Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File:                     hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier:          1rlXzg3afWHHIP910RQJQfKgbHdraJ7o0Nqo7viK6dc=
Subject key identifier:   78:B2:51:57:43:E9:13:67:47:05:F6:F6:45:96:AF:1A:68:BC:29:B3
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer:       /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial:       0194BB2943674E081753B9FF48B60D777F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number:          13C7
Signing time:             Fri 31 Jan 2025 07:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:31 +0000
Files and hashes:         1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=)
                          2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=)
                          3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=)
                          4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=)
                          5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: FLKYbKGE7zcIp1Qe/QMGb1C3fs9JlLDUybIvA3a9L9o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:43:67:4e:08:17:53:b9:ff:48:b6:0d:77:7f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
        Validity
            Not Before: Jan 31 07:00:31 2025 GMT
            Not After : Feb  1 07:00:31 2025 GMT
        Subject: CN=78b2515743e913674705f6f64596af1a68bc29b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:08:29:cc:ea:49:a9:a7:e2:93:28:2d:07:
                    4b:60:00:37:82:ba:9f:2a:de:7f:ed:57:64:50:bc:
                    c3:fe:9f:d8:0b:16:eb:3a:43:0b:5d:06:8c:0f:2a:
                    e2:6e:a2:9a:1b:8f:22:6b:2c:d4:b5:61:f6:e0:8b:
                    11:f0:7a:64:fc:95:eb:8e:c6:28:e1:28:21:e5:0a:
                    fe:b4:81:fc:f7:72:3c:30:eb:85:28:3b:ca:97:ad:
                    5c:58:13:d6:d8:34:b9:f8:4a:26:00:14:1c:fe:24:
                    bd:73:46:2d:db:50:ba:d1:1b:4e:5b:39:48:50:3b:
                    c1:92:dd:43:25:27:ba:49:6f:ed:1b:e0:b1:85:92:
                    8b:e7:fa:16:d3:6f:8b:a6:1c:d6:33:06:45:bd:8f:
                    3d:d0:01:ec:f1:08:1a:72:09:af:80:27:8b:98:86:
                    a5:78:47:22:fd:36:99:4c:bd:3e:85:15:16:ad:1c:
                    d6:6c:6c:a1:0f:04:2b:df:fa:d1:3b:f7:91:08:e3:
                    de:98:eb:85:b1:b0:4f:28:d5:7d:fc:78:20:60:d6:
                    04:cf:16:9e:7f:42:ce:d0:b0:52:11:4e:10:37:e4:
                    2a:38:b1:2a:97:e5:fb:fc:21:46:b4:42:0c:cc:31:
                    6e:a3:9b:d0:00:c5:23:c9:36:50:03:7c:b5:08:24:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B2:51:57:43:E9:13:67:47:05:F6:F6:45:96:AF:1A:68:BC:29:B3
            X509v3 Authority Key Identifier:
                keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:29:cd:c8:a6:17:b9:1d:99:dc:75:40:9f:b0:2d:4a:8c:78:
         85:b6:f8:ae:73:2e:c8:bb:ad:1f:78:4d:47:a4:c6:15:7b:b7:
         74:7b:b9:73:2c:7a:32:80:2f:09:35:1d:bd:f2:46:0f:89:66:
         f3:4c:3b:d3:b6:36:df:22:ba:fc:50:05:98:44:46:6a:6c:fb:
         5e:64:53:9f:ce:90:b9:04:20:68:12:15:6c:be:d2:16:5c:ab:
         b4:56:48:b0:7b:70:82:b2:55:9d:42:a5:f1:58:99:e5:54:78:
         0a:c8:77:2b:a1:27:ec:c6:9e:bf:fe:2e:60:3a:00:a0:5f:44:
         9f:9e:1e:77:ee:85:f5:c8:0a:42:74:e6:e7:84:8d:92:a9:c7:
         a0:54:58:d6:6b:54:dc:1f:00:7c:fb:f4:34:ae:83:66:6b:f2:
         00:32:25:a6:d9:b5:04:c7:56:51:8a:3b:8c:6a:7e:08:5a:ef:
         b7:f7:39:ee:5d:a2:f0:47:2c:85:d8:9f:63:58:8a:60:67:28:
         69:33:31:f3:f4:b8:32:fb:8b:50:ca:8f:d8:d8:ae:62:39:37:
         1b:2f:7a:f1:4f:18:54:fc:5a:56:29:a6:ab:28:ab:41:7f:ae:
         56:bf:34:91:20:8c:82:c7:71:10:0e:ea:82:4b:20:b4:13:54:
         d6:e5:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:32 2025 by rpki-client on console-fra.rpki-client.org