
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File:                     hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier:          WQxy3CNlLg3+JTick7/s6AwmoZ1DXaQYowkdgo0A3Ws=
Subject key identifier:   67:25:62:64:25:B2:5C:50:EE:D1:13:78:CC:D1:4C:9C:D1:25:29:C0
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer:       /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial:       0194BABB2A5BF7AEC9553A382203C1BE44E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 05:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:15 +0000
Files and hashes:         1: 0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa (hash: Iz51+DSbV7Tr3oZnznfPb0ztDkoHj3CGvdnh39JEVfU=)
                          2: Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa (hash: XwxfewChyQGnh/6DJxz8pIZg+xrexkVvjsVCqgpoH3U=)
                          3: ZovzMlbHa6h-Fl7gDQG_Zq7WfR4.roa (hash: H/iI+5AR6wdmCN1X+mmy0vutxGeF8cVAtih493U1ycg=)
                          4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: Ku//oxiP29JVG04unDlX5fyb3aVI9hEsNVsAEaIg3xA=)
                          5: l73B-rq6PzNDiKoxaYkXjLCugtw.roa (hash: 3VSqbyAVKfkVsGJFnzfZhKO8PUH5YDBnP4CFYJUZ7hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:15 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:2a:5b:f7:ae:c9:55:3a:38:22:03:c1:be:44:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
        Validity
            Not Before: Jan 31 05:00:15 2025 GMT
            Not After : Feb  1 05:00:15 2025 GMT
        Subject: CN=6725626425b25c50eed11378ccd14c9cd12529c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:87:42:c6:ab:ee:ac:55:c6:3d:f9:64:47:
                    11:dc:c8:35:5a:35:ed:44:1b:d1:5d:10:da:7c:1f:
                    25:c0:13:8c:53:80:e8:d7:13:10:b8:24:fd:58:ab:
                    b0:14:c4:db:f4:76:28:36:82:73:53:ba:1c:a3:b2:
                    9c:ef:06:65:cc:ab:77:a8:09:2b:50:f7:7d:1e:fd:
                    f3:3d:83:5d:d9:ce:9e:82:46:fc:11:b2:a1:b0:d2:
                    ff:45:5c:5d:cf:35:ab:23:e8:de:af:40:9b:5a:cd:
                    c2:d3:98:18:06:7d:c0:1a:3b:22:99:9a:6c:c4:44:
                    bc:ee:f6:1a:a2:5e:05:ca:7e:1a:60:91:a7:b0:4c:
                    d1:da:38:9f:f6:ed:2a:b6:fe:bc:68:ee:a1:33:30:
                    7c:13:7c:65:3c:4f:d0:2b:2d:03:1e:00:82:70:9a:
                    57:8d:51:50:63:2e:c8:ee:84:d4:f3:93:04:e5:c6:
                    56:e9:9c:79:4d:a9:17:3e:29:f4:be:5c:4a:f0:57:
                    0a:60:a9:29:77:59:f8:1e:9f:12:52:63:69:53:df:
                    2b:dc:27:61:97:eb:bf:93:05:93:ad:0d:4e:8f:b2:
                    da:23:75:ea:62:fd:ce:c6:38:5f:e6:50:44:3c:82:
                    7e:3c:49:57:ef:48:b5:12:5e:cf:cf:ab:c9:90:41:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:25:62:64:25:B2:5C:50:EE:D1:13:78:CC:D1:4C:9C:D1:25:29:C0
            X509v3 Authority Key Identifier:
                keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:7f:0f:d5:98:83:2f:4c:6f:8b:74:da:db:18:86:05:20:
         8e:cf:02:74:4b:a1:e3:b4:06:ea:96:7e:53:fd:da:d3:86:00:
         c5:0b:4f:5e:37:87:06:9a:64:92:47:c8:3c:25:66:ba:1a:52:
         58:38:86:11:76:bd:e2:be:43:0a:51:ef:38:ed:99:82:8d:5e:
         ef:c2:f9:a9:c6:b8:43:e7:f8:cd:fd:bd:84:52:ad:79:95:ad:
         4c:e2:cb:1a:52:74:d4:95:05:7c:50:5f:07:2a:f7:b6:c2:f0:
         c5:6f:ec:59:4d:e9:68:6c:f1:ba:b0:7e:b5:13:ba:8a:e9:11:
         f3:3e:ed:dd:f0:cd:1f:dd:47:c7:18:6a:3b:9a:2b:46:e8:33:
         fd:5a:9b:53:73:4e:f1:b9:26:a6:d8:57:b7:9c:98:b8:50:91:
         64:39:64:36:b7:f5:81:a8:cf:fa:aa:b4:0e:2d:84:8f:89:78:
         cf:e7:21:41:e2:7a:4c:ab:02:7f:17:73:85:13:b0:84:52:3b:
         37:d8:0c:03:d2:a4:6d:e0:27:9d:dc:f5:41:19:24:eb:ef:ad:
         82:60:aa:59:2f:63:23:2b:dd:42:5a:e2:73:fc:5e:03:fb:55:
         28:11:09:d4:bb:b8:4e:f1:4b:f6:8c:37:fa:93:81:8a:19:b9:
         f2:21:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:38 2025 by rpki-client on console-fra.rpki-client.org