Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File:                     9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier:          Dt0ju4BkW8J+1FwCu/WLy29lvjPmzy9LLFwy7ckWkY0=
Subject key identifier:   D2:F1:9E:E7:30:21:D3:FF:C8:F8:3B:D3:96:59:15:64:E1:4E:59:8E
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer:       /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial:       0194BAF2593FA33D4C60E958264857D08381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number:          03AB
Signing time:             Fri 31 Jan 2025 06:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:32 +0000
Files and hashes:         1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: DipVLqH6eRPVW1ceZJZ0JRdFOG0GymLBSSRt5E2PVD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:59:3f:a3:3d:4c:60:e9:58:26:48:57:d0:83:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
        Validity
            Not Before: Jan 31 06:00:32 2025 GMT
            Not After : Feb  1 06:00:32 2025 GMT
        Subject: CN=d2f19ee73021d3ffc8f83bd396591564e14e598e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e7:80:66:0d:35:21:f6:cc:df:6d:ac:7d:79:
                    89:0d:47:08:17:e5:35:a1:5d:c7:e0:e5:24:32:ee:
                    ec:14:43:14:37:d6:9f:7c:d9:3f:7f:6e:f3:62:45:
                    cf:9e:cf:d8:8f:60:0e:01:35:cf:fd:69:60:84:72:
                    bc:73:5d:d3:c9:37:92:ad:4f:4d:f6:66:9a:c0:79:
                    ea:52:c7:4a:37:3a:b0:4c:cd:93:19:b7:33:a0:16:
                    cd:52:5b:4a:b0:aa:9d:87:a5:f0:71:2a:a6:77:3b:
                    f6:b7:07:36:29:e8:97:b5:b5:e3:b3:b7:89:38:42:
                    e3:f6:89:ce:36:25:81:b7:a3:b2:fc:bc:2a:14:bd:
                    14:23:30:3b:f2:c2:f8:eb:43:20:46:f2:58:33:4a:
                    05:8a:9c:4f:6e:0e:41:df:fa:56:49:75:5d:ea:20:
                    a6:30:7b:ab:16:bd:3c:b3:89:cf:5b:df:7d:69:d8:
                    e7:cc:4e:e1:08:71:39:7f:b2:f8:86:c2:50:11:c7:
                    9f:ba:90:72:26:66:d8:43:ef:a2:14:97:03:31:ea:
                    9c:47:0b:d7:36:ce:78:2e:d0:91:67:c8:06:21:4e:
                    68:ba:72:7d:29:db:a0:84:f1:0e:9f:af:57:61:22:
                    46:e6:2d:7a:e4:0c:35:ad:82:57:f8:0f:a5:e2:b0:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F1:9E:E7:30:21:D3:FF:C8:F8:3B:D3:96:59:15:64:E1:4E:59:8E
            X509v3 Authority Key Identifier:
                keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d2:8d:4c:14:71:48:e7:3c:9a:5d:8d:79:32:99:37:58:68:
         14:74:04:8e:02:25:9f:a6:a5:3f:9e:be:21:c6:cb:59:f6:c0:
         91:bb:75:c7:4e:b1:06:29:68:3b:13:31:7e:b2:57:64:b2:a5:
         54:44:65:4d:a7:59:46:8a:d0:e9:05:29:b6:b3:95:be:6b:d3:
         9f:5e:3c:33:45:b9:a5:5e:0e:c3:80:f4:35:6f:a2:ae:65:3a:
         d3:3c:98:40:00:07:4d:fc:45:5a:5c:b4:2f:ba:d9:23:d3:fe:
         d2:40:08:03:c6:bb:17:47:6e:52:a9:e5:47:f5:24:ac:d7:a8:
         de:24:c1:60:91:69:c9:ab:83:cc:2a:d1:4d:15:c9:ab:80:8c:
         a1:d6:6d:63:71:93:48:6e:1c:ec:c8:49:58:c6:db:64:44:f3:
         8a:40:68:5c:df:5b:e8:af:bd:8b:27:20:48:09:e5:b4:1b:a9:
         36:4c:94:79:c6:0c:af:fb:15:7b:bb:a7:ba:cc:ee:19:5b:f3:
         3c:dc:0d:b7:af:95:df:e4:08:77:15:f3:e7:50:ce:7f:b0:40:
         f0:26:89:6f:01:f3:f8:3a:34:45:00:67:28:51:d4:04:d7:7e:
         18:14:56:db:a3:35:26:fb:20:43:a1:bb:29:43:bc:b5:1c:32:
         80:b2:c1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:05 2025 by rpki-client on console-fra.rpki-client.org