
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
File:                     a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft (raw, json)
Hash identifier:          kStH7Ar/9aJvRsRRf+55mHFEIIAR+RqHUltWIcc5Aq8=
Subject key identifier:   41:33:4F:84:6B:BA:D5:38:C1:0B:BD:98:D9:E6:93:03:F6:1E:B8:AC
Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
Certificate issuer:       /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Certificate serial:       0194BAF28745C1D0DA3C8CF5CFB00556D07D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 06:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:43 +0000
Files and hashes:         1: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl (hash: xcxYyY6CcJpn76/t0eixswq1vD3Sj93yamzrc3Vh6AY=)
                          2: iOsVPSzZeKu_GpAxh4HElCaSMFU.roa (hash: AzLs0VLFJkqJP3rzT9WbseTSbDWK38sW9aaDyk0oNy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:87:45:c1:d0:da:3c:8c:f5:cf:b0:05:56:d0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
        Validity
            Not Before: Jan 31 06:00:43 2025 GMT
            Not After : Feb  1 06:00:43 2025 GMT
        Subject: CN=41334f846bbad538c10bbd98d9e69303f61eb8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:6e:7f:b7:f7:38:88:cd:58:07:74:c9:de:
                    7c:02:6f:83:f3:cc:d2:27:c2:8b:51:ef:8d:73:b1:
                    c6:ab:aa:d2:53:0d:78:6a:94:24:69:b5:40:7d:ba:
                    c7:b3:34:d9:e9:3b:34:e7:0b:b8:98:9f:11:af:86:
                    ab:1d:49:43:78:69:93:93:72:d8:f4:ce:73:60:2a:
                    bf:7d:c3:e2:d7:78:31:f6:88:fb:30:8b:b4:5f:39:
                    41:e7:17:3d:bb:e9:66:97:d0:3f:ee:68:02:d2:ac:
                    57:54:da:11:a7:26:29:ba:30:09:48:22:fc:53:ab:
                    5e:0c:a9:4b:e6:2c:b3:f3:21:3a:ba:a0:fa:e4:56:
                    a2:7f:85:bc:28:71:55:0f:c9:93:4a:bb:ac:d9:59:
                    52:80:6b:3e:6f:eb:df:e5:bd:b8:09:20:b3:ee:4b:
                    01:e7:0e:08:89:47:45:13:37:00:eb:eb:6f:34:4a:
                    fd:63:28:ac:a3:3a:11:35:39:ea:49:76:23:07:72:
                    19:9b:d7:17:95:88:25:6d:55:81:3f:1c:ea:08:b8:
                    b9:01:7c:2a:47:68:d8:39:9c:05:d8:09:1a:48:60:
                    8b:44:35:36:f1:5d:a4:c6:d0:b6:77:e4:db:94:ec:
                    2b:08:17:97:da:3d:7f:90:80:6d:ec:5c:8f:04:6e:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:33:4F:84:6B:BA:D5:38:C1:0B:BD:98:D9:E6:93:03:F6:1E:B8:AC
            X509v3 Authority Key Identifier:
                keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         80:d6:b0:f1:a3:e2:41:46:32:8e:00:06:66:dd:93:3b:f3:73:
         ef:0d:d5:af:9c:24:6e:2a:e9:4b:c6:67:47:61:47:39:e9:fc:
         1a:b1:a4:45:97:04:86:9c:1d:6d:5d:4c:b5:76:a0:1c:a0:2b:
         a0:f9:cd:b6:e5:fc:55:46:47:62:8b:c3:f5:70:ad:b2:f3:40:
         28:35:20:3a:3f:47:46:89:20:14:96:4d:d0:71:7c:ff:03:6a:
         fe:39:a6:d0:93:82:28:73:c7:77:f6:c1:11:31:34:da:ea:ae:
         7d:53:7a:7f:cc:b9:13:7e:45:1d:93:09:4c:25:e3:f4:e6:0a:
         d7:16:9e:f2:55:e3:52:fb:e8:a1:1c:3f:40:51:9b:2e:e4:78:
         0a:34:14:38:6a:a8:4f:bf:1b:cb:39:1f:9d:09:cc:49:09:16:
         4a:bc:11:e8:a8:7e:b9:b0:5f:83:97:a9:cc:dc:ef:e8:ce:f1:
         eb:74:4f:41:a5:26:18:a3:c5:0a:56:a6:1f:c4:ac:0f:f0:9c:
         a5:90:ab:cc:3e:de:ff:e9:7f:1e:b3:98:ce:0a:3d:61:7f:86:
         31:b4:20:f6:f8:4c:ac:eb:cd:54:17:d3:7c:cb:67:4b:c6:73:
         f3:26:6f:47:ab:79:f6:e3:49:bd:13:88:79:2b:a2:72:3e:0f:
         dc:96:e2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:56 2025 by rpki-client on console-fra.rpki-client.org