Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
File:                     ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json)
Hash identifier:          J0UXabTAr6ebemq6M5PNDbMvXNd8PbF8FZSP6UWzfuc=
Subject key identifier:   85:88:B0:C8:95:1E:FF:B0:D2:1D:D1:31:3C:90:04:AA:A8:C9:57:74
Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
Certificate issuer:       /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Certificate serial:       0194BABB94009075E210DCF60CDD95E4B9A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
Manifest number:          05E8
Signing time:             Fri 31 Jan 2025 05:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:42 +0000
Files and hashes:         1: Egv_COpkQ4qE0m0lj_BQmNwIMRA.roa (hash: 7o6c3PTeF8AIq/25Q6USnosQEeLS7MscdEHZbwRxm6I=)
                          2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: GkPaxtxigrUwmMu9QWqMpXxTFDLJ6+8ejn6QwYz1/Ps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:94:00:90:75:e2:10:dc:f6:0c:dd:95:e4:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
        Validity
            Not Before: Jan 31 05:00:42 2025 GMT
            Not After : Feb  1 05:00:42 2025 GMT
        Subject: CN=8588b0c8951effb0d21dd1313c9004aaa8c95774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:5d:6b:39:3d:6e:01:6f:2c:a5:ad:f9:a1:
                    da:43:42:b0:b0:6a:44:c1:ec:be:e9:17:85:cc:e8:
                    e6:23:ae:33:d2:7a:24:f1:15:3b:f9:76:7b:e2:d9:
                    09:04:1e:f5:3c:73:16:20:d8:cb:40:c2:82:19:0c:
                    17:b9:4b:a6:cb:08:e1:6d:b0:4e:71:55:57:ab:c8:
                    3d:fa:17:c3:68:20:d4:1e:39:ee:ab:af:c0:5f:fa:
                    f1:71:0a:12:bc:43:b9:b8:51:91:ab:0a:92:58:6e:
                    99:a6:4b:10:90:88:45:c1:bf:1c:da:ba:62:5b:06:
                    e1:99:21:9a:d3:da:3f:19:93:90:fa:e5:b2:13:5b:
                    93:aa:95:ef:04:b4:75:f1:50:6d:83:42:a2:7c:d2:
                    cd:4a:fe:09:a8:2e:41:bf:32:59:1b:de:8b:5d:de:
                    9e:7a:cb:71:10:10:ba:98:15:a9:f4:9d:fc:ee:62:
                    5a:7b:13:d7:6d:44:3e:1d:7d:8f:60:64:1e:90:cb:
                    a7:20:d1:80:89:bf:cb:c4:5e:12:cf:15:89:f4:d1:
                    f2:ef:bf:82:52:a7:d5:93:b8:ff:72:82:d2:6e:58:
                    a6:30:0e:b4:84:71:64:96:16:82:65:2b:27:fd:01:
                    e0:82:07:84:a4:a5:09:79:f8:f8:3b:b3:ea:a2:08:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:88:B0:C8:95:1E:FF:B0:D2:1D:D1:31:3C:90:04:AA:A8:C9:57:74
            X509v3 Authority Key Identifier:
                keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:cb:a7:64:21:56:01:1d:48:44:1c:e7:8e:af:3f:93:76:7a:
         5e:f7:f7:55:f7:56:69:23:45:eb:5a:1e:1e:2e:b8:3c:ce:18:
         3a:b8:d4:f2:d9:05:88:da:0f:15:f3:24:22:9a:62:2f:35:e4:
         07:52:ef:eb:fb:d3:2f:a5:15:d2:52:c5:c5:65:f1:71:8e:21:
         0e:5d:22:f1:92:8d:8a:3c:5f:99:fb:40:9d:79:b2:90:af:1b:
         b3:d0:4f:79:ba:22:ca:7f:b9:0a:e3:3f:a2:2a:9d:5d:c5:93:
         30:98:f4:93:9c:8f:37:1d:d9:21:f7:1e:55:93:27:a9:b6:85:
         f8:1c:56:ad:e1:e3:9b:3c:34:e7:8f:b8:2b:b1:cd:9b:5f:36:
         55:af:7b:a6:21:c1:11:aa:fa:68:a3:c0:27:73:f9:fe:84:27:
         a4:e8:71:9d:82:35:09:cb:e3:4d:1c:d3:6d:99:75:11:9f:7e:
         44:78:e2:05:ee:4e:a7:8c:5e:de:b1:64:42:b0:a8:a4:84:3d:
         87:31:95:d3:2c:98:98:a2:b0:d1:93:38:98:17:4b:1e:f2:69:
         5c:58:d8:62:5e:5e:e1:ae:df:4c:5a:a6:54:69:5d:bf:b0:78:
         84:b0:4a:ae:e0:51:1f:cd:ac:b1:11:22:0f:5c:b3:58:de:63:
         fc:8d:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:23 2025 by rpki-client on console-fra.rpki-client.org