
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
File:                     l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft (raw, json)
Hash identifier:          GwjAyKQZxMhGWRvaKWOvSUy3gHVp78PNQRn01/OSpyU=
Subject key identifier:   CF:B9:EA:9F:1F:36:5D:CF:23:BA:5D:FC:D2:9B:AD:27:ED:E8:7D:E3
Authority key identifier: 97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
Certificate issuer:       /CN=978f41e290285473c2a1e2be7f66f63452ed4644
Certificate serial:       0194BB97042F7ADE27E91DD2930C288C43F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
Manifest number:          135E
Signing time:             Fri 31 Jan 2025 09:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:23 +0000
Files and hashes:         1: 3FnVY4sBG3BUNdCMlG69JrkCRk4.roa (hash: xbgs2co1eheJ2l8YrvPyfXeU2aKPVWbDIStArstZGzA=)
                          2: l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl (hash: GBfjG0OhwfQNp4O4ht8WmvMxxuFOYztS5nGqX4GvD78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:23 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:04:2f:7a:de:27:e9:1d:d2:93:0c:28:8c:43:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978f41e290285473c2a1e2be7f66f63452ed4644
        Validity
            Not Before: Jan 31 09:00:23 2025 GMT
            Not After : Feb  1 09:00:23 2025 GMT
        Subject: CN=cfb9ea9f1f365dcf23ba5dfcd29bad27ede87de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:87:78:8e:fe:77:e9:52:af:7b:45:08:2f:
                    fd:f8:7b:c3:07:54:c5:30:40:bb:66:41:67:24:37:
                    09:47:f5:5c:25:0c:8c:a7:89:5a:d5:18:a4:9f:f9:
                    ae:84:a5:5c:4b:bd:05:d2:6f:5e:d7:12:8e:67:8c:
                    de:4f:70:63:da:45:e5:16:b6:64:79:23:9e:eb:46:
                    7a:24:b1:f6:8f:47:40:ff:6b:b7:b8:60:7a:7c:d4:
                    62:42:73:45:8b:72:bf:0b:9c:cc:98:2c:96:2b:98:
                    dd:eb:55:f3:4c:ce:ed:84:d3:81:c9:2c:5f:55:8e:
                    31:13:75:73:88:48:00:c9:e1:98:e1:a4:c3:3f:4e:
                    ce:05:02:e4:8a:40:01:db:6e:9d:f2:91:04:af:f8:
                    f7:fa:11:fd:45:08:d2:51:a5:21:47:bb:1f:2b:83:
                    a3:84:d5:0e:6a:87:a5:11:e0:8f:e8:94:b1:94:06:
                    c5:04:91:3d:64:d1:51:64:4b:86:ac:1a:d5:5c:06:
                    d1:13:c0:67:d9:90:0a:f9:56:40:4b:6c:0b:40:68:
                    57:06:16:3e:cf:99:08:20:66:a6:87:b6:25:61:7a:
                    5e:61:b5:e9:ac:0b:10:c5:fe:db:5c:77:5c:7b:9b:
                    86:50:6d:05:d0:e8:92:61:ba:cc:3f:e7:7d:ac:b1:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B9:EA:9F:1F:36:5D:CF:23:BA:5D:FC:D2:9B:AD:27:ED:E8:7D:E3
            X509v3 Authority Key Identifier:
                keyid:97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         66:3b:9f:c3:e4:e9:0f:60:16:15:3b:66:0b:65:f5:f5:47:d1:
         e8:bf:11:ed:d9:69:dc:dc:de:d2:12:e5:52:f9:a1:6e:03:5f:
         a4:4b:b2:c3:2a:7b:c3:3f:c0:c4:e5:2f:f8:a0:88:39:d1:67:
         38:0e:ed:1b:55:fa:3d:6e:7d:9b:2a:3b:07:eb:27:8a:40:b5:
         9e:73:7b:bc:52:88:78:30:48:22:bb:ba:a3:eb:6b:92:27:a8:
         c2:67:c3:0d:d6:1c:e4:b4:7c:f9:3b:8c:6d:70:9f:7c:30:de:
         2d:42:e6:8f:27:29:35:04:82:50:34:c6:40:d9:ea:b5:ca:6a:
         86:2e:a2:1b:90:b5:f3:69:3a:ec:e5:d8:43:8e:37:04:bc:dd:
         59:72:b0:06:56:52:e6:a6:02:0d:c9:1a:b5:8e:e0:aa:76:6b:
         69:e6:d2:da:70:d9:cb:18:1e:10:fc:9b:7b:9c:1e:70:00:fb:
         d0:07:0f:15:a6:da:bf:87:fb:6f:56:90:e9:78:42:9d:df:d9:
         e4:ac:b5:7d:3d:9e:5e:3b:63:30:08:46:12:8b:20:98:24:bb:
         1b:67:a1:51:40:ae:93:bc:4f:d4:45:17:c7:77:c7:2b:af:58:
         17:c7:d8:12:b7:aa:35:a6:48:4a:61:83:ae:6a:30:7f:cb:ce:
         32:d9:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:32 2025 by rpki-client on console-fra.rpki-client.org