Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File:                     Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier:          4xPVorXlnDbn3EAksv4F4cifKTKntscWYr4cyZMM56Y=
Subject key identifier:   ED:F8:CA:0D:B9:A8:B0:DB:F9:69:CF:2A:2C:FD:9F:98:50:4C:5A:13
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer:       /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial:       0194BABBD1027497B9A7212F127AF5E469A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number:          1422
Signing time:             Fri 31 Jan 2025 05:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:58 +0000
Files and hashes:         1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
                          2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: bBrpXxPykEYcPy+MmdzrFoSbEdx9fYI3nN9+M7x50RU=)
                          3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
                          4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:d1:02:74:97:b9:a7:21:2f:12:7a:f5:e4:69:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
        Validity
            Not Before: Jan 31 05:00:58 2025 GMT
            Not After : Feb  1 05:00:58 2025 GMT
        Subject: CN=edf8ca0db9a8b0dbf969cf2a2cfd9f98504c5a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:65:be:30:79:ba:9f:16:bc:b3:5e:9d:0f:55:
                    45:31:01:04:a1:ea:fa:12:8f:81:60:86:aa:25:8e:
                    bd:a7:53:43:fe:a8:0d:d7:3c:cc:2a:b7:70:8a:63:
                    62:70:e7:7e:db:95:73:20:71:f6:6d:0c:ba:75:26:
                    06:bb:3f:92:30:8f:00:6e:1d:66:76:5d:cf:a0:4a:
                    77:ef:d4:51:c4:ed:83:4f:a7:76:41:33:7c:8f:2b:
                    ea:74:25:f8:3c:22:f2:dc:fe:08:41:36:50:41:a4:
                    ce:48:8b:95:0e:79:1a:59:f3:f9:85:fb:03:38:4d:
                    8e:24:e7:5d:93:84:52:be:44:77:e3:56:99:1e:2c:
                    85:45:43:1d:60:99:59:7e:24:5d:09:32:3a:f3:4a:
                    02:79:be:42:a6:22:ad:f5:a8:0d:0f:65:ed:64:1c:
                    6b:27:f2:22:e9:a5:47:ce:aa:77:f6:a8:76:f3:78:
                    14:70:62:f7:c6:69:de:5e:93:93:fc:e3:e2:d1:57:
                    d6:2c:99:dc:e7:70:46:c0:40:2b:8a:12:0a:6d:d5:
                    f3:b8:2b:74:b2:10:fc:24:56:f9:de:ce:19:a0:99:
                    bb:6d:b0:b0:2d:bc:73:04:de:a9:d5:63:38:4a:e7:
                    70:82:a3:37:ae:fa:05:ad:e6:7a:06:ee:d4:ed:63:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F8:CA:0D:B9:A8:B0:DB:F9:69:CF:2A:2C:FD:9F:98:50:4C:5A:13
            X509v3 Authority Key Identifier:
                keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:39:c3:79:1f:8e:33:93:20:c6:c6:fd:a1:ad:67:4a:9d:23:
         2d:63:be:65:81:bf:5a:e1:e2:21:3d:1d:b9:03:76:10:2c:e9:
         97:7d:32:11:6a:51:43:d7:c4:78:76:83:2b:f2:b1:c2:80:a3:
         24:f7:a4:95:2a:9f:21:a8:e5:41:3d:55:26:91:10:e6:a1:01:
         d7:85:27:b6:fe:54:9d:0a:35:f1:a8:fa:a2:77:a0:62:b1:c4:
         ff:0e:76:e3:d0:d9:e1:24:31:4f:19:e6:2f:4c:7c:35:31:28:
         40:6e:f9:47:73:93:1e:4c:ab:1d:c2:01:d8:24:ca:46:ca:9e:
         c2:61:4d:f9:b5:01:2d:c2:b5:e1:b7:dd:08:1a:9e:87:ed:7a:
         63:05:50:3c:2a:df:71:a7:5d:0e:3b:9c:cb:25:8c:56:80:d9:
         fe:af:26:94:3b:51:00:9f:7c:2b:a9:bf:fb:e8:01:f2:86:d8:
         ce:75:7d:c8:a5:a0:14:10:d5:8b:82:ef:92:54:af:06:4e:6f:
         1a:ee:1e:fe:45:60:fc:73:f6:3b:78:35:33:53:7c:46:cb:e3:
         da:5a:66:46:63:ae:b9:94:07:6a:b2:0f:f6:8c:2f:98:95:41:
         d6:37:2d:59:16:8e:b8:76:52:6a:c3:2e:a9:0a:12:cd:04:91:
         78:7c:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:32 2025 by rpki-client on console-fra.rpki-client.org