Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
File:                     b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json)
Hash identifier:          nmf9CG2l/PchFocemo4414o8w0R9byo/fGk7fg+bOe4=
Subject key identifier:   13:A0:1C:25:DB:0D:D6:30:23:24:20:44:F0:AD:82:38:C3:32:08:CC
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Certificate issuer:       /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial:       0194BAF2363DEB7C10689EEE7FA62BE15163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
Manifest number:          0B1F
Signing time:             Fri 31 Jan 2025 06:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:23 +0000
Files and hashes:         1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=)
                          2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: VmFs7J37zCSGIRe8hoe4wHrfCmfan2/9UN/r50EMGnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:36:3d:eb:7c:10:68:9e:ee:7f:a6:2b:e1:51:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
        Validity
            Not Before: Jan 31 06:00:23 2025 GMT
            Not After : Feb  1 06:00:23 2025 GMT
        Subject: CN=13a01c25db0dd63023242044f0ad8238c33208cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:14:32:be:77:41:e4:10:48:75:39:4b:17:
                    75:cf:88:bd:2d:f5:de:a0:a6:d8:9c:7c:3e:4b:6c:
                    56:d5:bf:5f:34:00:9a:a2:dc:9a:33:5d:77:c0:dc:
                    b2:f3:4c:89:54:36:d3:62:4f:e8:ec:f2:3c:f2:fb:
                    f8:c0:9f:c5:a5:45:30:ac:71:c1:63:1e:6f:cb:15:
                    71:ba:b5:7f:71:0f:7b:09:57:35:79:6b:53:d3:ea:
                    4a:bb:f3:68:f6:51:e5:50:60:28:92:cb:10:a9:d5:
                    3d:8f:70:c7:4e:54:87:58:c8:31:eb:2f:d6:80:f2:
                    53:ba:4a:5c:7d:ba:c6:8c:e2:7a:37:be:d2:82:e3:
                    be:2a:89:45:76:6b:2f:0f:f0:a9:95:44:bd:20:b7:
                    fe:e6:d9:82:5f:52:5e:04:a5:eb:6c:9c:1f:1e:30:
                    3b:53:15:41:a6:b8:6d:62:fb:a8:d1:0b:b9:4c:70:
                    96:6d:eb:54:ca:d7:70:34:7f:b8:69:06:24:07:05:
                    83:e4:42:37:0d:93:68:2e:66:01:e3:7b:80:a2:88:
                    08:3f:a2:63:18:ca:f1:4f:7b:2e:a4:af:61:0d:0f:
                    18:b7:c3:7b:57:f7:6b:b7:dc:77:1f:be:43:9b:be:
                    5e:64:a6:3d:ce:fa:d9:c3:b7:ab:23:3b:d1:60:67:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A0:1C:25:DB:0D:D6:30:23:24:20:44:F0:AD:82:38:C3:32:08:CC
            X509v3 Authority Key Identifier:
                keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:c5:bf:3f:0a:d6:3d:0c:79:63:6c:68:9f:da:48:3d:b4:
         88:02:07:63:07:28:9f:05:80:7f:b7:14:71:bb:1e:36:52:83:
         90:3d:20:83:b3:51:2d:c5:19:ad:03:b6:da:d3:46:1f:d8:98:
         8f:08:c7:02:53:c8:7b:74:f8:a3:5b:ae:a7:a5:f3:dc:50:48:
         d7:14:19:0d:2f:6a:27:d1:56:dc:dd:c5:a4:42:31:6c:18:dd:
         3e:fe:9a:0e:ae:0f:38:92:54:26:d5:e3:e0:54:75:40:ec:6a:
         68:d9:0f:8c:a0:d7:b2:7a:20:c5:57:a2:27:2a:9e:7b:ac:c2:
         a9:48:02:e6:c2:57:2f:a9:08:6e:40:aa:1e:ee:db:10:88:5b:
         79:f7:fe:b6:59:23:3b:bf:44:80:8b:d5:2c:52:6f:1b:e0:46:
         2a:e1:8f:3c:b3:b3:3b:a8:8c:b5:d7:ba:37:cd:88:ec:de:b1:
         a2:7f:6d:7e:30:20:df:3b:7c:0f:4c:04:16:90:8c:64:f9:5d:
         e8:36:70:d5:c0:a0:3f:6d:1a:83:41:f6:4e:11:95:c3:99:a0:
         a3:06:c3:3b:a1:4c:76:25:22:2e:0b:63:32:38:41:d1:c9:9c:
         f9:1c:48:1b:69:81:63:0d:08:18:bc:bd:d9:cb:82:39:26:9c:
         51:86:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:51 2025 by rpki-client on console-fra.rpki-client.org