Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
File:                     mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft (raw, json)
Hash identifier:          W1GHMnw3X5v4JwU9nLVThzh+BQ3c+PbOO5+kdIr0HHQ=
Subject key identifier:   F6:2F:F7:03:04:8D:A5:96:97:96:93:70:D2:49:0A:A8:63:E0:17:AA
Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
Certificate issuer:       /CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Certificate serial:       0194BA846CDAD4D2C15E25C494D61470DA08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 04:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:28 +0000
Files and hashes:         1: Fb0UwpxCy0DRKLuSbZAzVNuZQGI.roa (hash: FQG+r4pQE3E1WCi2kVbQ4HOY+Sj6V8FJrKG1h8vbtwQ=)
                          2: mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl (hash: CiffMfBo5hlvxE0Yfi+ZUXpwPJiGHO/1vP5UA2qDBPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:6c:da:d4:d2:c1:5e:25:c4:94:d6:14:70:da:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0
        Validity
            Not Before: Jan 31 04:00:28 2025 GMT
            Not After : Feb  1 04:00:28 2025 GMT
        Subject: CN=f62ff703048da59697969370d2490aa863e017aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:eb:03:3b:a8:10:25:15:b6:e8:f9:6d:fa:
                    1d:d2:b0:49:95:ef:4c:ca:59:84:87:11:e0:e8:93:
                    8f:30:a1:95:6a:9f:99:58:dc:7b:d4:df:a7:9d:5b:
                    6e:f7:70:43:78:97:b2:a7:fd:2f:d5:1a:bd:cb:d6:
                    96:3c:1c:12:f1:eb:94:08:db:33:31:be:0f:20:d1:
                    7a:12:59:2a:90:87:88:6e:d7:92:24:7e:10:b3:53:
                    5e:83:43:42:67:7e:3d:f7:df:1b:b6:a2:18:a6:89:
                    49:fb:80:b7:b9:eb:0a:83:e7:ee:71:f1:51:86:7a:
                    67:b1:92:08:3b:fc:e4:24:1f:e8:4b:bf:9c:c6:1b:
                    d6:a7:ae:4a:10:be:c5:e5:04:c7:3e:b7:e5:e1:04:
                    dc:e3:70:c5:07:25:97:14:99:e8:01:6e:6d:66:54:
                    9a:77:bd:44:c3:cb:fe:bc:37:e4:04:2b:71:ae:2b:
                    71:10:fa:72:39:8d:4d:49:94:63:fb:64:47:3c:00:
                    a4:ab:ba:92:5e:a7:a1:50:5c:d8:22:b9:ad:a6:a7:
                    02:7e:0e:ef:a9:40:c9:9d:3c:5a:c9:f8:23:ba:5e:
                    e2:8b:45:9b:0c:b7:43:af:43:99:bd:7c:4b:e3:15:
                    fc:44:96:27:76:90:12:cc:0b:fc:f2:15:74:a0:fa:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:F7:03:04:8D:A5:96:97:96:93:70:D2:49:0A:A8:63:E0:17:AA
            X509v3 Authority Key Identifier:
                keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4c:16:1c:a0:bd:80:9a:83:7c:28:9d:6f:3e:f9:87:e7:7b:
         55:dc:bd:c7:7f:b8:c2:75:4e:06:86:98:53:3d:27:d6:29:d8:
         50:b4:a5:0d:25:68:7f:63:f1:9e:e3:06:65:2a:59:83:b1:9d:
         b9:6e:d6:61:b6:84:2b:3b:a1:0c:c7:72:08:bc:46:bd:86:e2:
         85:c0:af:7a:d5:75:ce:0f:9f:8a:f2:d3:61:38:d4:84:83:ec:
         61:22:d2:7b:9b:d7:14:75:b9:a0:26:43:4f:61:2c:95:76:17:
         40:7c:9f:ed:5a:38:ac:5b:b2:9d:69:2c:ea:60:a0:e0:9c:4f:
         f9:23:2c:2c:d9:6a:fc:49:c5:0d:08:14:09:8a:86:e2:7c:8c:
         65:a3:a9:5c:7b:26:15:07:57:c2:20:ce:52:04:85:9d:f5:f7:
         fa:81:d6:98:46:8e:88:0a:a0:e9:05:17:ec:79:58:9c:82:04:
         75:02:0a:fb:b1:01:e6:0b:57:05:ae:5b:63:ea:c1:40:be:46:
         b9:a5:63:a4:ce:86:d5:ef:59:5b:04:c8:69:0e:94:dd:c5:a7:
         04:12:b8:77:86:e5:8d:7b:78:f4:20:ae:39:9c:7c:05:c3:2c:
         65:df:73:8e:a7:38:9a:10:f4:2c:dc:5e:1a:89:e9:1d:c1:f7:
         00:47:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:16 2025 by rpki-client on console-fra.rpki-client.org