Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
File:                     RBMe6Tam-kL_OvCmrobCxmU91XM.mft (raw, json)
Hash identifier:          CLBeYMHXWchDntmM/BWGC9nCBclCHA8nO+2OCjVnr+A=
Subject key identifier:   F0:61:FC:09:1F:D9:00:62:F1:27:BE:B3:5B:1A:1B:7D:75:16:3D:5C
Authority key identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
Certificate issuer:       /CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Certificate serial:       0194BA846887122EB3CB981FBF1D56D00C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 04:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:27 +0000
Files and hashes:         1: RBMe6Tam-kL_OvCmrobCxmU91XM.crl (hash: Y7YCjBrRd6UHZA1IgqgL03lHbRhGDgbM6LIF0dm6xLo=)
                          2: xHkJHzTD8_YsVJb1E014CGyqfNk.roa (hash: vU0FBIoesehMBLGSsYMRz2M7MHLMPr/AmIolqA/4dRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:68:87:12:2e:b3:cb:98:1f:bf:1d:56:d0:0c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
        Validity
            Not Before: Jan 31 04:00:27 2025 GMT
            Not After : Feb  1 04:00:27 2025 GMT
        Subject: CN=f061fc091fd90062f127beb35b1a1b7d75163d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:97:cc:a1:37:5d:82:9a:0a:50:79:51:8e:51:
                    7f:e3:bf:e4:5d:39:3a:cf:e2:91:3e:f8:a9:be:b8:
                    69:cd:9d:ad:c0:26:d8:f5:f5:67:e0:d5:2e:4d:0b:
                    fa:85:69:9e:cd:73:e6:69:44:e4:72:f6:70:13:d1:
                    61:58:66:62:e5:90:28:79:65:1c:2f:b8:32:75:ad:
                    22:f5:9b:ea:f4:21:28:1b:87:26:2c:21:0a:0c:7a:
                    0d:9a:e0:66:12:2f:27:9f:2d:d5:2c:56:78:fa:23:
                    89:75:98:72:aa:88:7f:b1:fa:1e:b5:36:77:22:a3:
                    5b:d2:a3:2e:88:34:96:79:38:64:30:e3:f3:96:ba:
                    8f:ec:df:f7:f7:f7:d4:8a:48:ef:7b:24:b0:68:2f:
                    08:54:76:f7:e6:6d:aa:48:e9:9d:c9:5b:30:a0:22:
                    2b:d7:b3:e5:d5:69:d4:ba:61:7c:8c:97:e3:d0:5a:
                    22:b0:86:94:3e:39:4f:da:c0:30:51:f5:0d:c9:b2:
                    2d:ef:00:2a:91:1c:91:3f:d3:bf:22:da:c0:54:e6:
                    2e:02:ed:ba:cb:f5:7e:bd:55:b3:06:58:f4:4f:3c:
                    f4:ac:89:09:c1:6d:60:f5:f9:f7:81:80:f6:32:5c:
                    e9:42:a7:bb:8c:cc:8c:88:b4:08:ed:6f:93:82:c6:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:61:FC:09:1F:D9:00:62:F1:27:BE:B3:5B:1A:1B:7D:75:16:3D:5C
            X509v3 Authority Key Identifier:
                keyid:44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:00:b5:73:2e:ee:68:88:e6:44:06:32:01:a7:ec:5e:82:92:
         fb:44:6b:5b:80:0a:c2:7d:af:ea:5a:7b:fb:fc:db:98:e6:58:
         fd:e4:a8:7b:8a:47:62:c1:f1:b5:7b:c2:fe:49:9b:45:f7:e7:
         87:50:e9:6f:ae:44:59:f1:0a:94:72:1c:c3:c4:1d:d8:31:a3:
         f0:5b:e0:16:d7:59:b9:2b:89:fd:3e:78:e6:bc:25:26:7a:dc:
         12:3f:dd:96:c4:3a:56:8a:2b:f9:4f:e0:21:5d:21:04:ae:45:
         da:6e:ea:4a:4a:18:e2:ac:3c:00:ee:a9:9a:b6:e7:69:e5:bd:
         35:09:e4:fa:11:9e:18:8c:9e:00:34:81:91:62:13:d8:4f:ed:
         0c:61:9e:bf:48:97:7d:bd:bb:46:cc:59:20:bf:dc:03:49:d2:
         8d:0f:02:e3:45:30:41:09:33:a6:1b:c7:c4:d4:ce:6a:37:dc:
         0f:a5:f7:d1:e3:be:54:33:25:12:ed:d8:11:c1:4e:af:5b:16:
         63:74:47:51:d9:33:d8:39:e4:13:28:15:b2:d6:66:2d:09:04:
         20:9a:15:4a:e3:e6:3f:6c:4a:f0:35:e7:5c:70:1a:e4:1e:d0:
         5d:e8:f6:93:d6:ba:15:95:48:1e:df:fb:5a:2f:0a:29:0b:86:
         cb:71:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:21 2025 by rpki-client on console-fra.rpki-client.org