Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
File:                     2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft (raw, json)
Hash identifier:          hedFdZhLkpK8/XjsajdNXYqwyqVI3AlWNMIn8yGXxis=
Subject key identifier:   06:04:FE:93:20:13:21:C3:D4:19:E6:83:5D:0C:90:19:0A:9B:B1:93
Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
Certificate issuer:       /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Certificate serial:       0194BB9727AF01BB90547C13BBA5ABBF58BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
Manifest number:          0D52
Signing time:             Fri 31 Jan 2025 09:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:32 +0000
Files and hashes:         1: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl (hash: /a0f4qXVjJzgh1gzvKk9LdGGm3cYHfEbxK9VFZMQOFM=)
                          2: _wOAzM_uG9ZKvF1XTUYbhv67nVM.roa (hash: YsJJfaahevvQpOkAYhPhhrTQuZpLLWZxUc8rH3J04no=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:27:af:01:bb:90:54:7c:13:bb:a5:ab:bf:58:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
        Validity
            Not Before: Jan 31 09:00:32 2025 GMT
            Not After : Feb  1 09:00:32 2025 GMT
        Subject: CN=0604fe93201321c3d419e6835d0c90190a9bb193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:aa:bd:f8:3d:b2:a0:31:dc:52:61:16:77:
                    0d:bd:fa:3d:80:c0:2e:61:7c:3e:43:0e:b2:8b:70:
                    cb:4a:0a:66:8b:17:c6:48:de:f3:c1:fa:68:dd:74:
                    b0:60:30:eb:1b:b9:7a:e2:c8:b2:63:95:73:99:8c:
                    ae:a3:a1:be:b3:f3:cb:69:f0:8d:be:a2:5f:70:e2:
                    de:3b:1e:86:c6:8d:46:c7:af:e1:15:17:ae:88:7f:
                    f9:a0:9b:bf:70:82:82:7f:65:d5:c8:9d:c1:af:bd:
                    9d:ef:ac:3c:f7:4f:d1:fc:ca:d8:ec:6e:cb:88:32:
                    1c:44:1c:bf:a2:68:b8:11:ce:3f:c7:46:26:eb:b0:
                    d3:ba:cb:f4:04:b0:e6:f6:53:f2:5f:23:69:12:d0:
                    28:fc:c7:3c:bd:b5:cb:4a:98:a0:5e:b7:6d:50:a1:
                    ac:31:8b:c8:54:bb:2f:cd:73:83:a2:96:32:3e:7e:
                    aa:40:c5:41:f4:e3:83:af:16:18:00:24:23:11:63:
                    4b:a6:51:41:b5:58:27:2e:8f:e3:56:a0:ae:64:87:
                    4d:bd:29:c2:e1:14:30:62:66:3a:3a:31:17:1e:9f:
                    ec:26:99:7e:8b:e6:ff:63:85:63:0d:71:86:7d:60:
                    9f:34:bb:33:73:75:03:ee:5b:c6:4f:3f:80:8b:03:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:04:FE:93:20:13:21:C3:D4:19:E6:83:5D:0C:90:19:0A:9B:B1:93
            X509v3 Authority Key Identifier:
                keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:52:c2:c9:3c:4d:f0:08:0c:5d:52:73:a5:08:c2:5a:62:04:
         0d:2f:88:16:21:45:8f:36:bc:e8:57:1f:3a:65:ce:37:4c:98:
         81:e7:05:c3:f2:99:79:77:1e:22:13:8e:92:09:d5:29:94:f1:
         a6:c3:9d:d8:7c:de:92:72:6a:d6:f6:34:c3:d7:b5:9f:88:dc:
         a8:d6:d0:65:5a:74:11:90:c0:c5:88:5b:5e:72:a8:15:06:84:
         23:b1:95:18:c5:a9:92:39:03:52:c1:c5:d0:b4:43:23:14:c7:
         ce:d8:e2:75:07:1e:05:f1:de:a7:f0:cb:5c:dc:e6:ba:21:0d:
         ad:ae:f4:a6:06:10:56:3e:99:ad:9c:47:07:7c:47:cd:55:6a:
         89:24:2b:4f:f6:b3:0b:1c:14:2f:69:21:4a:2f:60:90:05:96:
         ff:ef:c3:1b:1a:b2:98:35:0b:46:e3:fd:ad:05:38:f5:c1:0b:
         10:d2:53:9c:b9:90:6f:9b:f1:83:4e:c5:87:3a:b2:b1:c4:3a:
         0a:39:7b:b2:b6:42:01:59:90:d5:22:ef:c1:06:3f:47:ae:74:
         d8:02:a6:68:16:fe:57:99:d6:59:de:96:45:af:78:de:83:bf:
         70:ac:f4:83:ed:06:5e:7f:81:4e:a4:a4:5d:98:7b:a4:40:36:
         b4:67:85:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:51 2025 by rpki-client on console-fra.rpki-client.org