
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
File:                     G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json)
Hash identifier:          fwsa+otPIL58bAZFrxQnRY89RohACHXBk4bgC8Wdnmk=
Subject key identifier:   F5:C1:51:DA:6C:25:6A:62:0C:BC:D2:6A:FF:4D:F7:01:A2:1B:9B:43
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Certificate issuer:       /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial:       0194BB294CDC8982AE87089C8FE48EB904D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
Manifest number:          094D
Signing time:             Fri 31 Jan 2025 07:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:33 +0000
Files and hashes:         1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: ITUvoyAoBkfRH48zsrcBAILIe1/uFNThqH3jpPsRRqw=)
                          2: f9_4yHGEiJhxZligkSR6T3R3EKU.roa (hash: zpcNNRByx6ZecO+EUAONqKSkYOomMoB7CmsUhShj7mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:33 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:4c:dc:89:82:ae:87:08:9c:8f:e4:8e:b9:04:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
        Validity
            Not Before: Jan 31 07:00:33 2025 GMT
            Not After : Feb  1 07:00:33 2025 GMT
        Subject: CN=f5c151da6c256a620cbcd26aff4df701a21b9b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:59:60:e3:85:6e:25:4e:cc:c9:59:54:aa:
                    4f:8b:8e:ad:34:00:2e:4a:ab:64:18:5e:00:47:4d:
                    81:c6:e2:79:7b:4c:01:72:4d:68:c4:ea:4c:bc:b2:
                    39:95:36:de:7c:ae:18:6f:32:11:7e:68:8a:fe:52:
                    2e:6f:87:e6:5d:f1:44:0b:cb:26:9b:d8:a3:14:d8:
                    11:6d:76:da:38:5e:4b:03:09:0c:3f:68:20:ee:78:
                    4c:99:5e:0a:09:40:83:c6:50:2c:a8:fc:31:af:73:
                    a7:d0:75:59:81:fe:ca:79:66:10:21:5a:0d:87:1a:
                    14:9d:ae:65:08:65:38:01:69:ba:26:6a:d1:fc:c8:
                    a1:63:3c:11:86:be:3a:53:b2:fe:a4:ed:c3:f2:da:
                    98:55:c7:c1:85:de:aa:5c:5e:e5:36:42:7b:66:6c:
                    49:e8:1e:45:42:a3:a5:d7:ec:9a:40:93:4c:e2:23:
                    8a:8b:5b:dc:04:57:56:e9:be:8b:44:73:3b:ea:ce:
                    6a:a0:7f:87:e9:bc:b7:6d:82:19:5c:04:38:a5:76:
                    ba:a4:7a:00:3f:8e:91:e4:59:23:bc:52:32:07:0e:
                    76:c7:9d:0b:ec:bb:53:99:cf:d4:5b:0f:12:e8:a1:
                    12:a3:66:04:b6:72:4e:49:80:fc:91:11:ed:ed:26:
                    e7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C1:51:DA:6C:25:6A:62:0C:BC:D2:6A:FF:4D:F7:01:A2:1B:9B:43
            X509v3 Authority Key Identifier:
                keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         21:67:ce:28:77:4a:c0:65:91:d2:3e:ee:05:af:3c:44:a6:ec:
         69:de:11:84:a4:b7:1b:43:23:48:4e:db:89:cb:b1:de:99:bf:
         6d:b2:de:d6:6e:80:2c:c2:c6:5c:f0:8c:9d:28:5b:8f:5b:a7:
         bc:5b:8d:c8:64:bf:7a:56:21:c3:ed:72:68:1f:8b:22:28:9a:
         1a:4c:c3:46:7a:b3:32:15:46:c7:4d:63:d7:1e:76:8c:95:c1:
         02:26:99:70:c4:1e:77:61:4e:23:b0:9e:e6:07:13:07:5a:45:
         27:d3:16:d9:4b:59:1e:ad:fd:09:6d:3c:a2:9f:2d:5e:bc:8e:
         dc:39:17:30:a8:0e:aa:25:db:72:fe:bc:f9:ce:ed:4b:58:90:
         0c:7c:50:39:77:9f:df:9a:53:e8:36:84:dd:3f:83:8a:c1:53:
         99:14:72:2e:b0:ae:98:35:4e:cb:68:c9:c3:95:10:33:a6:99:
         70:c9:6f:65:80:02:76:f2:81:c4:c3:74:f4:74:37:86:47:f9:
         bd:fa:49:09:71:a5:9a:6d:77:14:c8:29:fa:07:b2:8a:ea:8c:
         38:8e:27:db:4a:b6:06:93:05:f7:88:dc:e5:a3:e7:e5:d7:ba:
         a4:5a:cd:be:f3:ed:22:8f:63:c0:a9:1f:bb:70:06:32:7b:f8:
         5c:b3:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:01 2025 by rpki-client on console-fra.rpki-client.org