
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
File:                     Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json)
Hash identifier:          tIdGwsDJfnvy5QV/bXJcDgZ4ZTqrS7+jx8Dx6LOEaMs=
Subject key identifier:   ED:58:4E:6F:F8:10:6B:AA:BC:7F:81:1D:56:28:5C:21:FA:54:18:E7
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Certificate issuer:       /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial:       0194BABB9063706E6C777E14CC70D6C570A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
Manifest number:          0EE7
Signing time:             Fri 31 Jan 2025 05:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:41 +0000
Files and hashes:         1: 5-ifbkzxAVenbOTh7xnTmSmBRII.roa (hash: FOnnytfJcY5VsaO7IU74ZEnL9Ku9T/H6aGG9jNy1XD4=)
                          2: 8EgilQwuaLeesY5D4MXR98cjsk4.roa (hash: W7fEZRR9vQWc1wZaS6T1JTfiycKOFxnx4jwhxIG0rbQ=)
                          3: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: hHa0SMwZh/UWI9NjnTh8q7GOgP1uzG5wQaIGoDkWQ0M=)
                          4: g_mDeeMiBsxAO1aMYobd6COqAyg.roa (hash: C6OmPgZYFNJO1UnyGDjiycVke0+x3UvPSJ7l7B/PjDY=)
                          5: sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa (hash: Xn9RqjO0Bl5wwfZuCHIFFFBi1M7CLKKfAFqVPviV4cI=)
                          6: x_EubJIedCZLAcQtdIa25nYyDrk.roa (hash: PgJOT+273yMa8SLFUPwyR3K64DEc4yPVquyOKHNI560=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:41 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:90:63:70:6e:6c:77:7e:14:cc:70:d6:c5:70:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
        Validity
            Not Before: Jan 31 05:00:41 2025 GMT
            Not After : Feb  1 05:00:41 2025 GMT
        Subject: CN=ed584e6ff8106baabc7f811d56285c21fa5418e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:b5:05:53:a3:50:fc:af:03:35:33:d0:ce:
                    68:a4:19:e0:c0:46:38:9f:93:40:1e:c7:2a:db:fa:
                    e9:2d:d7:37:98:37:8d:64:4b:ed:f5:45:dc:46:2b:
                    aa:42:1e:e8:9f:be:ec:c0:55:34:56:b3:32:ce:14:
                    aa:25:7c:51:b8:6d:ea:53:f3:97:6b:c3:b1:16:b0:
                    ce:53:52:0d:a6:5c:6a:21:4a:5d:1e:e2:3a:82:96:
                    d1:a1:f9:e2:1c:84:a4:1b:c5:30:0d:c3:76:6b:94:
                    06:a5:6f:cb:60:f3:69:0e:7c:e1:43:2f:da:e2:5d:
                    ea:20:26:85:bb:3f:83:0a:f0:1f:6e:3f:38:7a:45:
                    f5:3a:d8:67:33:0b:ec:67:55:01:8f:fc:49:26:7a:
                    7a:31:e9:b9:78:2c:48:38:de:9a:a6:0c:41:72:60:
                    d3:01:a9:86:43:d3:a9:db:6d:1d:c9:0f:5f:9c:74:
                    89:18:f9:99:14:54:4b:1b:83:ef:50:46:da:99:b0:
                    82:c2:63:d2:ef:0e:b1:23:b5:14:fd:44:13:21:c1:
                    8e:ec:82:02:59:f3:8e:d4:41:39:17:e5:3e:61:f2:
                    f0:13:ba:ff:eb:a2:01:27:09:d3:78:b4:54:d8:ca:
                    da:c7:a6:a9:37:0a:51:88:89:52:60:55:77:98:4e:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:58:4E:6F:F8:10:6B:AA:BC:7F:81:1D:56:28:5C:21:FA:54:18:E7
            X509v3 Authority Key Identifier:
                keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         7c:21:1a:27:19:a6:59:ba:16:63:d5:a3:08:e0:fb:f2:24:e6:
         39:00:76:83:70:69:38:0e:8f:dc:22:4b:b0:60:60:35:58:e8:
         6d:40:95:a8:82:93:6a:51:99:e6:d7:46:1a:79:f4:7e:0b:d0:
         1c:0c:a1:61:cb:23:b5:2e:69:9d:92:00:7e:1e:e8:25:a1:0e:
         ee:ea:c2:e9:22:06:2f:50:be:e7:d9:8b:0d:ba:59:b2:d6:b6:
         6e:ef:53:4c:5e:44:a0:aa:09:eb:51:2a:de:8c:6d:45:fe:d2:
         64:50:c2:9c:89:80:ea:07:ad:16:67:39:d3:19:6c:e9:63:be:
         d8:5b:f8:25:79:77:e8:b6:04:e7:8f:1d:93:91:9c:90:5f:9f:
         c2:53:91:04:59:2b:d2:72:97:c4:55:ef:dd:d1:e0:2c:aa:d5:
         3c:c5:c7:99:37:d2:cf:3e:ca:52:0a:e7:58:88:20:ed:de:96:
         91:d6:74:dd:f2:e2:f8:0f:e0:67:b9:17:a1:bb:1f:84:c3:26:
         d5:9f:8d:9c:b4:1d:d3:0a:de:7e:3e:80:32:1c:1c:b4:2a:d1:
         a2:00:ea:00:7d:42:b4:42:ff:3b:e1:79:7c:db:fc:5b:a2:0e:
         04:d6:19:8d:aa:b3:67:29:f0:6f:e2:1c:6f:ba:ba:fd:2a:34:
         23:ce:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:28 2025 by rpki-client on console-fra.rpki-client.org