Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
File:                     EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json)
Hash identifier:          icN8zHxYbhKBOY1eSKjAqZFMT4TU2W/bgFfxFbTOPtw=
Subject key identifier:   BE:20:49:6C:D0:B9:B2:12:58:59:A9:15:F5:C3:C3:3C:D7:87:6D:8B
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Certificate issuer:       /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial:       0194BA84A39AA7E277CAB8501E0AA3CC78B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
Manifest number:          13BA
Signing time:             Fri 31 Jan 2025 04:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:42 +0000
Files and hashes:         1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: cUDTav75E6v2f3I02te1m7nezDy2gZFL5TltJno4Hek=)
                          2: Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa (hash: a+DkDp1TptVBWwEy/OfBk+uhB64mMxCuleZtGIvfNQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:a3:9a:a7:e2:77:ca:b8:50:1e:0a:a3:cc:78:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
        Validity
            Not Before: Jan 31 04:00:42 2025 GMT
            Not After : Feb  1 04:00:42 2025 GMT
        Subject: CN=be20496cd0b9b2125859a915f5c3c33cd7876d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:ec:35:cf:22:17:d7:05:e5:1c:91:53:6e:
                    46:1d:fd:11:7a:68:d9:31:0a:e2:ba:6a:f7:a6:23:
                    e4:fd:00:aa:b9:ad:86:f2:af:66:1a:62:83:e5:32:
                    8b:c2:83:00:44:5a:5b:eb:5c:63:b3:51:33:40:71:
                    0b:b1:a0:07:02:cf:d5:80:d1:e5:b5:2f:33:6d:b8:
                    ca:18:66:c2:fb:b1:61:aa:a4:73:5f:69:9b:26:dd:
                    bc:e2:d4:9b:6e:48:e7:7d:d7:0d:d7:ec:46:36:f8:
                    a9:c1:97:f5:f9:7d:9b:94:dd:1e:a4:80:b7:6f:e5:
                    7c:f1:c3:fc:b1:25:42:9f:4c:6a:39:93:e0:1b:e9:
                    c5:60:db:15:c2:bf:9f:10:e5:ad:9d:c3:44:8e:3e:
                    9b:9d:f0:f8:bd:11:dc:8e:3f:4c:8b:68:1d:ff:63:
                    a9:5e:04:1b:11:a8:1d:7d:68:55:bf:8c:b8:69:09:
                    3f:d4:26:8a:01:ca:27:98:7c:a2:b8:ce:91:ec:fa:
                    c1:b4:72:5d:bc:b9:af:6e:bb:78:e3:4e:a2:0c:d0:
                    81:d5:8d:13:0e:20:7c:69:a1:58:25:c4:f1:2e:b9:
                    3b:12:cd:9b:93:bd:3a:c6:f4:e8:8a:8c:79:ec:06:
                    83:29:9e:53:dc:d8:aa:b2:c3:aa:83:2c:20:14:0f:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:20:49:6C:D0:B9:B2:12:58:59:A9:15:F5:C3:C3:3C:D7:87:6D:8B
            X509v3 Authority Key Identifier:
                keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:30:41:ac:e2:4a:49:0a:4e:5a:1d:3e:76:dd:8e:21:e5:48:
         03:fb:1a:b7:90:36:97:42:5f:9c:bc:30:96:5c:fb:7e:1c:a2:
         2c:af:cc:62:74:45:d0:3c:06:74:00:9c:fe:08:eb:b6:a4:fc:
         91:76:65:b5:69:79:20:0d:0d:24:72:99:4d:49:e8:3e:b2:44:
         29:e9:00:c9:20:a6:8a:7e:ad:4a:d7:b4:73:89:fc:a9:ff:7d:
         48:a8:64:ba:c9:c7:38:4b:3b:cc:bd:79:33:db:88:c0:52:3a:
         5b:22:1b:dc:39:4b:a3:fb:b5:5a:46:2c:5c:2e:ba:6c:47:e5:
         a7:17:b9:f3:33:ef:31:d9:ef:58:41:b7:97:a7:1b:52:0f:a7:
         30:56:e7:3e:c3:a2:3c:61:c9:a9:de:46:f2:f7:42:82:de:b6:
         80:f8:7f:59:92:a7:5a:d0:87:ed:f3:a8:f7:f8:66:94:c9:a4:
         3b:ce:26:2f:83:47:a9:3c:24:30:d3:c0:24:40:e5:2c:3b:88:
         0a:e9:e8:09:d4:3b:68:74:25:30:9f:7d:29:49:1a:95:32:fe:
         21:57:fb:e6:07:75:49:f7:6f:66:cd:2d:8d:95:95:67:7b:97:
         33:c0:d1:6c:8e:ef:db:af:77:a7:7d:99:ff:72:cb:22:79:c7:
         99:14:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:35 2025 by rpki-client on console-fra.rpki-client.org