Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
File:                     Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft (raw, json)
Hash identifier:          hLjF8zfsvfSiF0OB1KjBjzYDp7V7Bn5hdYcKm4YFQsI=
Subject key identifier:   2E:90:EB:1D:E0:5E:00:DA:FC:78:44:86:5E:E1:84:F3:7A:BB:AC:99
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Certificate issuer:       /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial:       0194BA8475C3E679967ABF0BBEDC1818650D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 04:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:30 +0000
Files and hashes:         1: Axhuv-vSYllpuU-14IugpstzqWE.roa (hash: /Ord+e8QnPH5LGTzpUgmYsFuHyPV/bxgYVJqRNe2PIA=)
                          2: Dpiiya2z2mifdNhqVaRKmAzL95Y.roa (hash: sqFLPY2vXH7g4+A/b285ZHpA7GX89rIisaqW4K6po8o=)
                          3: INSqWlHflpOidRP2Z0zkE0RFoZM.roa (hash: UYyBIx3hFm38d0qCAb7SJuuzgZHuKn0sxA5Yj+GvQrY=)
                          4: KlHNG1wkVyOFx-j7DYZVfmh5bYE.roa (hash: L5JYU64abXKhXkIrpf3gdfvIS55/epAy6+ULSIZ/xw8=)
                          5: Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl (hash: 07UYcnw40UTmq/p8Yq36ND09/0K79x+IXbj1y33yQkQ=)
                          6: XBUDByF8di0OovXdvsIAPmD8oI8.roa (hash: QKkt6zof2ioYKcO5/osSYc20Y4gabGbrulwMZuT72/Y=)
                          7: eAIf5pwwtS5DMcRXjingbijYa6I.roa (hash: 5x7C4C2DIQEq7YkrMXUAQXNBSZ9Y9MaJGusjLg+DCEM=)
                          8: q6CD9OHloXnbJ4quKnzMfMA8Aio.roa (hash: 1FAJq7k9JZNXXgBXTfHO8QVEmHccCC1/W+DHOFmecBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:75:c3:e6:79:96:7a:bf:0b:be:dc:18:18:65:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
        Validity
            Not Before: Jan 31 04:00:30 2025 GMT
            Not After : Feb  1 04:00:30 2025 GMT
        Subject: CN=2e90eb1de05e00dafc7844865ee184f37abbac99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:28:99:e1:29:b9:67:77:11:d6:f2:cc:10:
                    62:74:19:87:94:ba:2f:2e:3f:71:fb:0a:b4:83:79:
                    72:c9:ce:b2:ba:c6:34:22:06:7a:fc:4d:c2:36:8a:
                    c1:5c:53:56:14:90:32:2f:11:42:17:bb:ee:ec:a1:
                    17:1a:63:b3:14:79:ec:04:50:eb:d3:3d:9a:8e:8b:
                    86:6a:41:92:99:0d:cd:f4:6a:b6:c3:cc:a5:37:11:
                    93:c4:9f:43:5a:15:32:58:f5:78:2b:05:6c:91:0e:
                    ad:57:2d:fd:93:04:ef:19:59:7b:f3:68:fe:f3:d1:
                    a5:87:f2:f5:c0:90:8a:9b:4e:f9:eb:a2:9a:a3:3f:
                    1a:87:03:2e:7a:ae:29:21:63:47:83:d7:9f:4a:54:
                    b5:d3:c5:67:ad:4a:5f:1c:97:c5:86:26:f2:db:7a:
                    6d:0f:43:32:29:4d:90:fb:ab:18:f6:4e:52:51:d5:
                    76:d1:8c:b0:eb:bc:37:bc:f0:bb:3b:85:f5:7b:2b:
                    41:2f:e1:e6:38:ba:88:ff:0c:66:34:cb:41:d2:66:
                    3c:2d:37:0a:bd:be:9a:0c:21:31:3a:72:55:d7:18:
                    47:7c:d2:cf:43:b6:27:a8:81:74:2b:05:2f:e8:35:
                    6d:67:94:0b:e0:fd:1c:43:cf:ee:46:f3:34:9d:76:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:90:EB:1D:E0:5E:00:DA:FC:78:44:86:5E:E1:84:F3:7A:BB:AC:99
            X509v3 Authority Key Identifier:
                keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:33:50:9d:ae:46:e2:9d:09:d0:a0:4c:2e:e3:da:60:e2:1d:
         72:bc:d3:8d:39:f3:5b:ed:56:b1:e9:51:a3:87:ef:4b:13:29:
         b0:1a:5d:e9:75:a2:29:c5:ff:62:1a:5e:d4:41:9e:c8:4d:75:
         7b:0f:fb:75:8f:2c:b8:d4:dd:60:a3:27:90:f2:59:8f:8b:46:
         83:5c:ac:fc:3f:a8:ae:5e:2d:37:f6:df:41:01:ca:2c:77:e0:
         8a:8b:88:aa:db:2d:85:0c:a7:60:24:cd:80:0d:d8:61:76:e2:
         70:06:14:22:e3:4f:e6:8a:4a:8a:be:cb:22:23:92:93:e4:49:
         a6:b1:14:97:38:99:21:94:9f:28:82:ec:58:1e:18:16:17:11:
         fc:e7:1c:b5:6f:49:cf:ce:f0:34:a9:6a:1e:90:e0:83:0d:77:
         56:d9:e9:c3:84:86:4c:70:db:f8:f8:a9:72:b4:e2:be:4b:6c:
         4a:97:f0:ab:83:df:10:d4:cf:3d:11:95:52:82:db:f8:95:7a:
         02:bc:f5:d8:f2:a1:8f:68:7e:3e:14:bc:f6:7c:e8:56:f4:6c:
         45:37:01:41:3a:8a:2e:2f:d4:82:d4:7e:c0:e5:ec:4b:de:ab:
         8d:9c:e7:f0:e4:18:98:a5:8c:79:68:fc:f9:18:87:a7:f5:0d:
         a4:80:d7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:55 2025 by rpki-client on console-fra.rpki-client.org