Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File:                     Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier:          PN/vgVgVAylMEj4pumJ7zyMuI8B1Y8+AJ5PXNV6bYns=
Subject key identifier:   38:13:EC:F8:C6:32:DC:D8:FA:41:BB:E6:C6:D3:54:A9:EB:30:05:04
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer:       /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial:       0194BAF25BA988E25CF177C78DB26CBD82A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 06:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:32 +0000
Files and hashes:         1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: KoHgMelR+G+n37yNTTrpp+njr5Nn5zYCEcicJFu6P1g=)
                          2: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (hash: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:5b:a9:88:e2:5c:f1:77:c7:8d:b2:6c:bd:82:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
        Validity
            Not Before: Jan 31 06:00:32 2025 GMT
            Not After : Feb  1 06:00:32 2025 GMT
        Subject: CN=3813ecf8c632dcd8fa41bbe6c6d354a9eb300504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:7a:3a:3d:4a:18:ea:61:74:e7:74:00:ba:
                    36:f2:1d:2a:8e:35:d8:ea:a9:06:c9:d0:55:86:f4:
                    eb:29:25:03:87:e2:94:f7:77:5f:3e:4c:c0:0f:e9:
                    83:02:24:bf:96:bb:77:a8:ca:40:92:22:11:76:87:
                    df:4a:7a:6f:76:7b:93:d4:72:21:b9:44:1e:43:05:
                    10:55:56:a5:ab:16:30:96:e4:d0:f4:ac:a7:1c:fe:
                    3c:6c:ee:ec:1c:cc:7b:d2:54:89:9f:6e:71:e8:c9:
                    66:23:f8:ac:fc:1a:58:0d:dc:2a:f1:1f:90:e6:1c:
                    18:a2:89:a8:ca:f8:f3:2f:94:46:5a:53:95:5e:a4:
                    3b:d9:bc:9b:04:77:0d:85:8e:4f:f0:3d:7d:db:de:
                    74:e7:7e:55:b0:d0:80:7b:39:ea:1d:2e:73:4c:82:
                    ac:93:73:c5:21:16:4a:b9:08:59:79:3f:87:ae:9e:
                    0b:f7:c3:5e:2c:89:a1:98:e7:e2:1c:b9:4c:db:2d:
                    9e:91:6b:7f:85:0d:01:2e:2d:9d:1c:7c:47:54:f9:
                    15:a7:80:fd:fe:68:b9:7d:29:8f:45:f6:ff:a7:82:
                    f2:0f:bd:fc:23:be:0e:d6:98:ee:9d:02:5d:50:e6:
                    cf:d4:67:4f:d8:1c:2e:69:09:26:23:74:c6:b9:9a:
                    ce:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:13:EC:F8:C6:32:DC:D8:FA:41:BB:E6:C6:D3:54:A9:EB:30:05:04
            X509v3 Authority Key Identifier:
                keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:e4:f1:81:82:98:45:4a:21:c6:b9:ce:c9:b0:1d:a1:b9:
         2b:f9:e4:70:f9:d5:46:4b:f4:c6:8c:8c:b3:51:d4:69:ee:52:
         d7:ba:bf:ef:8f:d7:de:4c:38:c4:63:40:77:c7:cd:87:7a:87:
         e9:53:53:3c:81:31:c3:dc:8e:ce:b1:71:26:cf:15:21:54:cd:
         08:25:a3:1b:ea:1c:fd:dd:f3:9d:9e:f0:22:3a:59:49:dd:c2:
         9d:51:2f:18:9a:cc:c2:e1:81:fa:bd:a3:5b:05:c4:ef:72:1d:
         d5:10:2b:de:43:5e:11:0e:67:d9:f8:31:90:71:01:14:9d:f9:
         ca:38:a0:f8:db:f4:f5:3d:54:d0:76:2a:ab:da:d6:a6:21:01:
         82:dc:f5:2c:bc:68:be:76:59:c2:ed:0f:14:a7:d2:df:bb:2a:
         63:2d:fa:5f:18:6b:22:26:f2:fb:7c:62:f2:fb:9f:74:67:f6:
         8f:93:b7:8e:33:96:3a:5b:31:fb:04:bc:41:3a:0f:3f:76:5a:
         64:f2:dc:49:35:4d:25:80:5e:88:42:e1:c8:82:d8:4f:4a:97:
         d3:e0:4f:fa:d7:63:52:92:f3:23:02:05:2c:37:d1:da:d9:ee:
         47:d2:28:6f:e0:7c:29:83:79:11:ab:14:7f:16:81:95:f2:4c:
         eb:1e:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:37 2025 by rpki-client on console-fra.rpki-client.org