Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
File:                     R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft (raw, json)
Hash identifier:          B09XrVadCCOHTnHfpKF5FdeLaQVGrs1R4pcrK6aB07Q=
Subject key identifier:   F9:B6:96:B2:64:D7:4E:8F:BB:6B:F8:1B:B4:63:51:ED:80:D4:58:81
Authority key identifier: 47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
Certificate issuer:       /CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Certificate serial:       0194BB2932FB009D0E3E142CE822984A8468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 07:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:26 +0000
Files and hashes:         1: 6CJuWYcvaw-acDsC8fypVGv6nZs.roa (hash: wT9pXkMIK5iq/Fr3VYtO4ReEPTUzPvr9i2oggz8Pizc=)
                          2: R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl (hash: pnCDt+voFSje08zAlB/g4uf3vXIfNnh+R3HYN2Vi4ac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:32:fb:00:9d:0e:3e:14:2c:e8:22:98:4a:84:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
        Validity
            Not Before: Jan 31 07:00:26 2025 GMT
            Not After : Feb  1 07:00:26 2025 GMT
        Subject: CN=f9b696b264d74e8fbb6bf81bb46351ed80d45881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:dc:9f:a8:ae:2e:d5:60:d9:13:d5:fa:db:
                    99:b4:d1:9b:fd:90:2c:1c:8e:bf:e9:0f:a4:8a:f2:
                    39:6d:b2:bb:3f:a2:75:d4:7e:e9:37:c8:2e:23:cf:
                    7d:fb:68:2c:02:10:72:86:e5:93:fc:aa:c1:04:a8:
                    2e:3c:25:01:c5:db:f5:9f:9a:51:45:78:3d:82:9c:
                    2f:fd:9a:03:b0:80:1f:15:e1:ea:5e:89:a8:11:49:
                    7e:df:3f:18:fa:65:7b:0d:80:dc:e6:ba:55:76:fb:
                    c9:d6:df:bb:04:8e:c9:bf:c5:ec:3e:59:89:3a:8b:
                    07:77:c7:87:1b:b7:41:da:dd:f3:51:2d:d7:45:84:
                    ed:d1:64:07:97:4e:6b:6f:78:9f:f6:74:1c:8e:34:
                    6b:dc:29:08:41:31:4b:5e:2d:09:a6:d9:53:e4:d1:
                    54:30:38:f4:5e:bc:e4:a0:bb:45:69:1f:bd:6c:c3:
                    fe:56:fb:be:43:85:30:f1:45:bf:08:1b:a0:c4:38:
                    28:03:f5:9d:de:e4:28:d1:99:5d:ec:0e:0a:2a:33:
                    8e:72:85:ba:ea:a4:e9:b4:32:aa:11:14:6e:dd:cb:
                    b2:5c:db:24:99:8b:a5:d3:48:a2:d1:73:28:cf:a8:
                    23:29:6c:93:bc:90:8a:f1:9f:bc:75:78:d0:0b:ea:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B6:96:B2:64:D7:4E:8F:BB:6B:F8:1B:B4:63:51:ED:80:D4:58:81
            X509v3 Authority Key Identifier:
                keyid:47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:22:ee:48:4d:e2:0f:fd:82:43:8a:ef:4a:99:25:f6:9f:e3:
         59:83:15:d5:93:02:14:eb:08:bb:08:b1:57:99:04:08:34:a2:
         fd:98:5f:f6:e2:cf:64:c8:83:06:06:85:ef:32:eb:fc:d1:77:
         a9:55:20:fb:0e:a3:f5:a9:23:b5:88:af:74:51:b8:72:6b:f1:
         ee:5a:38:b3:90:49:b5:1c:a2:e8:60:c0:f2:89:8d:2d:3c:09:
         94:79:80:02:e0:3e:85:d7:1e:04:b6:0c:31:0d:cb:cd:8b:16:
         6f:4f:d7:0c:e8:af:42:47:20:44:09:6d:ce:5c:76:e4:5d:b2:
         38:8f:7f:36:e4:f5:01:5e:eb:4f:34:58:57:34:5c:5a:10:1f:
         b2:94:b8:c4:6e:0e:df:c0:c6:d9:11:06:30:f8:a3:f0:1a:73:
         77:54:12:ae:a2:99:ab:be:1b:b3:d8:fe:56:d0:21:73:e8:59:
         42:03:18:b4:49:f3:cc:8a:e5:1d:a8:e2:dd:dd:26:43:04:f9:
         bb:95:d4:bb:c3:65:41:06:4f:7b:88:24:0b:52:0e:a9:16:26:
         63:a8:d9:65:50:65:df:83:21:44:72:fd:d1:14:23:1e:36:65:
         e8:c0:35:17:e2:3f:98:cc:2b:57:d8:39:f8:20:40:d3:74:01:
         35:01:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:19 2025 by rpki-client on console-fra.rpki-client.org