
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
File:                     Fi14JJtyG00s6M9t_PvEQiITrJ0.mft (raw, json)
Hash identifier:          tNR5D+PFazSlCj5A5mSYRIxA2dnTCFFWM7uo4bIjSkQ=
Subject key identifier:   22:1F:6E:A8:54:5A:B6:05:90:4A:13:AF:50:6F:EC:C1:A7:AE:13:C4
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Certificate issuer:       /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial:       0194BB96EE3EB1D2EE08E83C263FD930AAB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 09:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:18 +0000
Files and hashes:         1: 1-OxGWMnguhulz6f31kCb1mmRHrM.roa (hash: SvBOg3Xrt3LXP7jg7xDbyxKXVwwahdO0dORGRkeHvnw=)
                          2: Fi14JJtyG00s6M9t_PvEQiITrJ0.crl (hash: 8eUqBYmG/nUfOigrFpGu73q7clBpUfn4Qw0k/+KcoiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:18 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:ee:3e:b1:d2:ee:08:e8:3c:26:3f:d9:30:aa:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
        Validity
            Not Before: Jan 31 09:00:18 2025 GMT
            Not After : Feb  1 09:00:18 2025 GMT
        Subject: CN=221f6ea8545ab605904a13af506fecc1a7ae13c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b4:12:d5:05:70:f4:7d:23:87:68:b0:75:02:
                    79:c4:14:f2:cb:99:90:f0:b1:c0:59:bf:c5:03:2d:
                    0e:30:f5:89:ba:2e:a1:54:4a:b8:74:fc:27:11:86:
                    2e:de:e8:08:c0:74:82:59:a6:ef:e6:4b:fe:92:fd:
                    a3:f5:d2:1b:8e:7d:c1:7d:54:42:74:f1:aa:41:1e:
                    43:f8:dc:84:7a:7e:73:41:3a:c8:5f:a5:1d:f2:54:
                    5a:e4:0d:ef:65:bf:76:8b:6d:7b:6c:b7:2d:a0:e2:
                    74:32:a0:3b:d4:e1:28:4e:27:a9:b6:41:50:41:98:
                    e1:2d:8f:2e:2d:e8:d3:b2:df:28:02:46:50:49:da:
                    4b:81:03:02:6c:3e:3f:05:b7:86:90:29:94:1a:08:
                    56:16:96:fc:f6:6b:03:b4:0b:cd:9e:51:5d:74:2c:
                    ec:80:15:ec:b8:8a:86:dd:a0:a6:26:cc:6b:88:0d:
                    db:bf:cb:98:09:4a:42:8f:f1:97:b5:bc:55:b4:51:
                    11:7f:b0:2d:b3:0a:d1:a5:f0:c5:e5:c9:e6:f5:b2:
                    66:05:8f:89:7d:b6:c8:bc:ee:ec:33:11:a5:69:0f:
                    24:4b:a5:e8:33:62:11:bb:77:e8:23:c0:11:2b:0c:
                    86:51:de:0e:fb:91:7c:b4:22:08:49:01:48:14:4e:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1F:6E:A8:54:5A:B6:05:90:4A:13:AF:50:6F:EC:C1:A7:AE:13:C4
            X509v3 Authority Key Identifier:
                keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         28:ce:f9:27:ba:0b:aa:99:82:f5:2f:c6:44:51:49:e9:5c:53:
         66:a8:ee:5d:f2:a0:45:a7:0e:36:2d:e3:e3:9c:f1:4a:e1:ae:
         96:c7:db:22:1e:e1:5b:0a:bc:b0:80:b5:d2:cf:c6:1a:1b:6c:
         e3:37:c7:95:35:4f:14:5f:95:79:d7:ea:a9:29:b8:05:46:17:
         0e:90:89:7a:39:04:7a:ba:ef:8c:13:e0:ae:77:a7:28:fc:c5:
         81:cb:16:65:d3:f6:38:12:1e:a3:09:44:af:24:c9:dc:03:57:
         2a:c0:3d:a1:d9:18:94:4a:16:5a:af:ea:34:36:92:b3:f7:c9:
         b5:05:2d:94:83:e9:86:45:60:5e:47:3d:c6:f4:bc:4a:63:8c:
         32:1e:67:25:16:25:5e:e2:ee:b8:ae:2f:ca:0d:c1:f5:bf:84:
         f8:36:95:6d:17:83:21:73:69:c6:bf:e2:67:f3:ec:a1:93:53:
         98:5a:95:99:05:86:30:f0:42:be:ac:1d:26:59:43:e8:74:81:
         79:bf:7b:92:64:23:68:4f:b2:1f:8a:b8:84:c0:7d:3e:ae:0d:
         27:35:a0:86:6e:87:31:1f:b4:50:ec:44:b2:00:be:3f:77:1d:
         fd:ba:ca:50:40:24:f7:bc:8e:0a:9f:6d:de:5c:87:d4:81:1f:
         1e:a3:e3:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lu4+sdLuCOg8Jj/ZMKq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmQ3ODI0OWI3MjFiNGQyY2U4Y2Y2ZGZjZmJjNDQyMjIx
M2FjOWQwHhcNMjUwMTMxMDkwMDE4WhcNMjUwMjAxMDkwMDE4WjAzMTEwLwYDVQQD
EygyMjFmNmVhODU0NWFiNjA1OTA0YTEzYWY1MDZmZWNjMWE3YWUxM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+7QS1QVw9H0jh2iwdQJ5xBTyy5mQ
8LHAWb/FAy0OMPWJui6hVEq4dPwnEYYu3ugIwHSCWabv5kv+kv2j9dIbjn3BfVRC
dPGqQR5D+NyEen5zQTrIX6Ud8lRa5A3vZb92i217bLctoOJ0MqA71OEoTieptkFQ
QZjhLY8uLejTst8oAkZQSdpLgQMCbD4/BbeGkCmUGghWFpb89msDtAvNnlFddCzs
gBXsuIqG3aCmJsxriA3bv8uYCUpCj/GXtbxVtFERf7AtswrRpfDF5cnm9bJmBY+J
fbbIvO7sMxGlaQ8kS6XoM2IRu3foI8ARKwyGUd4O+5F8tCIISQFIFE5AIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIfbqhUWrYFkEoTr1Bv7MGnrhPEMB8GA1UdIwQY
MBaAFBYteCSbchtNLOjPbfz7xEIiE6ydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmkxNEpKdHlHMDBzNk05dF9QdkVRaUlUckowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iY2JkMDMtZDIzMS00ZDMzLWIzYzUt
OThmYTgyNzE4NmE5LzEvRmkxNEpKdHlHMDBzNk05dF9QdkVRaUlUckowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iY2JkMDMtZDIzMS00ZDMzLWIzYzUtOThmYTgyNzE4NmE5
LzEvRmkxNEpKdHlHMDBzNk05dF9QdkVRaUlUckowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKM75J7oL
qpmC9S/GRFFJ6VxTZqjuXfKgRacONi3j45zxSuGulsfbIh7hWwq8sIC10s/GGhts
4zfHlTVPFF+VedfqqSm4BUYXDpCJejkEerrvjBPgrnenKPzFgcsWZdP2OBIeowlE
ryTJ3ANXKsA9odkYlEoWWq/qNDaSs/fJtQUtlIPphkVgXkc9xvS8SmOMMh5nJRYl
XuLuuK4vyg3B9b+E+DaVbReDIXNpxr/iZ/PsoZNTmFqVmQWGMPBCvqwdJllD6HSB
eb97kmQjaE+yH4q4hMB9Pq4NJzWghm6HMR+0UOxEsgC+P3cd/brKUEAk97yOCp9t
3lyH1IEfHqPjtg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:59 2025 by rpki-client on console-fra.rpki-client.org