
         6a:99:4b:07:2e:8e:05:9e:a9:f8:b0:d8:4d:32:0a:21:7a:dc:
         97:68:b5:08:18:ef:42:f4:ed:68:86:61:67:71:1b:e5:0e:18:
         68:c6:76:16:dc:dd:70:fe:ec:e2:dd:96:89:76:ef:a6:fd:74:
         4d:73:03:e1:3c:69:ef:7a:95:fd:93:3e:2d:e9:54:27:5f:12:
         d6:73:2e:c2:33:6f:f2:12:2e:f0:ac:c1:a1:75:df:fa:26:f1:
         1a:db:ed:a4:c3:40:88:33:42:02:cf:bb:d4:80:67:0a:15:4e:
         d3:06:dc:b8:50:27:2b:67:6c:cb:a1:e9:66:88:3f:dc:65:66:
         81:7c:53:69:91:25:3e:60:9c:4e:68:37:cc:7f:44:a3:6e:95:
         fb:09:22:71:b6:19:12:f2:93:6e:37:96:62:6c:08:c5:36:aa:
         1f:ed:6c:62:48:96:df:89:51:a8:2e:c5:66:5c:6b:e5:f7:89:
         19:1a:42:af:d4:f9:03:57:9f:6b:d4:bc:86:a9:e3:f2:47:42:
         5d:27:5c:cf:94:7b:e4:c2:5a:c3:c9:18:8e:0e:67:b0:08:28:
         38:f5:70:6c:e0:74:74:4d:55:7a:e0:5b:d0:9a:99:73:29:08:
         bb:7d:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:20 2025 by rpki-client on console-fra.rpki-client.org