Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File:                     sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier:          g0voGmr1pbu0WKAArqCTIT7hfR0TruGFPgs8ELNX0No=
Subject key identifier:   CE:51:DD:70:6F:39:79:D6:37:01:6C:BA:41:7A:58:6A:CA:3D:63:33
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer:       /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial:       0194BA845A6CE5F706E637805770C96409FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number:          0794
Signing time:             Fri 31 Jan 2025 04:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:23 +0000
Files and hashes:         1: 9svgo4bGRBf8fMpSXvge7RoyrHM.roa (hash: teVQdkK97LTCrE/CLpJAuLsspKcnHRjqSI/rfD5Q6hA=)
                          2: fetFKuopmwnkmS4GdVahSkuSTYA.roa (hash: COKnfUPWTvK88/nI2sTAGQJZnRfr5E0q/yyW5/NYsSI=)
                          3: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: ohSOkvYrKzqYhbS9MqcwpAt06eWkUvHdQKynoet6RFs=)
                          4: tYCsQPIyFJmQyf9thG5Is7jI5NY.roa (hash: b/PwLfTfSmleVVur7ZKT8j1+gDLO4fZy6WoOsM743EE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:5a:6c:e5:f7:06:e6:37:80:57:70:c9:64:09:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
        Validity
            Not Before: Jan 31 04:00:23 2025 GMT
            Not After : Feb  1 04:00:23 2025 GMT
        Subject: CN=ce51dd706f3979d637016cba417a586aca3d6333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:4a:b6:be:c6:83:ad:d5:42:62:f1:80:c7:
                    fb:8e:70:fe:6c:06:4c:81:4d:b0:10:a8:ab:f1:f0:
                    dd:bc:bb:f2:bb:22:04:7e:82:01:54:52:bd:86:a4:
                    ff:ce:9d:3c:ad:4a:50:d3:11:be:52:ff:2a:0e:ac:
                    3e:2e:12:6d:28:32:9d:eb:09:95:62:4e:09:94:d4:
                    3f:80:36:28:a4:75:69:05:c1:ca:48:c7:d6:f3:49:
                    5c:2f:d0:ba:87:05:e4:35:ef:0d:9c:46:1a:94:d8:
                    21:9f:93:73:85:a6:65:29:15:d1:d5:19:c0:42:06:
                    e5:02:ed:55:b5:51:60:26:24:82:82:23:b8:7d:11:
                    f0:88:5b:42:59:b9:8b:b2:9a:65:a9:bc:b6:85:1d:
                    87:b8:d5:a4:72:a1:2d:db:3c:b9:b6:69:51:db:12:
                    ea:1e:a5:a8:2b:1e:14:19:e4:31:82:32:f7:be:4b:
                    b5:d0:ac:d1:40:98:a5:c9:eb:6f:7d:2f:5b:ec:6f:
                    87:01:4c:fe:d5:71:7b:34:c7:93:70:5b:d6:ad:04:
                    80:22:b8:7b:be:8a:4a:84:d0:ce:6b:08:01:23:c7:
                    d0:07:01:ed:ae:84:81:12:19:cd:e8:1a:61:35:4d:
                    a1:8b:9e:76:0b:91:28:02:bc:c4:2e:f5:4f:5a:3c:
                    14:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:51:DD:70:6F:39:79:D6:37:01:6C:BA:41:7A:58:6A:CA:3D:63:33
            X509v3 Authority Key Identifier:
                keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3b:11:97:16:b5:d0:ce:8d:28:57:f8:57:d3:8f:e8:f1:54:
         ed:ca:b1:c8:f7:dd:dd:60:29:43:6d:7e:b3:2f:1c:28:05:83:
         3f:c4:7e:6c:ca:5d:78:37:01:d8:df:4a:aa:9d:bd:d3:92:96:
         da:81:61:ab:d1:55:13:6e:e1:f1:03:c9:35:da:4e:27:c8:f1:
         fd:5d:de:a5:85:15:e2:2b:1b:39:7d:e7:73:06:14:af:2b:57:
         14:9d:a5:63:e7:b1:6f:23:a3:27:c0:90:66:bf:ff:64:8e:fc:
         a0:f8:b2:e8:69:2b:5e:f4:b2:82:31:95:8c:62:95:2c:07:a6:
         c8:53:1e:bc:c9:c5:94:3d:89:d5:fa:d6:e2:e9:7c:50:ba:18:
         0c:c1:47:bc:0a:8f:38:db:c9:51:bd:ae:52:c5:a0:6a:ab:a1:
         78:dc:53:c6:81:6a:9b:56:c9:3a:18:d0:11:c5:b9:16:5c:e1:
         b7:10:87:60:39:89:63:a1:a3:b8:97:81:1f:62:76:6d:9b:16:
         09:43:36:23:98:64:06:f6:89:e0:bb:50:c9:10:67:80:63:7a:
         bd:83:fd:4f:14:77:ea:6d:f5:2f:8e:ca:30:53:54:22:b6:20:
         9e:02:05:e5:7c:ca:b5:c7:7b:5a:12:eb:54:b2:f0:27:ee:15:
         cf:e1:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:57 2025 by rpki-client on console-fra.rpki-client.org