
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
File:                     uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft (raw, json)
Hash identifier:          zJyOoq6s/TidY30Bwv+BSXVJKO+lpHJI4dYfjpDZDr8=
Subject key identifier:   8D:63:DE:81:E3:01:85:C0:A9:FC:D2:73:86:B0:DA:A8:16:10:9B:79
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Certificate issuer:       /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial:       0194BABB94EF4A3D82A9D4C58774B8B064B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
Manifest number:          033C
Signing time:             Fri 31 Jan 2025 05:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:42 +0000
Files and hashes:         1: Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa (hash: /bA9u2h5NTMZDfewDc1SRyw5qIxS43DYtdeQY6zyTlU=)
                          2: uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl (hash: x76yts8pCgK71agKaJ5IOcwgRnfXzuJNx8l7IjbPsr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:42 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:94:ef:4a:3d:82:a9:d4:c5:87:74:b8:b0:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
        Validity
            Not Before: Jan 31 05:00:42 2025 GMT
            Not After : Feb  1 05:00:42 2025 GMT
        Subject: CN=8d63de81e30185c0a9fcd27386b0daa816109b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:d0:a1:3a:fd:62:a4:6a:fe:18:d4:09:fd:
                    f9:18:9a:a3:d4:0c:84:e4:77:09:33:7c:f5:b6:04:
                    ec:1b:f4:c1:14:67:ff:3a:f2:4e:e4:ea:63:23:0c:
                    44:c6:02:b0:10:6d:86:65:ef:68:8e:dc:df:6d:71:
                    0a:fa:f0:01:2b:57:06:ad:af:2e:3c:7e:85:6a:73:
                    47:85:c0:fc:de:a3:69:df:f7:73:cb:57:ce:bf:12:
                    32:f5:78:5d:12:e1:3e:50:11:5f:37:dc:0e:86:82:
                    7c:87:48:18:61:70:5c:e6:c1:8f:ce:3a:0f:36:bb:
                    08:62:74:fe:8b:a4:12:a6:60:bc:31:07:10:35:9a:
                    24:0a:d7:16:3c:a2:e1:ab:1d:53:14:ed:5a:05:a4:
                    4b:ea:ae:62:4a:92:70:1e:bd:33:ee:b9:d0:0e:b5:
                    ed:ee:97:79:93:d6:16:d2:e8:07:71:82:7e:a0:2d:
                    c3:2c:7c:49:03:71:c9:2f:f8:29:b4:46:e3:4b:e9:
                    38:7d:68:28:0f:2a:4c:26:6a:8b:35:59:2a:02:ca:
                    ee:f4:11:99:c6:f6:eb:ba:98:73:7f:b6:99:d9:33:
                    4d:36:fc:c0:ac:dc:02:66:9b:bc:cc:5e:9f:dc:48:
                    7b:68:ec:ce:d3:ea:de:19:7a:2a:65:7c:f3:9c:fe:
                    d9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:63:DE:81:E3:01:85:C0:A9:FC:D2:73:86:B0:DA:A8:16:10:9B:79
            X509v3 Authority Key Identifier:
                keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:d9:1c:74:a2:27:04:0b:86:23:6f:f3:4f:3c:dc:18:a8:
         6c:ef:3f:15:6e:e0:cc:ae:c3:9c:c1:87:96:22:bc:b9:be:87:
         d1:3f:81:fe:e2:1f:16:3c:3b:fa:3e:d9:d6:12:e3:77:c7:3c:
         22:c7:6d:0c:37:31:ab:9c:98:e7:5a:56:84:45:92:0f:68:1f:
         5e:5a:61:4f:94:1a:7a:de:66:ad:5e:fd:10:76:fa:78:7e:b4:
         1f:12:1f:d8:9c:aa:09:c8:6e:ef:13:b2:fe:e3:64:35:e6:92:
         a7:df:fe:84:c1:1e:85:e7:9e:df:e4:0c:66:b3:a1:39:c7:37:
         cf:ff:bc:fc:5e:dd:25:28:1f:04:a6:b5:4c:cf:43:9e:f3:5e:
         32:78:f8:25:e9:d0:e0:44:84:16:6e:a2:5f:9a:73:70:19:6d:
         b0:87:2d:79:a2:cd:1e:09:ea:7d:9b:c4:ce:28:d0:da:47:2d:
         dc:78:d4:46:bc:e0:0b:a9:03:f9:28:3c:3b:4c:07:7a:51:5f:
         65:76:e8:90:7f:d6:90:a0:ff:df:a4:91:01:f6:6b:f3:34:18:
         77:4a:e9:65:e4:88:60:0d:36:df:10:ad:40:12:09:6b:8c:5a:
         12:e7:41:24:ab:59:a9:87:23:80:6b:44:3f:3e:67:36:06:0d:
         9c:bd:ab:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:12 2025 by rpki-client on console-fra.rpki-client.org