
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
File:                     VyWt0r_z5miuGFVL7r8xojpp3aU.mft (raw, json)
Hash identifier:          /FWn3ZJbcui3HNmyUDg3r0XLKn5MFZ2IrSr/szQROm4=
Subject key identifier:   AD:05:FD:4D:05:4F:EC:83:B3:57:6A:E4:8F:1B:F4:E9:D9:0B:DF:15
Authority key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Certificate issuer:       /CN=5725add2bff3e668ae18554beebf31a23a69dda5
Certificate serial:       0194BA8440B64EB3834059083D75B504C723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 04:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:16 +0000
Files and hashes:         1: VyWt0r_z5miuGFVL7r8xojpp3aU.crl (hash: wnsgBaA9jLmKeXXNiqcRAP1yKWmrA8PxhZUdM4bq/Rw=)
                          2: t0Kv0MY22kEd7yEkvuzKVP6NwDY.roa (hash: c5cNtbv2n0bwtPtYnHvGMxhfp9rjmRcTS2FRbov2ZW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:16 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:40:b6:4e:b3:83:40:59:08:3d:75:b5:04:c7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5725add2bff3e668ae18554beebf31a23a69dda5
        Validity
            Not Before: Jan 31 04:00:16 2025 GMT
            Not After : Feb  1 04:00:16 2025 GMT
        Subject: CN=ad05fd4d054fec83b3576ae48f1bf4e9d90bdf15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:a7:0c:5a:18:d8:c0:93:5c:d4:fc:65:e6:
                    65:7b:89:98:9b:c2:d4:29:75:76:56:37:bf:6a:f3:
                    4b:06:86:1f:cc:96:31:1f:fa:72:07:23:2b:3b:1e:
                    fe:db:32:76:c3:aa:8a:e7:72:d8:de:c4:16:ca:fd:
                    99:0e:20:12:3b:28:3f:56:08:8e:4c:f3:c2:a1:c9:
                    46:58:9e:e7:80:3a:8f:a6:32:6a:eb:d8:92:ad:37:
                    ab:78:67:b0:28:66:df:73:6d:53:eb:82:66:ad:30:
                    d1:14:62:c1:b3:a7:b8:c5:b0:69:a4:33:86:4b:d2:
                    bf:2a:85:ae:a8:36:06:0c:20:fd:bc:a1:88:e8:09:
                    85:6e:f0:f2:15:9a:ee:a5:4d:6c:50:e0:97:cc:ef:
                    95:56:8c:a9:50:46:b3:4a:53:e8:f4:56:1a:3a:72:
                    49:6e:62:2a:0a:b7:b2:b4:74:3b:55:37:6d:ca:00:
                    98:aa:bd:fa:52:63:e7:fc:77:fb:49:07:84:01:06:
                    f3:97:cb:83:65:7e:db:5e:3e:64:9e:ef:e3:cf:06:
                    26:c7:2b:0b:17:42:a5:b0:eb:ad:86:94:ff:f1:1d:
                    39:09:8d:71:6c:a1:04:b6:2c:ee:c8:16:69:fd:28:
                    64:e5:77:01:44:92:5b:a0:75:ca:69:4f:6f:a2:53:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:05:FD:4D:05:4F:EC:83:B3:57:6A:E4:8F:1B:F4:E9:D9:0B:DF:15
            X509v3 Authority Key Identifier:
                keyid:57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:1f:7d:5a:13:db:f0:c6:64:87:0b:f2:e7:27:4e:1a:43:
         3a:34:14:f5:b3:35:4e:d6:2f:ed:14:4e:35:a7:20:d5:1b:76:
         dc:ed:88:d5:e2:b6:a8:e9:d6:5c:ef:f2:d1:8d:91:a6:70:4b:
         c8:78:bf:66:d3:ea:68:6f:ab:3c:bd:de:54:13:0a:ca:45:98:
         05:da:24:81:3b:06:1a:35:64:78:ff:1d:fa:36:77:68:50:0d:
         b7:3f:eb:1d:7b:68:fa:74:3e:60:e4:80:9b:75:1b:30:46:e5:
         84:91:cc:1a:a5:73:17:8c:f9:ec:88:89:0d:17:2a:dd:73:26:
         13:ce:e2:0f:60:ac:65:cd:b0:72:c8:a9:73:77:7a:86:ff:a6:
         b0:94:49:b5:3a:da:9b:d3:ba:a1:eb:a5:58:ec:f4:07:38:3f:
         24:40:88:f0:09:26:69:bf:7c:74:72:a9:d8:30:c5:6a:6b:a5:
         d9:98:ec:b7:fe:2c:a4:cc:e3:b5:15:56:99:29:36:17:a4:9e:
         3f:eb:3d:2d:eb:c7:9c:61:e8:3a:13:cc:96:be:30:b0:b0:3f:
         09:0a:dd:f0:d8:ec:5d:ec:0e:13:1d:72:eb:45:50:b2:f3:d7:
         83:30:c3:89:7f:2e:2d:3c:2c:4a:18:ab:fa:52:85:e0:d7:a1:
         e5:f4:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:22 2025 by rpki-client on console-fra.rpki-client.org