
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          wDi+akScicoVpn4XKAue6cHRhF5/PYpms2G/Lhjmjic=
Subject key identifier:   EA:7A:E5:48:3A:C2:3C:D1:58:4C:11:3F:56:D7:D9:7F:8D:B2:EC:C9
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       0194BB603900A1BFADBB4B2230BA6871ADC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          13BD
Signing time:             Fri 31 Jan 2025 08:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:32 +0000
Files and hashes:         1: BUuoPdUgpRssN_8s1xD5RE2knSk.roa (hash: i3w2fhY/oY9rEDtPXwfXHRtgj9nEgJpg1E4G0VvBSNE=)
                          2: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: oQScRcwugs7ugcPUr99pDENKM2YCpXMgJL/khNcVGRo=)
                          3: hI-d9_-nLNRhqznA_vGtUzzzpi4.roa (hash: 1ticuQGef+AQNaEeVWAc8kEXscPJuukVCdQXQ58jy44=)
                          4: yp6VXJ9ttEuEqrWfh1dI64LQkQ8.roa (hash: Mr06/vk6uaXb+ILhJfXZxgC4nSBWLm8yARcjAKzBYPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:32 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:39:00:a1:bf:ad:bb:4b:22:30:ba:68:71:ad:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Jan 31 08:00:32 2025 GMT
            Not After : Feb  1 08:00:32 2025 GMT
        Subject: CN=ea7ae5483ac23cd1584c113f56d7d97f8db2ecc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:23:b7:24:2d:03:85:d8:a9:05:55:34:a7:
                    d4:24:83:20:48:92:ee:36:f5:73:e4:32:03:b7:f5:
                    61:9a:e8:dd:32:1d:dd:52:6b:d1:fe:81:cf:f4:ca:
                    c0:2b:56:73:16:d5:0e:be:30:82:08:4b:54:31:c9:
                    2f:62:92:15:34:77:c7:6c:3a:d9:3f:ca:36:d3:f5:
                    8f:c0:df:e2:7f:88:af:3b:8e:e9:d4:f9:db:07:a0:
                    7d:a0:7e:dc:74:fb:a8:72:e7:cb:78:5c:5b:f5:2d:
                    b6:e5:be:a1:31:20:8b:f6:4b:6e:41:8f:aa:4f:21:
                    e6:96:c9:4b:c5:92:65:ec:00:17:03:01:e0:fb:bb:
                    ab:b8:4b:26:e2:40:17:f9:69:4d:ca:31:06:24:60:
                    21:8f:4a:d1:51:f3:b7:99:2f:3c:8c:ac:e6:f3:ee:
                    d7:c8:b9:c4:8e:1a:ee:06:32:5c:dd:d5:05:b4:4c:
                    84:ba:7b:2c:cb:16:92:c8:d1:54:75:c3:c1:8b:b3:
                    63:9a:18:88:a5:07:cc:81:92:d1:b6:88:5b:6b:53:
                    1c:e7:4e:b1:23:b0:38:ed:5b:c6:5b:98:54:07:52:
                    aa:cd:a7:d1:0d:84:9a:13:f2:b9:e8:0e:ce:68:f0:
                    d0:dd:c6:69:42:ec:42:dc:e4:08:92:86:e3:21:8a:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7A:E5:48:3A:C2:3C:D1:58:4C:11:3F:56:D7:D9:7F:8D:B2:EC:C9
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         7c:51:55:36:11:dc:12:00:82:fd:a8:e8:67:22:5a:f2:04:66:
         ab:3f:ac:e3:e5:a2:43:b7:f9:ac:1d:7f:08:a6:3b:8f:da:d6:
         73:91:32:d2:a7:4d:af:86:cf:9d:1a:42:fd:fc:28:3c:7c:0f:
         51:92:f4:24:cc:72:bd:62:02:aa:72:91:cb:9b:18:e8:85:af:
         de:2d:80:2b:ab:fe:e7:0d:8d:ea:22:45:86:9a:c7:86:cc:3d:
         5b:41:32:10:ad:0e:03:2b:79:6d:d2:2c:7a:4f:ce:41:4e:16:
         c6:b4:64:9a:44:20:76:70:ef:22:63:62:35:c9:95:a3:00:88:
         c5:96:99:02:eb:1f:5d:f2:33:26:35:34:6d:4e:35:64:fa:d0:
         98:84:63:d6:d6:e4:12:fa:40:11:23:c0:90:54:93:20:02:76:
         09:57:6e:00:33:f4:e9:83:a4:be:ed:47:c6:8b:96:e6:b7:46:
         05:bc:52:8d:d2:f6:c8:f1:a6:68:b4:48:fb:5f:6d:ba:55:23:
         93:0f:b7:60:d8:a2:35:8b:27:b1:ef:ac:3f:aa:54:9c:ac:56:
         80:1d:7b:19:17:9c:aa:94:26:fc:c5:ef:14:ff:1e:7f:90:08:
         a0:b6:49:e4:81:95:8c:6d:fd:10:88:6f:88:9d:02:71:48:7f:
         1a:2d:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:09 2025 by rpki-client on console-fra.rpki-client.org