Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
File:                     viyseNddsY5zyuA-Gr5Zh0lSkxo.mft (raw, json)
Hash identifier:          Wi4XGAcseXLfnAUQNe2Z2nA5oNC2LolqIwoB+v2uESs=
Subject key identifier:   3F:D3:AF:37:08:DA:0B:11:29:7E:30:79:E0:66:27:7C:53:9C:91:68
Authority key identifier: BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
Certificate issuer:       /CN=be2cac78d75db18e73cae03e1abe59874952931a
Certificate serial:       0194BBCDC95103D63B60AE2B02BE6BCF1F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
Manifest number:          113D
Signing time:             Fri 31 Jan 2025 10:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:13 +0000
Files and hashes:         1: viyseNddsY5zyuA-Gr5Zh0lSkxo.crl (hash: xnDSFdyPOaHiB/E9TggVNysrl7uq+odL6xx7pq6mv6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 10:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:c9:51:03:d6:3b:60:ae:2b:02:be:6b:cf:1f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2cac78d75db18e73cae03e1abe59874952931a
        Validity
            Not Before: Jan 31 10:00:13 2025 GMT
            Not After : Feb  1 10:00:13 2025 GMT
        Subject: CN=3fd3af3708da0b11297e3079e066277c539c9168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fd:b5:22:52:ef:43:0c:ba:4a:10:45:8e:33:
                    24:c1:ff:01:7b:d7:c1:4c:16:04:d3:c9:d5:2c:2b:
                    ba:39:df:19:4d:69:0c:db:9a:89:cc:1a:69:49:99:
                    59:12:11:15:20:67:07:6e:ae:70:f6:3c:ce:e4:92:
                    33:f7:97:8b:b3:f3:a5:cc:d6:eb:af:a2:26:b9:10:
                    d9:8e:e3:98:a4:e6:3c:44:81:f6:a9:c1:c8:c4:72:
                    a3:4e:05:84:8f:93:bc:82:ef:f3:8e:6b:21:c4:11:
                    81:3a:4c:bb:0a:d2:1c:20:ca:0e:47:eb:9c:19:ec:
                    37:2e:f4:b4:72:a4:ba:12:10:c4:c7:74:9d:f3:44:
                    70:f2:4a:49:8d:bb:31:d5:bf:d8:cf:76:03:42:c0:
                    44:ca:6f:f5:08:26:48:48:e0:6f:57:bd:06:c5:88:
                    4c:f8:e8:68:8f:fc:86:66:c0:eb:22:37:0d:45:b8:
                    f9:bb:e7:54:d1:97:1e:2a:4c:a2:00:ec:25:a5:43:
                    41:72:95:15:9c:25:91:f9:3f:1e:e8:96:bb:20:69:
                    c1:2b:64:bb:57:f7:63:91:62:bd:d0:f7:6a:55:a4:
                    5b:e2:d5:fe:e8:8c:f6:80:13:a2:cf:90:d6:f4:0f:
                    6b:22:b7:4a:a1:d9:8d:3c:25:be:b1:d9:f4:21:5f:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D3:AF:37:08:DA:0B:11:29:7E:30:79:E0:66:27:7C:53:9C:91:68
            X509v3 Authority Key Identifier:
                keyid:BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0a:12:65:0c:8e:68:cf:4a:56:5c:9e:02:b4:0e:20:c2:7a:
         2f:34:d0:a1:e1:1d:4a:d2:76:bd:72:6d:ee:17:bd:7d:44:71:
         f0:34:b8:f0:bb:08:42:8b:8b:17:d5:66:b0:9f:f8:78:af:5f:
         68:04:dd:10:4c:de:a2:a9:fb:ce:c7:14:b3:78:d4:89:6d:57:
         26:38:c5:d3:22:64:11:f7:df:96:f1:86:31:63:1c:ec:22:d1:
         6a:c5:72:7a:58:30:3c:83:e6:b9:ef:70:e4:28:af:00:29:eb:
         c6:29:70:f5:d5:4f:50:bf:66:43:4c:c7:31:2e:53:c1:2b:08:
         3a:28:f4:2d:b7:0f:58:58:73:dc:16:80:39:4f:7e:12:41:e0:
         fc:34:8e:f6:88:7f:da:6c:96:58:3b:b0:1f:45:8f:69:9f:c0:
         98:cd:b8:1a:80:ed:28:0b:a9:44:a6:0b:f0:30:d2:dc:97:70:
         30:90:f7:d9:32:f3:72:d3:64:50:43:64:a3:25:0f:b2:ea:e4:
         4a:b6:be:e0:60:6c:3f:09:eb:c7:d0:79:b9:4c:8f:fb:f2:e1:
         87:7b:53:d8:b7:f7:57:32:27:e4:2f:5f:00:9b:92:83:dc:47:
         ff:48:6c:31:f0:64:8a:c6:98:59:85:57:82:08:aa:00:95:72:
         8b:80:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:46 2025 by rpki-client on console-fra.rpki-client.org