Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
File:                     BLHnVu2xw70vV2afWCv2qVG4P0g.mft (raw, json)
Hash identifier:          ce3ad3O/NbumSSUWoqKYy3PMoefy6Cpma8NG5ulg1Pc=
Subject key identifier:   19:8C:30:B7:F4:29:F5:B2:A8:9B:C6:A2:16:50:C5:64:65:28:51:DF
Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
Certificate issuer:       /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Certificate serial:       0194BB974571BFBB2D30F2501D3352C8D50F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 09:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:40 +0000
Files and hashes:         1: BLHnVu2xw70vV2afWCv2qVG4P0g.crl (hash: BBUWpmy9aUFW2K9w9Y6R+/66BWSjtcKV5RviALpX8Lw=)
                          2: RK9xACY5XxzSQaeBbJjDwmPGdFw.roa (hash: Z9/aIdSLDIxdeAqdfXn6u/SeZl9dpZ2YPR093LrIQCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:45:71:bf:bb:2d:30:f2:50:1d:33:52:c8:d5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
        Validity
            Not Before: Jan 31 09:00:40 2025 GMT
            Not After : Feb  1 09:00:40 2025 GMT
        Subject: CN=198c30b7f429f5b2a89bc6a21650c564652851df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:2a:21:86:30:f3:ec:c1:0c:68:bc:04:a7:
                    29:75:49:2b:24:1a:52:ba:03:61:bd:18:f7:f9:be:
                    be:71:00:0f:1f:8f:ac:f7:21:d2:85:45:f2:d1:e4:
                    1b:eb:ce:75:9e:7d:a7:6c:ee:3f:98:d1:f7:b3:26:
                    1a:d7:4b:78:f3:ba:b3:c0:8e:70:1e:2c:60:8d:9d:
                    76:5b:6a:72:3f:b2:d3:64:ba:12:1f:8b:b6:a7:58:
                    91:81:59:63:c8:a9:2f:e9:9b:a2:c6:61:88:b9:fc:
                    0e:2a:6a:27:f1:6b:e0:be:61:95:ec:6c:8a:fe:a8:
                    7b:25:9b:b3:27:a2:49:a0:3e:e7:64:32:32:02:c1:
                    de:4a:20:53:5f:19:39:72:10:3d:49:5e:56:39:9f:
                    1f:81:40:b1:a4:c9:6e:84:22:74:c3:f6:31:8f:0b:
                    ec:fe:f5:c1:fa:5f:f2:51:ad:17:f6:db:32:f7:c7:
                    ea:27:b6:c8:e2:a6:b4:fb:4c:c9:8e:47:5b:2a:15:
                    d3:cd:86:0f:6a:9a:fd:f7:a8:9c:e6:5b:10:df:d6:
                    cc:4b:90:ad:41:4c:81:d5:71:cd:81:63:3a:b9:c8:
                    ed:0c:32:64:9d:ed:e8:30:35:f9:a7:d7:0f:c2:a5:
                    b8:c2:ba:e8:bb:f5:0b:b5:fe:7e:8a:3c:30:49:60:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8C:30:B7:F4:29:F5:B2:A8:9B:C6:A2:16:50:C5:64:65:28:51:DF
            X509v3 Authority Key Identifier:
                keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0f:57:2d:73:62:e1:24:25:e5:b7:4d:ec:7b:17:71:a9:b8:
         d4:52:6c:3f:af:19:d3:60:e3:05:69:84:a7:1d:52:03:b4:48:
         7d:72:d1:64:42:66:a1:a3:b6:d5:a5:73:c2:9c:8d:c6:8f:f2:
         4a:8c:9d:08:c7:45:31:53:7f:fb:f6:23:08:8d:0b:34:b4:04:
         ac:b4:3c:5a:6b:63:2d:fd:2d:ea:d9:53:d9:ad:18:1f:4f:4a:
         a2:87:4e:81:88:f6:d9:90:01:bd:b7:92:20:3c:d7:0b:f2:60:
         d1:a7:d4:8b:08:f5:74:10:5c:49:b4:65:cb:6e:36:6c:cf:aa:
         b1:52:bc:9a:5e:a0:df:cc:1c:56:d1:5c:92:13:da:71:9f:d7:
         11:fe:f9:6e:67:59:17:5f:56:e5:29:b3:0f:ee:c8:21:45:e9:
         11:e6:d0:8c:fd:b3:c1:04:f8:bf:12:9d:0b:ce:c6:cd:40:da:
         7b:bb:c3:b7:c4:ae:2c:1d:f5:f4:c3:70:ee:af:05:4a:79:97:
         8f:fc:fe:3f:ff:d1:c6:68:3d:0f:f6:e7:3a:05:98:99:ff:d3:
         d9:f6:6f:be:d0:81:39:21:68:87:d4:5c:8f:53:82:a8:c0:20:
         c9:97:0d:1e:67:32:7d:17:3e:bd:e9:28:44:15:ef:e0:b7:19:
         cb:af:d6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:05 2025 by rpki-client on console-fra.rpki-client.org