Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File:                     Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier:          4lhtkvWBNoxFEblgBYuocI3nYx+aBdUEyLqO3M+H2GU=
Subject key identifier:   95:05:DD:12:D9:7B:FA:05:D9:18:31:E3:8F:F3:02:3C:43:6F:E4:F0
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer:       /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial:       0194BB97441D0CCB4428EF19C278A5AF7EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 09:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:40 +0000
Files and hashes:         1: QNtVfkNdeG1v9DJyZBEjTrZNyBc.roa (hash: vaJZALNBXUbhDyRfKEtlNDFsggROpnhoQdeymesJ/Rw=)
                          2: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: 1mOLVUfX9flEKIZuJHZatl9YsShMsGWEtprJlKyofeg=)
                          3: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=)
                          4: hd67_XZte5UJxG8Z9Bjjhd5C3aY.roa (hash: m5+Tgfa03sp40l5g/5GYZoTIL8T/7QDNBIaZ6t+2ge8=)
                          5: oSx_pT92ENoX9McIljhqchZm0Y8.roa (hash: jetN2hKvAM6TwnDzQ0oFFtD8VXzg/vhGoJq+vT3kY9E=)
                          6: ol0yF-2yJSflw_ZYhiJJY4fxMnU.roa (hash: uwqj4CFvKVNkmhKMglSF22ZAXWwfKXlh6tWeNXdxYbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:44:1d:0c:cb:44:28:ef:19:c2:78:a5:af:7e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
        Validity
            Not Before: Jan 31 09:00:40 2025 GMT
            Not After : Feb  1 09:00:40 2025 GMT
        Subject: CN=9505dd12d97bfa05d91831e38ff3023c436fe4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:53:3f:88:d0:92:b7:88:c4:51:09:89:4e:
                    5d:60:16:a1:4c:91:1f:1a:29:56:72:61:1c:f0:6a:
                    5f:f0:9e:e5:00:5e:ea:54:4e:6f:04:54:19:79:da:
                    cc:5d:e0:cd:48:31:51:68:10:f5:82:ec:c9:6a:a6:
                    28:76:9d:1e:82:25:f5:ec:36:f1:68:fb:51:93:39:
                    f2:ed:20:cc:9e:40:f7:d3:52:9d:c5:cc:b9:5c:70:
                    7e:73:d5:a8:bb:40:d3:65:a0:6c:ea:36:02:e3:0a:
                    0d:a8:7b:cf:c9:c9:cc:43:4f:55:05:97:e4:8b:52:
                    d3:67:57:64:85:96:57:bd:a2:45:ca:36:ee:47:a6:
                    79:b0:27:e9:ba:07:3c:14:94:65:dc:a2:78:d3:fc:
                    7f:c6:3f:70:4c:f5:54:14:04:4c:15:e4:60:ff:0c:
                    78:ee:71:ff:99:25:82:d5:3c:49:97:0d:e9:61:72:
                    b8:2c:dd:19:4b:83:fb:e4:44:85:48:11:31:57:3d:
                    35:d5:60:fc:07:7b:55:7c:81:3e:f8:e7:18:64:be:
                    f8:dc:d5:fb:16:37:50:8c:57:bf:80:b2:eb:93:8a:
                    c0:96:3f:fb:af:d3:46:51:6f:db:ee:ef:a3:71:60:
                    3b:e9:e4:27:91:6a:7e:77:86:ad:aa:85:d3:6e:fc:
                    86:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:05:DD:12:D9:7B:FA:05:D9:18:31:E3:8F:F3:02:3C:43:6F:E4:F0
            X509v3 Authority Key Identifier:
                keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f9:31:86:65:39:95:34:97:ba:16:04:9c:08:2d:88:76:30:
         1c:e7:08:6d:dd:76:46:84:2a:11:c8:1d:8d:cc:11:36:e6:81:
         0b:d9:20:28:c5:52:3a:18:23:18:fe:4d:3b:87:66:69:85:c5:
         a9:ca:cf:5c:3f:6c:af:dc:4f:37:35:ad:66:7d:69:62:d0:54:
         77:bf:00:ff:9d:9c:2d:d2:0f:1b:f8:28:3e:aa:28:01:32:3e:
         b2:5c:0c:2a:7e:fb:3b:b9:c2:16:1f:45:68:9b:d3:46:5e:6a:
         88:0f:a3:9e:d8:e9:5c:7c:74:d0:46:08:3d:32:58:9d:2c:f9:
         2a:ee:3f:4b:14:f5:d8:fa:bd:4a:9c:c2:30:0d:0b:96:9f:12:
         19:19:43:d2:eb:3f:fa:e9:d9:ce:03:6c:a5:d9:d9:6b:bf:b7:
         b8:8a:5d:b0:f0:35:56:20:c0:34:5f:a8:82:30:9f:8a:59:cf:
         29:d7:05:c1:ee:22:34:0b:9c:62:c0:16:75:c8:ae:c2:53:03:
         8d:8a:b9:bf:8a:d9:5e:9d:c7:60:f0:45:83:38:46:ab:0d:44:
         ba:24:c5:da:fd:dd:d1:1d:c1:52:2b:db:c2:50:47:b6:f8:f5:
         ae:51:1c:5f:b1:da:51:d7:41:a2:6c:fa:09:be:40:dc:76:a1:
         70:e5:ff:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:17 2025 by rpki-client on console-fra.rpki-client.org