Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
File:                     OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json)
Hash identifier:          uXAnzuG5eisqCMPdCn2rpmVWWDYAWKAM/mV08LFJ0IM=
Subject key identifier:   4D:EF:9A:69:3B:08:E4:43:E2:10:5F:39:5F:85:BE:C5:09:C4:9D:B1
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Certificate issuer:       /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial:       0194BB604B8021DC9E076A35480A8564E44D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
Manifest number:          137F
Signing time:             Fri 31 Jan 2025 08:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:37 +0000
Files and hashes:         1: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: CyVMPLqck3V7K0fWVDOs+31eAORw6txM6+0Cpd9VIgs=)
                          2: QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa (hash: MbjZHir8r+jpFNjo1IiwrrSwZjkeJw6BZ6V05J/2V+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:4b:80:21:dc:9e:07:6a:35:48:0a:85:64:e4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
        Validity
            Not Before: Jan 31 08:00:37 2025 GMT
            Not After : Feb  1 08:00:37 2025 GMT
        Subject: CN=4def9a693b08e443e2105f395f85bec509c49db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:d1:6c:c0:0f:46:5a:c3:44:d9:bf:45:85:
                    ce:50:7d:7e:07:85:08:ef:43:dd:fa:aa:34:42:f4:
                    cd:ad:53:a3:02:e4:b6:12:6a:66:0b:66:0f:59:c2:
                    72:61:62:1a:bd:01:ae:7c:99:39:39:86:5d:7d:80:
                    78:28:ff:46:44:5d:b1:48:9e:29:67:2c:89:5b:7f:
                    f0:b4:f9:da:a1:2b:6f:2e:f8:8e:df:6c:5b:bc:84:
                    09:cc:d4:48:87:dd:ea:dc:c7:37:e7:da:c1:5d:94:
                    b9:9f:29:5e:52:b8:76:f4:2f:c5:c4:93:e7:0a:83:
                    bf:c2:b0:19:5a:6c:0a:41:de:22:e2:4e:8c:5a:83:
                    f8:60:87:58:8b:32:f9:42:32:64:d1:34:66:ac:64:
                    e6:23:6b:38:27:88:20:88:3f:0e:09:01:16:1d:01:
                    b8:a3:85:11:2e:ba:d8:d1:11:25:c2:2f:22:01:2b:
                    f9:a0:4d:33:60:43:82:48:6a:07:64:2e:2c:be:a4:
                    d1:a3:bc:b2:e2:a6:10:00:f1:5c:cb:a3:b0:cc:cd:
                    90:4a:43:67:3e:6c:90:d4:22:af:76:a5:6d:aa:ca:
                    7a:89:ec:e1:dc:ac:5c:04:4e:8c:bf:a0:0a:40:53:
                    9c:e9:46:5c:93:9a:0b:40:17:cd:a7:a9:b9:99:8b:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EF:9A:69:3B:08:E4:43:E2:10:5F:39:5F:85:BE:C5:09:C4:9D:B1
            X509v3 Authority Key Identifier:
                keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a9:db:23:1a:1c:3a:55:33:b8:b6:65:e3:ff:b8:e0:69:4b:
         0a:31:c5:43:d4:e8:f2:1c:8b:78:aa:99:ca:f8:6a:64:41:69:
         d5:98:13:27:a8:07:c5:2b:e4:33:7b:2b:2d:84:fc:b9:b4:9b:
         07:66:8d:31:c2:9b:d5:dc:ba:7b:66:69:63:1e:f5:14:bc:36:
         10:e5:f2:02:1f:cc:bf:44:bc:61:a7:4e:6b:5a:cd:fe:b1:fc:
         47:cb:1c:55:0b:5d:c6:b5:99:fb:b0:ca:ef:1b:70:a6:53:4a:
         4d:5e:9f:bf:fb:cc:7d:a7:93:da:19:a2:97:54:2f:3c:fd:12:
         30:06:fc:0e:6a:57:97:38:6c:75:f9:c1:a6:18:43:23:ba:1e:
         3f:50:c6:d0:d6:a0:7c:3f:67:0d:ce:cb:7a:db:03:56:28:06:
         0e:f6:59:00:c6:b2:f6:5e:b7:a1:36:79:9f:45:6f:e5:60:eb:
         cf:a0:63:95:3e:16:bf:f3:cd:8c:f3:0b:f1:0c:88:0a:e7:d5:
         14:ce:78:fc:77:c2:77:47:db:fb:ee:94:fd:e7:b5:06:b1:86:
         68:ea:d7:96:bb:42:c8:21:0b:aa:cc:59:bf:08:08:66:34:bf:
         13:c2:bb:7e:93:30:69:4f:8c:c2:61:ca:e0:7f:d1:1c:27:86:
         53:ba:ae:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:33 2025 by rpki-client on console-fra.rpki-client.org