Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
File:                     mAPED3e8iPryCfMdNh67q1yurEo.mft (raw, json)
Hash identifier:          jaX0zyX8SbtGv1b/ti1XwbXESJL9MbXgRKYHyRX4WXM=
Subject key identifier:   B0:40:C0:11:C5:F0:1F:10:D5:10:29:73:74:02:B1:B8:2F:AE:BB:A6
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Certificate issuer:       /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial:       0194BB291F5F566F00D5B914B8B9A01C5D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 07:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:21 +0000
Files and hashes:         1: FofuUHCsYy2TWoAryzf8NlyduYw.roa (hash: R69ugPfWWsxLjShfG0VPEFk8EHkq5i3Md6nRP/x8COw=)
                          2: Myk-x7JFGZ-QD7gv9P00RV0PvjI.roa (hash: 328xxf9QZGGg7m61rWRIeZ1jEsvvk0/kuvlftHSPZ8o=)
                          3: TjOWAn9m61FkB31GdiLBvzbAI7U.roa (hash: aG8sOh3CvIOag2ln0Tel0Fs9xc2JzXQ51lpXRk6Hp0I=)
                          4: mAPED3e8iPryCfMdNh67q1yurEo.crl (hash: 9WSMIZJwz3mZmHexPVwaJjzJoO4CfIKdyLP6SVbKKbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:1f:5f:56:6f:00:d5:b9:14:b8:b9:a0:1c:5d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
        Validity
            Not Before: Jan 31 07:00:21 2025 GMT
            Not After : Feb  1 07:00:21 2025 GMT
        Subject: CN=b040c011c5f01f10d51029737402b1b82faebba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:92:c5:c7:f9:c1:83:61:64:59:f6:6e:4b:77:
                    74:ca:d9:62:98:ff:b0:2e:c7:26:ce:9a:c1:33:fd:
                    2c:df:6f:49:d7:a6:24:3c:61:53:6a:17:8a:99:2c:
                    a7:be:b4:02:5e:1f:66:1d:63:3b:94:4f:96:0f:63:
                    92:ec:12:e4:59:44:ae:5e:36:6e:20:5b:4a:64:14:
                    38:36:f0:73:21:2d:fe:e1:b9:53:3e:de:1f:4f:7b:
                    98:9f:30:62:28:cb:67:a3:93:af:e3:c7:34:7f:bf:
                    25:68:e8:84:94:ae:9e:8b:57:6c:35:28:48:85:29:
                    ab:79:6c:73:88:51:47:e1:02:bd:cb:7e:82:41:bf:
                    83:97:05:7c:9c:bb:aa:4f:8e:a6:f0:c1:5c:67:33:
                    b0:ca:bd:d2:8c:03:92:e7:0f:d6:8f:15:aa:2b:4e:
                    ed:dd:bc:05:2b:db:bd:50:87:12:fd:d5:a6:6b:eb:
                    fa:6c:b4:b4:7b:dd:5f:8c:43:32:f8:4d:1a:ec:d2:
                    fe:46:9d:ad:6e:ac:f9:8b:5e:df:da:98:03:02:24:
                    a1:b7:43:79:fd:1e:98:a2:da:b1:b1:7d:68:e8:fe:
                    45:b0:f4:4a:b2:af:7f:92:bd:02:43:6c:ad:dc:d1:
                    fd:f2:e2:fb:7a:8d:25:85:2e:a1:6a:4d:8f:b4:70:
                    ce:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:40:C0:11:C5:F0:1F:10:D5:10:29:73:74:02:B1:B8:2F:AE:BB:A6
            X509v3 Authority Key Identifier:
                keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a9:4c:af:48:ee:2d:e6:e9:94:78:34:d3:7e:6c:ab:a6:f1:
         2c:45:e8:0f:82:41:f5:37:89:46:e5:e9:c9:89:e5:8b:cf:42:
         b9:bd:02:a5:ec:97:e7:33:31:1c:e2:85:a0:0b:7d:81:7d:92:
         01:5e:ce:77:cd:20:74:41:ae:f0:32:15:d1:09:fb:05:96:88:
         71:4f:7d:91:66:ae:d2:37:6d:d2:aa:c3:08:8d:36:73:31:26:
         55:2c:78:a6:61:13:ac:a6:14:58:a2:c2:1e:fd:13:01:f2:9e:
         7c:34:e4:bc:50:9c:f1:1d:cf:4f:39:8e:54:f0:67:aa:4d:13:
         88:f5:b0:fe:75:fc:b9:58:52:da:d0:42:4a:37:33:68:ca:c5:
         5d:91:5a:f0:d0:a4:5f:87:13:23:6b:b3:87:43:a5:25:28:d8:
         35:2d:17:23:a3:79:7c:58:8a:f0:71:e2:99:0d:7e:b0:c2:83:
         c1:d3:37:24:43:b8:c5:43:27:08:6a:eb:fc:42:0c:c0:19:9b:
         19:62:a1:7a:59:89:2f:de:ec:69:89:b1:ed:35:11:e1:37:c8:
         bc:31:92:b1:6a:2e:f6:e5:55:c5:44:58:7d:f6:f1:42:fe:38:
         05:04:9e:90:23:16:8b:ba:5c:57:ea:85:61:bb:ea:63:73:9e:
         af:4f:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:12 2025 by rpki-client on console-fra.rpki-client.org