Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File:                     E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier:          ow6AX9bTN70Zlxjs3DApxl0ejoFxg5m1Kuim8Olt7g0=
Subject key identifier:   8C:00:5F:75:EE:23:2A:68:F1:00:1F:A7:B2:98:A8:CE:F8:E1:21:DD
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer:       /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial:       0194BABB205B8E2FBD2FA56C6762A5D12312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 05:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:13 +0000
Files and hashes:         1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: mIIWvjpg6ykYZodD2hZBYoA3yvkV96caBgt3KQa4eiE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:20:5b:8e:2f:bd:2f:a5:6c:67:62:a5:d1:23:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
        Validity
            Not Before: Jan 31 05:00:13 2025 GMT
            Not After : Feb  1 05:00:13 2025 GMT
        Subject: CN=8c005f75ee232a68f1001fa7b298a8cef8e121dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:ff:ec:1e:26:13:32:b9:b4:b3:5d:92:b3:
                    ca:79:89:e4:24:6c:76:df:ed:e5:c8:d2:42:2a:24:
                    b1:ae:07:b0:e5:28:1c:95:79:36:a8:55:04:98:38:
                    5d:fc:8a:ad:03:bd:4a:59:06:f5:f9:2a:15:34:bf:
                    c8:af:0d:11:da:57:b1:43:4b:6d:e9:87:99:f9:3b:
                    e7:79:a1:b8:49:ba:c9:3f:3e:07:0f:cc:62:8b:5f:
                    61:65:0b:cf:4d:15:c3:15:5b:e4:cc:92:e8:a7:80:
                    9b:6c:9e:4b:a8:c3:7f:bb:16:49:23:fa:7e:96:59:
                    eb:b3:08:d3:23:17:fc:0e:21:8d:7f:18:24:19:99:
                    c1:3a:52:6f:6d:e4:12:eb:47:85:25:47:55:22:f1:
                    fa:dc:ad:31:cb:82:0b:06:3a:e9:ac:f6:2b:07:fc:
                    b6:d1:a5:bc:28:8e:07:f1:29:10:8f:26:11:6b:67:
                    8b:66:c8:32:1f:b6:10:c3:ff:33:ee:e6:32:e0:13:
                    1b:18:4a:61:b6:f0:64:eb:7b:f1:8b:32:1c:61:8a:
                    2f:3f:90:79:80:24:07:9f:92:a6:e7:a1:90:27:9f:
                    77:77:1d:6f:41:38:6d:18:a4:b0:e1:8c:5b:91:15:
                    89:53:ed:38:a1:3d:e5:1b:7e:da:79:72:ee:61:59:
                    66:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:00:5F:75:EE:23:2A:68:F1:00:1F:A7:B2:98:A8:CE:F8:E1:21:DD
            X509v3 Authority Key Identifier:
                keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1b:76:1d:51:49:8d:78:11:a9:b1:45:9d:2c:88:9e:3c:11:
         d4:94:ee:80:7f:ce:ff:90:8a:0b:43:a2:3c:18:bf:21:69:95:
         f1:10:74:97:9d:a6:49:36:a2:b9:c1:fe:31:ac:5f:06:cf:4b:
         cf:ec:23:e2:53:26:8e:9c:a6:d6:5e:ce:51:1e:28:d4:be:54:
         7d:e5:36:e7:d3:fc:1f:54:1a:74:ad:6f:1a:01:0d:ea:6f:8d:
         fe:41:bb:35:d6:ca:63:2a:88:bc:24:9e:ec:b4:b8:11:19:0e:
         10:fc:91:3b:43:87:51:80:a5:7c:74:a6:ac:fa:49:a5:aa:18:
         de:b9:e6:76:cd:c6:a2:a5:ef:5d:15:e6:9d:c5:86:cf:75:96:
         cd:b4:c4:cc:f8:44:3e:91:21:c7:0b:a2:15:8e:b6:55:da:75:
         f5:4e:09:fa:36:de:e9:d4:63:84:c9:6b:ae:8c:d6:e2:74:08:
         0c:a1:c5:1f:69:c9:0d:5d:b5:ec:a9:32:4f:91:09:82:58:c9:
         f9:e1:20:c7:cc:c2:d7:9d:a8:26:e5:ba:92:84:c0:37:f2:7c:
         88:a9:57:09:b6:eb:d8:cc:2e:9a:c3:3b:c6:c0:6f:4c:03:8b:
         ff:52:0e:28:95:11:8f:18:08:e8:18:65:f3:70:39:75:9b:fb:
         22:ca:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:12 2025 by rpki-client on console-fra.rpki-client.org