
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File:                     sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier:          npGeozMV0A4Wqf2D2040SUpbqEtVIB5dq0/MzMU2bDI=
Subject key identifier:   BA:D7:93:FA:BE:A0:65:7F:22:EA:1E:E5:D7:98:20:10:C4:A5:D9:B5
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer:       /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial:       0194BABBA05EDB7013D3BBCBF94A18BA482D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 05:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:45 +0000
Files and hashes:         1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
                          2: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: 6V7anfyfG/CeDcP4CqLCb31KjVISQlcAQhit3l2oH48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:45 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:a0:5e:db:70:13:d3:bb:cb:f9:4a:18:ba:48:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
        Validity
            Not Before: Jan 31 05:00:45 2025 GMT
            Not After : Feb  1 05:00:45 2025 GMT
        Subject: CN=bad793fabea0657f22ea1ee5d7982010c4a5d9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:0e:f2:9e:60:85:e7:e2:35:89:6c:29:09:
                    a7:c1:10:44:9a:cf:cd:cc:25:e4:f9:e0:36:28:00:
                    a3:db:4e:1f:3a:f1:e7:87:62:7c:e4:72:25:71:be:
                    31:c7:03:a5:04:db:25:a7:3b:e9:88:a3:41:f7:9e:
                    1f:dd:44:39:5e:73:1a:61:1a:40:bf:d1:09:9f:03:
                    94:0c:ca:d2:ae:30:c6:c7:45:0c:e1:8c:b6:dc:fd:
                    d3:ec:5e:40:6a:6b:3a:35:d9:52:75:5b:92:f3:c4:
                    dc:77:49:c4:12:9d:a2:36:8b:13:b7:13:90:72:df:
                    c0:86:bd:b5:45:ac:04:bf:1f:c8:ef:0c:c4:a8:81:
                    fb:13:12:cf:2f:5d:2e:d4:4c:d3:2a:2a:e7:63:79:
                    1f:df:9c:11:f1:5b:7f:54:04:f7:00:b8:ef:cf:91:
                    1c:16:22:3f:1d:e2:6b:2b:f7:5c:b6:ab:90:69:9d:
                    02:e1:51:cb:d8:5b:42:79:bd:0d:5f:37:fd:46:fe:
                    cc:f3:10:16:ee:db:34:bf:de:5e:be:da:a8:9a:b5:
                    6b:27:db:00:2e:79:f9:f5:0d:ee:6a:c2:4a:b3:a9:
                    4b:88:73:14:12:6a:42:c7:68:00:20:c8:56:38:bc:
                    7b:ff:29:d3:14:a7:25:51:43:87:10:9c:6b:fa:92:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D7:93:FA:BE:A0:65:7F:22:EA:1E:E5:D7:98:20:10:C4:A5:D9:B5
            X509v3 Authority Key Identifier:
                keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:df:15:c0:c9:cb:e8:00:47:f9:52:fc:d4:85:27:91:94:
         5c:84:30:9b:a7:30:a7:ab:49:ce:96:a8:5e:ef:0d:11:f1:93:
         84:06:48:51:41:5b:29:4f:74:3e:e6:0d:d3:85:79:26:84:13:
         2b:cc:e8:a6:bf:cb:0b:b1:fb:18:0b:1b:a6:89:98:52:51:de:
         89:c5:53:d4:dd:2e:07:d7:4d:a8:64:fe:a7:51:bc:15:ed:6b:
         83:0d:fa:60:69:75:2d:7b:85:a3:42:17:06:8d:40:25:fb:9a:
         8c:6d:37:2a:51:5a:1c:cc:b2:42:89:26:ac:20:8c:09:7c:10:
         cb:ed:4f:71:82:44:dc:c5:9d:5d:bc:4f:e0:e0:c7:c2:8f:d8:
         29:48:09:4a:38:f2:e9:b5:da:d3:84:4f:41:54:99:c8:97:cb:
         f7:a4:41:1f:18:ba:c8:a7:49:22:3d:f8:25:4e:5c:de:cb:05:
         97:9e:9f:5c:5b:11:1e:50:53:02:b0:85:ed:ff:4c:6f:e7:a2:
         87:fd:78:a7:d7:f0:54:93:63:44:e2:38:ef:42:ba:11:f8:53:
         52:81:47:d1:8c:c6:64:c4:eb:97:6d:57:26:40:10:d3:2f:c2:
         82:07:5e:b2:e9:57:4b:99:46:87:f9:4b:6c:5e:4b:83:25:79:
         03:1e:fa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:51 2025 by rpki-client on console-fra.rpki-client.org