
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
File:                     bFMRpXzPy1E1Jh_zm9GaEV7z588.mft (raw, json)
Hash identifier:          PnkCoDlHwF99+CBrGCp0eM+ijosCIfIlVSGniD1EG6g=
Subject key identifier:   55:39:9A:3E:3E:44:48:E8:DA:68:FD:CC:DD:14:BD:C7:4B:E6:73:DD
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Certificate issuer:       /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial:       0194BA842D5DC13706EF0271078DEC63060D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 04:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:11 +0000
Files and hashes:         1: YJycfGdeJ164QrjQ89Pquxal_pc.roa (hash: fDEXe9y2Vppryd4ojiqVG2aN2es1Vh/q/2xftzkXWbQ=)
                          2: bFMRpXzPy1E1Jh_zm9GaEV7z588.crl (hash: soAPoc9ZrmuW8ktru53jdYmmSbSiSp5o6mEu/H9Rt4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:11 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:2d:5d:c1:37:06:ef:02:71:07:8d:ec:63:06:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
        Validity
            Not Before: Jan 31 04:00:11 2025 GMT
            Not After : Feb  1 04:00:11 2025 GMT
        Subject: CN=55399a3e3e4448e8da68fdccdd14bdc74be673dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:08:43:4d:44:5d:59:5e:f4:07:d0:b3:31:
                    2f:eb:f6:ac:7d:a8:70:72:fe:38:bb:fa:2d:d7:2e:
                    99:84:3a:20:e5:3b:a5:8e:8a:14:ed:37:23:df:9d:
                    a3:d6:2a:fb:58:e6:a7:10:5e:a0:fe:61:65:37:a8:
                    89:62:f5:8a:f3:5c:a7:62:16:a2:b5:97:2b:f7:4f:
                    9d:8d:fb:50:9a:7c:56:cb:a8:3b:e3:81:44:cc:b3:
                    10:5f:33:a6:69:ae:70:27:ac:8c:dd:5a:d5:83:1f:
                    59:8d:b5:11:96:68:df:8d:08:fb:d5:5f:71:1a:d9:
                    8d:fc:dc:d5:66:fd:2c:79:23:32:f6:95:cf:57:55:
                    a3:26:fc:fe:3f:80:b4:a2:93:65:36:b3:a7:70:0b:
                    69:93:e0:f4:e7:8c:de:c7:16:bd:20:57:dc:39:c0:
                    6f:cf:77:93:72:c9:b1:27:30:80:53:3d:fe:b3:82:
                    cc:a5:31:ba:7a:aa:e8:45:b1:78:7c:e9:ac:41:ad:
                    c1:bf:10:c2:c9:c1:8c:b0:a7:86:5c:6d:a9:01:89:
                    4d:a9:9e:c5:07:39:8f:bc:ab:5f:af:8b:9c:c2:1d:
                    0a:3f:55:d4:3f:0c:9b:88:16:2a:70:3a:d5:30:d0:
                    b6:d9:c2:20:e0:f7:13:a0:58:d8:df:cf:7a:ae:b8:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:39:9A:3E:3E:44:48:E8:DA:68:FD:CC:DD:14:BD:C7:4B:E6:73:DD
            X509v3 Authority Key Identifier:
                keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         9a:19:67:14:5b:5a:5d:fd:33:34:99:b0:d9:f3:4a:41:cf:77:
         66:c5:cf:dd:5f:98:92:f7:6a:49:4e:f0:31:be:a3:f7:fb:47:
         00:00:e1:aa:d5:8b:27:0f:41:05:ef:f6:36:9c:45:ef:f3:17:
         61:20:47:82:b3:ab:4e:60:e0:05:73:a7:16:4d:d5:7d:e5:1d:
         2d:af:3d:f9:a0:84:df:86:75:cd:79:a1:f5:2d:00:c7:ec:e4:
         4e:e3:5f:3e:fd:18:d5:44:cc:42:5f:82:b1:b6:4a:7c:e2:ad:
         92:0d:f3:15:b6:35:90:52:d0:0b:e0:00:b1:d4:27:c5:37:f6:
         18:f1:94:d5:49:96:29:0b:4f:6d:0b:b3:fa:78:b1:d1:41:67:
         ee:ba:58:c1:b5:2b:65:c1:6b:e0:84:73:f4:6b:de:fc:62:80:
         64:7c:fe:78:96:85:55:ef:80:f4:df:48:20:19:35:a2:08:cd:
         95:07:b5:8d:78:6c:87:7c:b0:b2:47:a7:87:d2:20:4d:f9:d6:
         25:f3:69:09:da:e7:0b:f6:f8:3b:fb:6c:bb:ac:8c:82:8f:10:
         a7:b9:ac:b1:34:68:43:c2:29:71:20:ad:61:0c:07:f7:0d:6f:
         ee:67:ce:65:ab:1a:98:e7:76:dc:1b:33:f7:55:eb:c1:cb:a0:
         44:d4:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:12 2025 by rpki-client on console-fra.rpki-client.org