Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File:                     Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier:          Zn4EJ6Leo5QdGnI55trvYaXcYSZSYaCedoRF0SdaLCo=
Subject key identifier:   81:84:E6:8E:A3:95:4C:FA:46:BA:E5:F5:DF:6F:53:35:CF:EF:A4:3A
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer:       /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial:       0194BB5FD5FA9A369E81BA4F08F2D5696A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number:          12BE
Signing time:             Fri 31 Jan 2025 08:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:07 +0000
Files and hashes:         1: FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa (hash: Z8CjY0pPayO+MrbN0Iu5JVGrCs1wHK4dfVgqvLTMoog=)
                          2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: QZRf+WC72u6gAC1CdmeRtNmewPAhYGQupsK2b6oiLhw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:d5:fa:9a:36:9e:81:ba:4f:08:f2:d5:69:6a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
        Validity
            Not Before: Jan 31 08:00:07 2025 GMT
            Not After : Feb  1 08:00:07 2025 GMT
        Subject: CN=8184e68ea3954cfa46bae5f5df6f5335cfefa43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:00:b7:f7:d8:b7:39:ee:97:67:ba:44:73:
                    c7:d9:d0:b0:29:fa:dc:3b:1f:eb:97:dd:07:af:2e:
                    f8:34:4d:97:08:7c:26:22:f1:fb:86:67:54:d6:85:
                    ba:1e:b6:f9:c6:86:2b:b2:87:36:d0:4d:ce:10:ac:
                    6d:bc:a9:75:69:8b:5e:37:d0:bf:32:e3:0e:b2:a1:
                    b4:d7:d3:61:1c:15:72:f2:39:7c:ff:d1:46:41:10:
                    57:c3:d1:84:49:8a:f5:aa:a2:76:12:d5:21:e6:cb:
                    f4:5d:1e:68:f5:51:ca:99:df:da:82:40:6c:c1:42:
                    6b:ef:24:0f:96:b9:a6:10:42:aa:19:0c:76:06:2a:
                    01:c2:a1:e6:0d:1c:76:f2:4e:0c:4e:62:11:dd:47:
                    e6:25:86:18:b7:ec:29:f1:a2:69:b2:c7:e3:d9:2f:
                    f4:6c:2c:0f:cf:a6:1c:83:47:58:3e:01:a5:21:85:
                    18:38:0b:32:f0:48:ce:91:1d:3c:bc:b5:1b:ba:53:
                    6f:08:fd:80:21:2f:ef:71:01:8e:bb:d0:b1:0c:0b:
                    9a:b0:e4:73:0d:c8:96:47:7e:7a:5a:51:24:6c:d3:
                    20:b0:26:0a:41:0b:91:34:0d:52:d1:d4:27:88:9f:
                    16:36:f5:88:16:92:d0:be:12:3a:01:17:3d:6e:41:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:84:E6:8E:A3:95:4C:FA:46:BA:E5:F5:DF:6F:53:35:CF:EF:A4:3A
            X509v3 Authority Key Identifier:
                keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:f1:09:07:14:a8:9c:6e:52:77:b6:92:b8:49:ca:af:34:
         28:6a:93:11:f1:52:9e:4a:f9:2e:5d:e1:99:f7:c5:81:3c:50:
         7e:2d:64:30:16:6f:40:62:82:62:bb:bf:88:1b:a7:72:8e:2e:
         ce:c2:fd:d3:3b:89:32:70:a6:09:9f:12:18:db:66:ee:73:2f:
         9a:38:b0:a1:74:b7:34:17:a8:65:9e:8a:37:87:dc:39:af:d4:
         31:80:2c:af:11:a4:2d:0c:c0:81:eb:97:bb:e9:ad:39:bf:3d:
         23:f7:62:1e:6f:76:0d:12:52:37:46:3a:e9:7e:c3:03:17:e2:
         21:b0:84:c3:82:47:f4:7d:84:f2:dc:2e:88:78:b3:dd:80:78:
         a1:18:c8:41:1e:9b:fa:a4:89:07:96:ae:50:e6:e1:b8:68:9e:
         c6:cd:e9:10:b3:b8:70:9d:31:55:f9:99:08:fa:44:d8:22:bc:
         a3:81:e3:12:7f:2a:ce:52:17:c4:b4:af:1d:9f:39:c1:fe:73:
         79:31:d6:c8:e4:7c:95:51:7c:40:ed:e9:2a:1a:a6:3b:8c:07:
         0e:e2:b2:2f:c0:b2:e1:5b:35:5a:92:13:54:34:24:3a:fb:5a:
         6e:8f:91:1a:9f:54:da:f7:4c:43:7c:06:ac:3d:f6:fb:1b:89:
         18:3b:56:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:37 2025 by rpki-client on console-fra.rpki-client.org