Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
File:                     Akbop20wx8BJW8XOjuURD-qyhuY.mft (raw, json)
Hash identifier:          mDWRuoBqYLTZngOiNe0VeFucg1fekIkCP7FwZq+Nn5o=
Subject key identifier:   E6:5A:F1:83:39:A1:9F:7C:06:31:3D:DA:C0:69:F2:23:D9:B0:22:02
Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
Certificate issuer:       /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Certificate serial:       0194BAF24BA30CBD04EEE52D66AB3373D01B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
Manifest number:          12DB
Signing time:             Fri 31 Jan 2025 06:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:28 +0000
Files and hashes:         1: 3uIWyZ2-NdDfWkBz-Cz4ehXcDXw.roa (hash: MQ45FFneVJjtvuTav7T4FKF/BiqudQZo8fk5fSUR0xU=)
                          2: Akbop20wx8BJW8XOjuURD-qyhuY.crl (hash: v4jsT8sqFO41WSjp3OnjhEv+HEb/nJTNGzX9hXzcktg=)
                          3: PawZ63YCzLh66nBk8KkHzYsa-D8.roa (hash: MbGnyPjYsuuNw4Rc4to6au5h1LGwPajvRQALk91Nf/M=)
                          4: XFa9l_0cz21XUFqVHAhuFVoXl64.roa (hash: O42Bcxzs4yOQXX2kULBWDWVCdsdJQDwpjOWp8Rqh6bk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:4b:a3:0c:bd:04:ee:e5:2d:66:ab:33:73:d0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
        Validity
            Not Before: Jan 31 06:00:28 2025 GMT
            Not After : Feb  1 06:00:28 2025 GMT
        Subject: CN=e65af18339a19f7c06313ddac069f223d9b02202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:d9:09:ce:1a:44:d7:9f:e2:a6:e7:e9:68:
                    38:95:53:a5:26:0d:cf:1b:81:26:ff:f5:f1:b3:85:
                    a3:2b:1e:04:3a:68:55:be:60:5e:44:e0:f3:32:54:
                    3b:5f:c0:4b:a2:33:72:f5:38:88:19:cf:a6:a7:15:
                    b5:ce:8e:2c:79:4a:2f:5e:25:a8:3b:1f:6f:e2:56:
                    18:f9:d7:5a:7a:5b:2d:b1:cf:96:a5:77:b2:28:a3:
                    06:dc:27:29:79:6c:6d:fe:5b:85:ec:70:f3:f6:06:
                    1f:ad:dd:39:e3:73:1d:2c:2a:49:0d:75:a9:c7:bc:
                    a7:8e:22:3e:72:39:18:8a:28:75:48:a3:80:dd:8f:
                    9f:85:98:ab:f3:1c:9f:02:5d:5f:46:aa:47:18:9f:
                    a6:b4:a3:bc:9a:4b:1f:c5:2f:9e:3b:15:96:92:4d:
                    5e:96:9c:9a:3e:53:82:42:bb:14:4f:4b:a5:31:0b:
                    ed:1f:28:15:6d:a2:22:b9:f1:9b:ed:c7:f7:22:2a:
                    3a:44:68:bc:f9:ab:6f:9d:2e:e0:65:64:ad:02:b5:
                    02:9a:a3:6d:a4:26:c7:26:86:8e:4b:13:5a:c4:0c:
                    38:1b:ce:4d:98:cd:f5:93:96:ed:9a:61:f1:80:79:
                    15:73:8f:38:80:b8:97:c5:1f:00:27:11:3b:5c:9e:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5A:F1:83:39:A1:9F:7C:06:31:3D:DA:C0:69:F2:23:D9:B0:22:02
            X509v3 Authority Key Identifier:
                keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:89:12:22:2b:84:9c:63:bb:40:86:e3:23:b0:79:e7:11:54:
         47:d4:86:8d:1e:c4:7c:8f:8a:35:39:12:de:6e:fd:99:39:38:
         49:87:c8:72:38:08:ef:ba:2c:7b:a8:5a:fd:fc:e3:b5:8e:80:
         7d:5d:9d:bd:7e:dc:01:d2:93:11:00:4e:88:5f:39:a5:68:bc:
         73:86:a7:6f:76:43:cd:7e:ab:9f:ee:00:d2:bc:2e:89:17:61:
         52:2e:53:d5:ba:7d:be:72:5a:d7:d5:2e:07:d6:dd:39:6d:dc:
         fb:fb:ad:e7:9b:b2:fd:b8:b8:3b:15:1b:70:69:aa:20:92:cc:
         11:f5:11:90:26:5d:4a:a6:a9:96:c1:f8:3d:31:88:1c:3f:bc:
         7e:d9:2d:20:57:de:5f:1a:25:74:0f:84:a9:6b:0a:69:35:f1:
         3e:06:c1:3e:c2:07:b3:82:07:73:3f:7a:81:46:e1:21:78:27:
         11:61:9f:3b:82:98:f1:23:b9:1e:54:3d:23:9f:92:50:d1:c7:
         08:6b:ac:19:d5:82:10:f5:c1:b8:2a:9f:b0:96:c2:3f:ef:a4:
         92:81:28:d4:d4:6a:c1:3c:f4:34:cd:ad:7c:0e:f5:54:b5:74:
         e1:40:b5:15:ba:40:a6:36:96:32:97:2d:62:70:4f:0e:60:e6:
         aa:b7:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:32 2025 by rpki-client on console-fra.rpki-client.org