Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File:                     hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier:          tjq9JhH6xoR8ekrHeemPVz6EP4D5tOZffOJqzUpSZsk=
Subject key identifier:   46:E1:F6:DC:31:99:92:6A:AB:5A:6A:6A:4F:01:E1:7B:4C:ED:5E:68
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer:       /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial:       0194BB6022A24519C38900A815E91A0B28CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 08:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:27 +0000
Files and hashes:         1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=)
                          2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: C6UOceHzNOQ43k+PWazY60n32dQr43Kj/EWcbB8wPV0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:22:a2:45:19:c3:89:00:a8:15:e9:1a:0b:28:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
        Validity
            Not Before: Jan 31 08:00:27 2025 GMT
            Not After : Feb  1 08:00:27 2025 GMT
        Subject: CN=46e1f6dc3199926aab5a6a6a4f01e17b4ced5e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:18:d3:c9:30:8a:ed:92:18:84:e7:e6:ca:
                    7f:54:75:06:75:d1:3d:5b:a4:e6:88:bf:5c:66:49:
                    c5:21:05:21:b4:83:32:77:e5:e6:ca:d1:45:88:60:
                    06:00:ef:26:21:b2:21:cd:c0:0c:c0:12:50:62:a4:
                    93:9a:66:4b:6d:4e:08:82:8c:e6:7f:64:75:0e:24:
                    9d:5a:2f:11:20:fc:8c:dc:7b:0b:b8:9d:89:32:e7:
                    e6:a4:b6:38:3c:82:d3:76:75:85:dd:ac:7d:15:9a:
                    77:be:1e:7b:6f:70:1c:9f:15:92:d6:cf:54:22:2d:
                    86:ca:5c:4c:77:91:36:6f:e2:c3:9b:1a:59:ed:74:
                    56:fb:24:7f:1f:f6:64:c0:8f:8f:eb:c0:53:b3:bf:
                    b3:54:f1:e0:d7:27:78:2d:e7:27:90:d6:84:85:21:
                    cc:d9:7b:4f:4b:36:cd:43:a9:27:79:9d:ed:8e:db:
                    6e:f5:67:ed:6b:d9:25:54:9e:e1:c7:af:d0:19:a4:
                    d0:57:34:e3:2c:60:57:dd:6e:70:37:9f:29:88:5b:
                    0c:7a:3e:7e:b4:da:c0:ae:8f:13:2f:4b:c9:46:50:
                    0a:4a:9b:06:ac:e6:62:03:a7:6b:54:71:f9:d6:ac:
                    bd:7c:01:2f:16:b8:55:7a:d9:25:df:c1:57:76:ab:
                    c6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E1:F6:DC:31:99:92:6A:AB:5A:6A:6A:4F:01:E1:7B:4C:ED:5E:68
            X509v3 Authority Key Identifier:
                keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b6:69:f1:9d:c6:55:83:1b:cd:0c:9c:af:7f:4e:a1:6d:fc:
         68:86:d0:12:e4:33:99:fe:6c:53:e6:fa:58:84:da:04:1e:82:
         6c:64:04:97:74:be:70:3a:3f:b7:0c:05:54:60:e2:b6:bd:88:
         c5:1d:c9:bf:b6:f3:89:a0:e9:46:93:3c:9d:28:be:93:22:ad:
         ee:d7:4e:6d:40:44:c0:02:9e:38:22:95:de:a2:27:8e:c6:75:
         f8:b1:c8:5b:1b:ec:18:b5:f5:92:66:4c:db:7f:4a:1c:90:dc:
         bd:02:4c:f9:19:bf:e5:7e:d1:3f:cb:7c:36:b6:86:57:24:0b:
         30:bd:d6:77:3d:25:4e:19:19:fa:94:5a:d7:54:eb:94:8a:06:
         64:67:16:97:33:8b:2f:b3:b6:6d:37:ac:84:a6:7b:00:fb:42:
         70:b8:8a:37:38:dd:94:83:cb:3e:90:f6:b7:2e:05:39:a4:45:
         bd:21:72:40:95:46:3c:94:cf:be:f1:67:09:b2:aa:40:9a:bb:
         82:07:fb:89:a1:1e:16:d1:34:7a:a6:c1:66:1e:fc:52:5d:53:
         05:ee:98:f4:21:ce:0c:5e:00:bb:87:d9:f6:c5:5e:8f:1c:c0:
         d8:bb:d3:81:34:79:29:d9:a9:96:f0:31:4d:1a:88:4e:d4:0e:
         11:69:9a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:18 2025 by rpki-client on console-fra.rpki-client.org