Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File:                     C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier:          zkgwmMzRQjsj9uhyG++WJ2O/B6mnpdsAZoOGj9OXOVg=
Subject key identifier:   B5:D9:00:1F:F6:FA:0C:D5:AB:AD:39:93:E0:A0:DB:C2:E1:EF:16:FD
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer:       /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial:       0194BAF2684F2971772031EBA0FF88A14D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number:          4C
Signing time:             Fri 31 Jan 2025 06:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:35 +0000
Files and hashes:         1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: u0U4casz047uvSDeHegEh5RMl9gWnENq+3EGnNWzu7U=)
                          2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:68:4f:29:71:77:20:31:eb:a0:ff:88:a1:4d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
        Validity
            Not Before: Jan 31 06:00:35 2025 GMT
            Not After : Feb  1 06:00:35 2025 GMT
        Subject: CN=b5d9001ff6fa0cd5abad3993e0a0dbc2e1ef16fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:5f:73:cf:44:4c:ce:09:4d:4c:e9:96:01:
                    c4:a3:1b:be:56:34:5d:4b:3e:38:cb:25:2d:2e:bf:
                    2f:3f:a6:ce:7e:96:dd:66:66:74:63:32:60:8e:42:
                    cb:eb:3d:3f:4a:42:0c:79:29:e4:ee:8e:1d:d3:6d:
                    8b:ae:70:77:45:9c:99:23:2b:c8:80:fe:b6:4e:62:
                    b3:6d:0d:49:f5:08:e4:ba:2d:16:67:12:5d:f1:4e:
                    33:5b:39:7d:a9:33:9c:be:56:f2:3c:2b:e5:ca:fc:
                    af:be:8f:90:27:e8:be:08:2b:2e:1a:c8:94:8c:d4:
                    dc:87:12:61:86:e5:a6:c5:32:da:1e:7b:2b:7e:69:
                    aa:47:9b:e0:79:47:cf:89:1e:9c:f3:77:aa:8f:6f:
                    33:56:95:0b:58:de:c8:aa:10:ae:3c:a7:58:fa:7e:
                    5b:6d:a9:bc:fe:9a:d9:bf:1d:f1:bd:1a:9e:d8:26:
                    03:89:92:e9:55:bf:bd:61:49:06:42:f5:9f:7a:be:
                    d5:6e:a6:5f:e3:af:09:b7:79:3e:1d:29:4a:ab:6a:
                    a7:bc:68:6c:97:72:58:b5:7c:b4:2f:4f:06:24:71:
                    63:e6:8f:84:15:69:53:ed:50:90:e9:c3:9f:af:18:
                    59:15:5b:e6:54:19:22:f5:53:3e:6e:25:83:bd:78:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D9:00:1F:F6:FA:0C:D5:AB:AD:39:93:E0:A0:DB:C2:E1:EF:16:FD
            X509v3 Authority Key Identifier:
                keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:f5:98:26:fb:d8:cb:e0:a1:bb:f5:3c:06:3a:59:b0:02:fc:
         a6:7a:cc:16:e2:bd:c3:3e:3c:91:84:4e:56:63:20:ab:d9:af:
         40:20:13:ee:d2:9b:f9:c8:c1:3f:72:9b:45:09:de:cd:c1:2e:
         45:f2:3d:7b:3c:f9:8f:8f:80:ab:df:1d:21:b3:40:41:e1:e8:
         52:11:ac:35:68:f3:5c:e5:7e:6a:82:d8:52:4c:b2:84:e8:63:
         16:97:3e:d0:b5:fe:f7:d3:8c:31:d2:4d:85:1c:ff:f5:72:75:
         8f:14:ea:4a:0b:a9:0c:85:25:cd:3f:b9:59:2f:31:fb:39:ae:
         9d:d8:a3:15:53:1a:55:cc:08:a8:88:03:00:95:43:f7:ae:9a:
         23:52:36:8a:91:1b:2f:8f:33:03:fe:1b:a9:08:0d:e8:19:e5:
         94:61:96:74:23:f9:55:d2:6e:9d:3f:9a:a9:bf:2f:f4:d5:76:
         b8:25:23:2d:b8:60:e6:8a:a3:34:45:ed:f1:f2:42:44:0c:52:
         e4:0f:5d:54:87:4d:e5:11:3d:6d:7e:47:3a:df:29:b4:32:0e:
         86:47:c5:d6:56:2f:fb:88:4f:51:8e:26:bb:30:cd:87:d0:e7:
         2a:b3:5a:e3:83:84:2d:c1:f5:d3:e5:fe:61:09:b6:7a:85:56:
         61:02:20:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:41 2025 by rpki-client on console-fra.rpki-client.org