Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
File:                     RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json)
Hash identifier:          0uBP3eoj1RWOVeZfbM8fXwZMX2/DdYHY1byHDdXCkJk=
Subject key identifier:   66:C5:B7:5E:CF:81:EE:CA:6F:C4:9C:67:02:13:DF:D1:5E:E7:D2:31
Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Certificate issuer:       /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Certificate serial:       0194BA8469FC3C3155B6E20C995A08C49C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 04:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:27 +0000
Files and hashes:         1: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: gN7jadyOcMyIPeyarRP9uliVbbmOAu7BW8xw0iF8rBE=)
                          2: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (hash: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:69:fc:3c:31:55:b6:e2:0c:99:5a:08:c4:9c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
        Validity
            Not Before: Jan 31 04:00:27 2025 GMT
            Not After : Feb  1 04:00:27 2025 GMT
        Subject: CN=66c5b75ecf81eeca6fc49c670213dfd15ee7d231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b6:45:38:87:c9:e8:90:1f:f3:6c:60:57:79:
                    77:18:c4:d9:bf:4f:30:76:43:94:a7:03:14:0a:b5:
                    d2:86:80:a9:fa:df:c4:20:39:95:9b:d8:9a:df:c2:
                    b1:37:df:d5:d1:bc:33:e0:22:30:5f:b3:b3:2c:88:
                    84:81:9f:e0:5a:d6:95:a9:a2:e7:7e:4c:3b:0b:7d:
                    e5:27:0e:dd:5a:eb:56:3f:44:44:06:b9:cf:47:fc:
                    d4:a2:00:e2:a9:f9:4b:3a:cf:11:a9:c9:a0:34:50:
                    7e:0a:ab:b2:a9:74:8b:58:cb:b3:28:c8:07:05:54:
                    cb:a8:20:0c:cd:b5:eb:41:d2:f7:36:65:76:a3:99:
                    37:63:d3:9e:7a:f0:1d:90:c6:78:3e:2c:0b:b3:a4:
                    36:bb:e3:a9:00:5a:f0:98:c0:d8:a9:74:4c:80:26:
                    b4:ed:77:9a:ab:c2:25:4b:e6:85:ad:23:13:7c:eb:
                    34:40:44:93:49:6d:d3:fd:86:74:fe:1a:dd:08:ea:
                    f9:df:11:ed:38:0c:d6:18:22:6a:d6:25:9d:86:a4:
                    2a:dc:78:35:06:38:60:de:4d:b7:37:9a:33:aa:31:
                    a6:dc:93:1d:ee:a6:42:c5:4e:e4:8f:26:bc:da:9f:
                    81:e1:fd:8b:9d:58:46:b9:ad:60:b9:51:56:57:68:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C5:B7:5E:CF:81:EE:CA:6F:C4:9C:67:02:13:DF:D1:5E:E7:D2:31
            X509v3 Authority Key Identifier:
                keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:44:73:1e:0d:0b:ae:8e:48:d1:f8:ca:1e:ab:4f:66:53:22:
         03:a7:4d:da:f1:b9:aa:db:40:de:9f:f8:13:2e:8b:d3:63:14:
         23:55:22:34:43:cd:76:ef:b0:8b:10:c0:fe:b8:b4:0d:12:03:
         7e:2a:10:ad:d5:6f:0c:e3:34:4d:94:8f:07:12:60:80:18:9c:
         87:44:09:8a:f4:c2:15:52:01:4e:56:bc:49:37:b3:0e:e5:35:
         34:50:00:76:47:56:9d:8b:bb:8a:a9:8a:ce:44:c1:9d:e5:1c:
         ba:83:bb:ba:ba:be:8d:4b:ec:02:d1:54:2e:78:5f:73:c7:82:
         96:10:d0:47:35:71:0f:d7:18:d1:f9:8d:09:30:e2:0a:6f:b8:
         bc:64:f9:31:f8:bc:1a:24:75:96:2e:51:fc:54:61:90:2a:32:
         9c:a2:b2:3b:7d:f3:2d:3d:57:36:ff:c2:05:36:cc:bd:b0:17:
         11:50:51:e2:2c:45:1f:86:f3:40:bd:b8:b9:b2:a4:55:85:0c:
         db:b1:19:a3:35:57:dd:a9:be:a0:0e:5c:e3:c2:53:3b:db:93:
         06:86:2a:ce:55:2a:34:03:2d:9c:2c:c3:c0:23:11:dd:e7:a7:
         f9:21:48:c0:c3:ad:7f:e4:79:04:57:b2:8b:73:40:ba:07:be:
         a4:27:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:53 2025 by rpki-client on console-fra.rpki-client.org