Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
File:                     EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json)
Hash identifier:          GopvOPI7YeF5FXEXKz/b8AwVEiFktPbGVAYyCjFKhzs=
Subject key identifier:   1E:79:69:6D:2E:18:1B:72:4C:91:5A:EB:36:3F:97:03:F1:50:5B:AC
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Certificate issuer:       /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial:       0194BB9703CB4DDD52344AAAE537029BDB4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 09:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:23 +0000
Files and hashes:         1: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: W/7EM5jkqGHtKWzOneUOT9z7hJo/pXWVXwnWKmmJrH0=)
                          2: sT8bdOMkOBuJcpLSNUJLIn8pNo4.roa (hash: vHy12CSxlbxHZ+bWYL5tzLyPAoKn74EaWNP0Myp+xyg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:03:cb:4d:dd:52:34:4a:aa:e5:37:02:9b:db:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
        Validity
            Not Before: Jan 31 09:00:23 2025 GMT
            Not After : Feb  1 09:00:23 2025 GMT
        Subject: CN=1e79696d2e181b724c915aeb363f9703f1505bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0f:ef:d0:07:82:90:fb:f2:3b:5b:c7:12:13:
                    34:d1:35:42:7f:7c:ef:2a:0b:bd:d3:ec:63:b4:bf:
                    f5:74:e8:28:c2:aa:6c:64:42:23:7f:00:8a:ab:f1:
                    14:b1:32:95:39:06:3a:d7:61:16:c8:23:8f:31:1d:
                    92:cf:47:98:a6:18:56:8a:65:45:c9:2d:29:1f:a2:
                    ca:9f:a0:ee:44:dd:67:ea:b7:39:53:5d:9d:20:28:
                    25:35:88:bf:9e:72:a3:3d:10:53:fe:98:2e:1e:ff:
                    9b:5d:ce:b2:4d:a1:3c:5a:66:c2:8f:94:11:32:87:
                    58:83:60:a5:5a:b8:ca:3a:80:af:e7:6b:f5:43:ed:
                    88:27:35:e3:11:01:d0:d7:0a:35:fc:bc:0a:bd:ed:
                    ff:85:c9:34:c3:89:9c:6c:df:ab:ec:c6:39:32:da:
                    26:74:b7:75:d2:40:c0:34:9d:70:70:66:06:c7:f9:
                    5f:d7:59:6f:5b:d6:dd:00:5c:4a:0e:6f:6a:fe:70:
                    66:18:88:97:c1:9a:2a:be:88:68:9d:0a:6c:84:e5:
                    9e:67:cc:b6:b1:14:5d:a1:ac:b9:82:5f:b4:ba:b3:
                    a7:b5:0d:e2:bd:a6:cb:d1:81:07:c3:1a:9c:50:65:
                    b9:96:33:ef:51:e0:e0:e9:dd:47:d2:80:18:b7:1a:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:79:69:6D:2E:18:1B:72:4C:91:5A:EB:36:3F:97:03:F1:50:5B:AC
            X509v3 Authority Key Identifier:
                keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:05:7b:06:b6:5f:2c:0a:de:ac:a2:50:22:9b:da:47:f2:
         9d:c3:5b:9e:11:66:fc:15:09:10:30:49:b4:01:0e:ba:c6:2f:
         b7:ee:e4:98:1b:00:32:af:1b:cd:a5:5a:b5:16:a7:a8:e9:e8:
         a9:d8:6d:c8:89:61:a9:c9:0e:90:9a:08:1a:f4:36:a3:51:91:
         62:2d:09:2a:05:8c:26:1b:93:4f:8e:9e:25:db:9b:20:1d:cf:
         e1:54:eb:5a:af:35:d7:57:a4:cc:e3:f1:44:05:f8:de:41:bb:
         6a:e5:d2:e1:fc:cf:64:ea:3b:86:10:90:03:c3:4f:44:25:c1:
         1b:49:66:4f:73:57:33:b6:91:d3:80:4a:a5:7a:bd:09:11:9f:
         58:56:de:53:ba:53:de:c9:b3:2c:21:53:5e:bf:a6:d6:79:cf:
         91:f6:eb:21:25:63:ea:aa:70:e0:b7:fc:f7:4a:db:36:f6:0c:
         ee:f5:08:92:f3:45:eb:48:bf:60:02:31:27:47:61:e7:d8:82:
         3f:2c:e1:8f:34:78:d6:b5:ed:da:b4:2d:0e:bf:dc:de:12:24:
         40:28:ac:53:f1:a8:85:cb:3b:29:20:83:09:37:ee:c1:aa:73:
         57:69:a0:99:b6:d9:9e:bb:c2:c6:1c:47:63:0c:5b:b2:85:73:
         63:ff:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:00 2025 by rpki-client on console-fra.rpki-client.org