Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
File:                     rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json)
Hash identifier:          aGZTdMUpsnN+TYvDA0f+4nqQl2O+HzJzGMV5/9+wGx8=
Subject key identifier:   69:2C:7A:9F:B1:11:EB:69:42:25:F9:06:4D:C8:A7:48:BF:2E:ED:14
Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
Certificate issuer:       /CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Certificate serial:       0194BB6039B6C81B2CF27EC02DE647F61FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 08:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:33 +0000
Files and hashes:         1: 3i8SziI4yOANwHuCoVeJUFIkDmY.roa (hash: ApwThwemagVAYGDz/BhbEY+AhYokJz7tAT0f3Qt4Pto=)
                          2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: hwjU4AGmWINSbd2i09rWES/W9y31i0nV6HqoDCkl634=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:39:b6:c8:1b:2c:f2:7e:c0:2d:e6:47:f6:1f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b
        Validity
            Not Before: Jan 31 08:00:33 2025 GMT
            Not After : Feb  1 08:00:33 2025 GMT
        Subject: CN=692c7a9fb111eb694225f9064dc8a748bf2eed14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:e2:6c:c0:e1:f3:37:98:4a:b8:9d:c7:d9:
                    f9:d8:4b:1a:eb:ae:3f:09:9e:f4:0b:f4:3d:02:2b:
                    65:db:b7:1a:55:70:98:fb:cb:33:e4:de:8c:ce:2d:
                    b0:e5:c3:37:05:5a:f7:37:1a:91:69:fd:be:a6:cb:
                    1e:6c:b5:0b:c2:08:d4:76:27:14:c1:92:12:1a:04:
                    65:10:59:59:c0:93:06:97:03:23:9f:b7:2f:43:28:
                    20:f3:97:1d:80:7d:11:9b:f4:3f:f5:ab:4a:c7:72:
                    07:d9:25:63:ed:36:c7:22:6a:8c:7f:28:86:12:c5:
                    d8:b5:4f:3d:3b:0b:45:23:e2:a5:4c:ef:11:bf:b3:
                    b4:42:ca:53:65:da:a4:dd:e4:f4:fd:82:97:a4:4b:
                    ba:8f:f0:d0:7e:6d:7e:61:bf:d7:93:e9:61:96:32:
                    37:d4:46:01:9c:4d:27:2a:76:40:5a:f3:07:e5:65:
                    8e:48:ba:28:ed:0c:58:45:d2:c6:28:00:09:b4:b9:
                    36:be:ab:ae:85:a7:89:a3:12:70:2c:59:4c:47:42:
                    92:2a:5e:21:30:6d:4e:bd:86:2c:52:ca:0e:ec:a1:
                    c1:37:f0:4b:88:cf:65:a7:85:84:1b:ab:d2:fe:70:
                    9b:87:6b:06:94:3b:d5:ce:90:40:6c:37:12:ee:f0:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2C:7A:9F:B1:11:EB:69:42:25:F9:06:4D:C8:A7:48:BF:2E:ED:14
            X509v3 Authority Key Identifier:
                keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4f:d4:ca:95:45:7e:42:c1:22:e1:9a:a6:f6:8f:e3:d0:ff:
         18:7f:cb:04:02:bf:9f:dc:33:90:59:bb:96:d9:59:52:c2:f9:
         26:2c:fa:da:df:ea:3d:16:61:33:dd:28:41:89:a5:de:94:2b:
         c4:a7:f0:1f:88:8a:a7:b0:5e:9c:d6:cd:d3:5a:df:ce:d9:4b:
         68:b3:28:7d:2c:e1:ff:70:0f:94:8e:1c:04:c1:a3:d5:e5:21:
         a7:fb:51:30:38:24:0b:04:14:49:c9:36:4c:72:74:91:04:d5:
         c7:8e:60:35:36:f1:80:88:03:c0:69:d3:79:11:4f:c1:79:37:
         76:aa:5c:5e:bd:9b:08:3e:cc:7e:42:0d:7b:18:e0:1b:a7:a4:
         10:dd:06:6e:72:4e:d0:20:a4:6c:63:7a:c1:95:97:2b:b7:6d:
         66:7f:8b:c5:8b:d4:8b:82:59:e7:55:c3:ae:78:19:7a:88:87:
         fd:17:6c:90:a6:4c:24:df:32:4a:cf:7d:26:ef:32:8c:66:1b:
         94:ac:58:74:80:44:0f:9b:f6:0d:f6:34:cc:7b:50:df:fc:9d:
         20:85:c0:f3:db:f3:ee:c3:3d:93:b9:a9:1a:8b:21:c4:30:68:
         7c:c6:77:85:a0:0d:15:25:72:31:03:d6:c3:04:57:c3:b5:03:
         f7:90:b2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:31 2025 by rpki-client on console-fra.rpki-client.org