Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
File:                     J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json)
Hash identifier:          mKKCCeu1nzV2Iqr2T15n8zIQAmis4+985t2jXGM1BZs=
Subject key identifier:   42:5A:84:AD:B0:AC:20:9C:E3:45:D4:2F:BE:28:E4:48:FD:E4:CA:76
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Certificate issuer:       /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial:       0194BABB63F64E1EDE384A991A4D4EA3E868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
Manifest number:          0A3E
Signing time:             Fri 31 Jan 2025 05:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:30 +0000
Files and hashes:         1: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: gOX4tTVkfNGd5qFzSydP5gKls4Wo1A0tiU57bP8Ni+4=)
                          2: T_CxlSwnknQox-JCH593XHkgLvM.roa (hash: CV6mCgtIXghwvOdJmAcgD8Xq7LAE7fozTfYdfKC5Sfg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:63:f6:4e:1e:de:38:4a:99:1a:4d:4e:a3:e8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
        Validity
            Not Before: Jan 31 05:00:30 2025 GMT
            Not After : Feb  1 05:00:30 2025 GMT
        Subject: CN=425a84adb0ac209ce345d42fbe28e448fde4ca76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:34:54:f9:02:1d:72:68:0b:ea:54:cb:0c:
                    a1:cb:32:00:95:f9:91:8b:f9:bf:81:4e:d0:ad:96:
                    fa:f3:89:da:84:f5:b4:3c:3f:80:15:62:a8:1c:8d:
                    c2:10:e8:7f:23:ab:4f:0d:0f:f3:e7:14:40:d2:8d:
                    af:82:5f:f4:52:ad:2d:2a:c0:32:f7:42:ca:67:a6:
                    16:b3:81:4c:c0:6b:33:fb:81:06:3c:8d:15:25:f3:
                    0a:03:43:99:d5:d1:2f:a2:c9:88:f5:5c:78:f2:4a:
                    b4:42:d4:dc:4c:df:2a:03:e9:95:0b:f4:6d:cb:1f:
                    53:07:88:3e:c5:6a:4e:19:ca:b7:6f:e3:53:c3:24:
                    6b:e1:51:8b:eb:30:c5:5b:d7:bc:a8:a6:54:3d:42:
                    b2:60:44:ef:6a:83:ad:09:5e:25:44:c1:45:a6:c4:
                    69:bc:9f:f1:a0:8d:50:28:f3:21:5f:0d:dc:54:18:
                    1e:fb:e9:5d:b1:e8:39:3e:49:ff:11:1d:24:d3:cd:
                    56:7f:b9:43:cf:51:d3:e6:6d:ed:63:37:c6:43:e6:
                    ad:4e:b0:c7:40:7f:52:f0:92:ee:3e:e8:fd:a7:2b:
                    9b:b2:58:7f:b6:a8:f7:73:d5:b8:30:16:7e:9c:02:
                    2d:de:fe:0f:f6:81:14:30:73:71:6f:e9:df:d9:31:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5A:84:AD:B0:AC:20:9C:E3:45:D4:2F:BE:28:E4:48:FD:E4:CA:76
            X509v3 Authority Key Identifier:
                keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8a:5c:c5:9e:9b:65:4e:8c:02:c1:a9:38:95:6e:04:50:3b:
         34:2c:fa:0f:51:36:24:b9:90:59:de:2d:a2:57:54:ed:26:11:
         72:f3:14:49:48:51:11:41:8d:31:32:da:a0:ce:65:d0:b5:10:
         d6:bc:38:28:94:43:68:fb:4b:5b:5b:09:3b:72:90:70:5b:9b:
         69:1d:33:aa:82:68:fd:14:0d:83:43:84:a4:78:0a:3d:8f:1f:
         65:cf:6b:01:e6:09:ff:a2:0e:f4:d0:b3:1e:45:c3:e4:5e:a7:
         14:49:75:17:02:d5:bc:e1:23:1c:8d:5b:bc:2a:d2:64:d1:f7:
         4f:78:42:a9:8b:10:4b:93:ca:af:11:d9:2a:e1:a7:19:67:8e:
         8a:10:b2:f7:d8:b4:50:f1:d2:54:aa:86:d4:fd:14:ef:1a:7d:
         5e:68:f2:63:7e:e4:f6:e4:d8:4f:9d:f6:fe:d5:68:f5:bc:3a:
         31:49:d5:ae:f6:37:58:f1:72:4c:61:0e:79:b2:45:97:5d:57:
         01:0c:cb:71:5a:62:c4:30:c9:a2:55:4c:93:48:67:29:e2:f5:
         2e:f1:f7:d7:08:87:8b:47:ce:63:dc:e6:2d:65:89:2a:67:42:
         e0:5d:c3:4f:47:34:39:e2:4d:e1:51:33:2f:d8:83:29:0e:3e:
         b4:b4:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:57 2025 by rpki-client on console-fra.rpki-client.org