
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File:                     Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier:          GzGpV35XwoBIzP67rDR+ZbvTfspGtjtoUP9/j2KWf3w=
Subject key identifier:   DA:EF:F1:F5:72:4A:E2:C4:66:CF:18:2F:09:EA:16:73:B1:2E:49:32
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer:       /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial:       0194BA84929A6B27CF205B01BAAB8AC850C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number:          0CD2
Signing time:             Fri 31 Jan 2025 04:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:37 +0000
Files and hashes:         1: 6b7kBGmYZLhc9LKzN0zK6QfVRJI.roa (hash: Zx9aCYyscJGyVME/qhIE4KO8zEZC10I5Gx1MaCntTPk=)
                          2: 9h-8iHFf4wOmtCi8sb1JQBZuZqQ.roa (hash: exzFMu4zDpKXPU4eL1lGyDxeGEPeQKinq99RDRGcm/0=)
                          3: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: V0sZ/bC5Y5f03eDPolE6ZkkXumpd5x2h78X2sEbOC+E=)
                          4: nEjiJB0-mMQQFPly2WwOZs3c7-g.roa (hash: h3cZJSMuoJivO2hCuquZpiVDcLYaby3om3eBFcGBGrw=)
                          5: oAQbc7e5xC1GEdxN3e0gpd6isJc.roa (hash: EpNAPaM5v5pIwKbv54j32anzeSgMzbAB4ScT24Zr/1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:37 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:92:9a:6b:27:cf:20:5b:01:ba:ab:8a:c8:50:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
        Validity
            Not Before: Jan 31 04:00:37 2025 GMT
            Not After : Feb  1 04:00:37 2025 GMT
        Subject: CN=daeff1f5724ae2c466cf182f09ea1673b12e4932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:5e:2c:1b:d9:a9:01:19:c2:64:30:aa:0c:
                    0f:72:ea:da:ef:da:1d:39:e3:93:e9:ad:4b:9f:d4:
                    96:4a:6a:74:6b:9c:fa:d7:e2:f8:45:67:e5:86:a1:
                    4f:91:d9:75:e2:5f:62:e0:6f:77:85:35:c6:cb:a9:
                    30:27:da:02:7f:24:4f:22:5e:fb:c5:e9:65:91:e4:
                    b2:eb:9a:20:79:67:54:8b:93:90:20:eb:23:de:39:
                    25:19:fd:0b:d3:9c:a3:e3:42:89:1f:a3:ea:e3:df:
                    bf:77:e0:3a:eb:2b:a8:e9:cd:23:33:73:20:65:a2:
                    37:f9:96:89:85:e8:3f:55:e3:97:bb:8a:dc:f0:18:
                    fb:c8:a1:e7:fc:60:d0:23:f8:8d:fe:56:15:32:d6:
                    d2:8d:a5:3e:fa:18:17:20:5c:b6:89:78:64:1e:3a:
                    5c:73:58:53:ea:64:e5:65:97:d2:f9:22:e7:3f:0b:
                    70:13:ca:94:26:46:cf:6d:91:ef:8d:f7:ca:90:3f:
                    4b:1a:4d:8d:d1:1c:d5:eb:ae:3a:34:0a:44:cf:6a:
                    19:20:5e:91:66:c9:eb:58:42:e9:75:98:a6:a9:78:
                    d3:d6:a1:0f:d4:51:fc:77:a5:e0:69:a1:3e:ee:cc:
                    9d:8c:38:1b:ae:eb:1c:73:f3:50:f4:ab:5d:e1:58:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EF:F1:F5:72:4A:E2:C4:66:CF:18:2F:09:EA:16:73:B1:2E:49:32
            X509v3 Authority Key Identifier:
                keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         5f:21:78:27:ef:13:50:8c:cb:04:75:e3:71:7a:ef:08:44:17:
         5d:81:0f:73:f0:cd:6e:a3:89:94:53:4e:0f:db:af:aa:0d:94:
         52:c8:ae:4d:87:ca:c8:f1:22:5b:7a:8c:0f:66:cd:0e:89:39:
         92:d4:c9:b3:4b:ff:53:42:18:d0:8a:47:b6:0f:93:63:9d:eb:
         b1:71:d1:cc:64:39:df:a8:91:ae:06:00:e6:7a:c2:09:2d:3d:
         67:c6:f4:d8:66:dd:59:25:e9:fd:3f:c1:29:c9:80:85:41:f2:
         3d:b9:b3:9c:9c:c8:d0:39:c5:5c:14:44:a9:7d:11:dd:36:07:
         4e:42:1e:13:b0:37:1a:59:6f:66:08:57:cb:64:e1:ac:99:1b:
         e8:c4:1c:ce:ba:03:5c:36:8e:f3:d2:f0:2f:54:51:5f:38:9f:
         d2:c4:2b:8f:ca:90:90:4a:bb:b4:d9:21:5a:1c:0f:6c:81:92:
         94:f1:11:6f:48:3b:c0:b1:74:c8:bf:31:a3:b5:0b:06:fa:f0:
         51:a4:65:67:b3:90:83:e5:e5:af:dd:70:c5:41:a3:61:ae:be:
         dd:b1:e9:e3:fd:23:4a:54:98:89:41:28:e9:2d:a9:f6:2e:cd:
         a1:46:14:f8:99:a4:60:09:a9:00:90:7a:21:2f:6a:7e:2b:ec:
         74:03:71:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:24 2025 by rpki-client on console-fra.rpki-client.org