
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
File:                     pLZdoXU_tO7tuG_ah906-mnYYtA.mft (raw, json)
Hash identifier:          tyZAewWqiTBzLW3acHajnIUGcllI3QF8DlXFlbo7RMs=
Subject key identifier:   AA:EF:96:11:EB:AF:62:BF:CC:DD:A6:37:8F:F0:48:07:19:E9:82:95
Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
Certificate issuer:       /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Certificate serial:       0194BB973F8C1ED1BAA5961AF4D6EFCC1876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
Manifest number:          07A4
Signing time:             Fri 31 Jan 2025 09:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:38 +0000
Files and hashes:         1: 9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa (hash: wQrCWKGL3Sn9wGoFnk6i9VJ1UdYXoGTZv1+i2lw0LfY=)
                          2: pLZdoXU_tO7tuG_ah906-mnYYtA.crl (hash: O2UVYuLSPJ6saepaYkoknRckJKl7RtMP1MJwr5gO3ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:38 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:3f:8c:1e:d1:ba:a5:96:1a:f4:d6:ef:cc:18:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
        Validity
            Not Before: Jan 31 09:00:38 2025 GMT
            Not After : Feb  1 09:00:38 2025 GMT
        Subject: CN=aaef9611ebaf62bfccdda6378ff0480719e98295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:6e:a7:3f:86:47:29:38:43:a1:65:82:73:
                    35:3e:cc:d5:d5:cc:6d:ea:dd:99:e3:88:3e:58:a4:
                    97:0b:13:90:8d:c4:95:f6:d6:72:10:98:77:a0:3e:
                    d0:1d:bb:38:c1:d1:91:a7:13:58:9a:f7:b2:f4:56:
                    c7:9d:b5:4b:9a:fe:11:01:c3:76:38:b1:88:da:ba:
                    47:79:ba:6f:8f:a8:95:48:3f:77:71:5d:8d:76:9b:
                    3b:c7:0e:17:28:56:a6:9e:a0:88:47:5e:df:44:c3:
                    26:ab:33:72:35:43:31:5b:81:c1:c1:41:c6:9b:78:
                    a5:1b:cf:84:4e:b5:68:6e:a1:0a:42:80:0a:5f:37:
                    72:0f:75:38:4e:19:b0:0a:a6:06:47:2c:34:58:52:
                    7c:0d:59:bf:80:69:da:b9:0a:e7:12:05:f7:fb:e2:
                    d7:11:72:8b:cb:b6:de:38:f0:c4:37:1f:14:3e:65:
                    47:fc:56:05:d3:c9:3e:8c:24:31:22:62:32:47:7a:
                    00:46:2b:77:28:af:82:d6:81:c7:50:b2:c9:ff:78:
                    2f:6f:b0:ea:c4:1f:8b:da:53:02:a9:a6:d3:4e:9e:
                    2c:c3:39:72:00:53:43:c1:3d:d8:ab:ca:7f:80:93:
                    bc:40:46:5a:d9:35:a2:a8:d0:86:ed:02:ac:b1:cd:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EF:96:11:EB:AF:62:BF:CC:DD:A6:37:8F:F0:48:07:19:E9:82:95
            X509v3 Authority Key Identifier:
                keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         5d:5d:a8:33:63:ba:1d:64:96:c9:8a:3a:5b:db:27:f5:c4:0e:
         bb:54:5e:32:01:c1:90:fd:a3:98:9c:40:7d:d6:bb:1d:a1:02:
         17:09:2b:c8:10:62:43:73:43:e0:38:37:41:84:6d:f3:a6:8c:
         15:0f:ab:a1:d3:2f:2f:bf:a0:f5:e0:68:13:92:0f:ba:d4:96:
         aa:1c:ec:35:d4:1c:a7:6a:b2:ce:1e:04:0a:81:00:84:a8:62:
         81:8a:d5:94:a2:77:51:5a:02:f3:cf:54:da:9d:bf:79:a1:65:
         b8:80:f3:e1:2e:21:95:c5:9d:a2:1d:4b:85:99:d6:8f:57:7e:
         01:97:bf:db:56:0c:fd:71:33:87:74:9f:f9:6f:c3:6a:d4:23:
         06:85:76:f7:f5:49:14:e9:49:25:88:46:2f:68:0f:d3:1e:28:
         13:58:96:9a:3f:d3:ce:a2:4f:b0:76:87:d6:88:18:10:7f:ca:
         df:ec:4c:6d:7c:8b:99:af:ba:4b:fd:6d:61:8d:b5:48:88:0b:
         c5:45:2f:c2:a5:aa:c9:48:9f:56:46:07:d0:8b:a5:01:6c:f2:
         b1:54:3e:96:59:cf:a4:29:fd:58:5f:1e:66:85:af:e7:20:67:
         8b:cf:5a:3e:bf:e7:1b:d6:0b:63:93:d0:78:3d:3b:51:7a:34:
         e4:13:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:21 2025 by rpki-client on console-fra.rpki-client.org