Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
File:                     FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json)
Hash identifier:          GdsA/VrJKkVD+p+dnwaH66aPNrRfNvmPy6FF5k7Iic8=
Subject key identifier:   90:86:3B:E9:38:13:11:16:25:7C:76:3F:40:91:16:D0:2E:09:41:E0
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Certificate issuer:       /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial:       019510C6AF3F802F03FE955D6322F7B55AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
Manifest number:          0B0B
Signing time:             Sun 16 Feb 2025 22:00:11 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:11 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:11 +0000
Files and hashes:         1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: zCh/2SFvXDtyhcF6cOjUjMjK8klnaolhtuWyo4dPGng=)
                          2: aJypmqoFfKbNLA7QelNPg-kxzbw.roa (hash: AlnIanfnH1GwrGuXXqK+U4eJyego+t2Sw5napesUvxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:af:3f:80:2f:03:fe:95:5d:63:22:f7:b5:5a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
        Validity
            Not Before: Feb 16 22:00:11 2025 GMT
            Not After : Feb 17 22:00:11 2025 GMT
        Subject: CN=90863be938131116257c763f409116d02e0941e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:ed:ed:9f:46:d5:d2:6b:f0:0e:97:04:87:
                    ce:4a:1c:f3:e9:f5:94:f5:15:9d:ef:1b:97:ab:7c:
                    f7:8b:5d:53:fc:00:04:fe:f7:45:54:70:84:08:ec:
                    9c:36:1c:f0:b0:58:86:51:b2:db:a5:b7:b4:7f:03:
                    e0:69:3d:c5:42:0d:38:3f:82:f0:10:3c:5e:e9:b8:
                    6c:2e:33:66:59:0e:5b:10:1b:dd:1d:fd:2b:a1:7a:
                    68:85:f6:34:70:10:21:cf:b7:fe:7c:9e:b5:20:0e:
                    13:7a:db:8c:fe:89:de:68:e8:7e:e3:82:bc:83:dd:
                    c4:4a:78:d0:44:bc:50:e4:b7:85:d9:c3:f1:5c:4b:
                    4e:87:3a:b1:ed:39:18:3c:39:f6:b1:43:1f:d1:46:
                    51:d4:34:15:fa:e4:21:28:dc:f4:32:e9:15:de:42:
                    9d:be:4c:35:25:14:a4:a0:00:6f:bb:1f:0a:4b:9a:
                    e0:99:cb:34:7c:48:e0:41:01:3c:f1:1f:0f:ac:6c:
                    ba:73:8a:e1:0e:37:bf:dd:26:eb:5c:ad:30:90:7f:
                    10:ca:b5:ce:2c:d3:a7:36:69:07:7f:bb:2b:de:01:
                    85:21:23:d5:b9:12:f7:d6:7b:30:0b:e9:bf:61:63:
                    05:1e:f7:7c:09:a2:b8:39:33:71:e8:b6:c7:d6:c1:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:86:3B:E9:38:13:11:16:25:7C:76:3F:40:91:16:D0:2E:09:41:E0
            X509v3 Authority Key Identifier:
                keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:69:c6:90:c7:1b:4d:f0:1c:bf:54:11:14:69:c1:dc:34:2e:
         d5:26:a2:f5:ed:dc:57:33:90:99:8d:76:7f:c4:7d:33:3a:6f:
         08:2a:fe:9f:ee:ce:bf:a9:64:08:60:de:da:44:03:20:67:2e:
         1a:19:ff:1d:3f:0f:eb:38:55:44:00:b4:de:36:03:c2:f0:11:
         19:79:34:22:13:a4:f4:62:16:2e:0a:69:4b:df:d0:03:e9:59:
         8f:92:ed:9c:d6:24:8a:87:55:c3:6d:65:a8:2f:f7:94:14:58:
         1a:ed:3b:60:02:27:29:0f:40:4b:24:24:93:2d:c3:6a:4c:9a:
         32:43:35:d1:9e:16:8d:93:b0:34:5b:98:fa:59:f7:ab:d1:92:
         09:ff:44:02:c1:d6:5b:9a:f1:d4:f1:99:f3:14:0a:94:00:24:
         c4:ef:be:fa:bf:5d:16:f0:a7:82:d3:57:9b:a7:4b:57:fd:53:
         d2:c6:c8:56:3e:94:09:b1:bb:3e:6e:9e:ca:45:2a:c7:de:43:
         6d:7c:f4:44:9b:64:6e:43:de:ea:12:9f:74:c0:de:35:de:39:
         a8:cf:67:7e:38:fe:5e:37:a8:f2:b7:f0:d8:cf:53:53:3d:e1:
         90:6f:4a:81:c2:71:e6:21:f5:ff:4b:7d:04:dd:73:0a:88:83:
         1b:71:0a:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxq8/gC8D/pVdYyL3tVrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZmMxMjExZWUzYWY2NTdmYzk0ZjkyZmEwMzA5ZGU2YzZj
OTQwNmUwHhcNMjUwMjE2MjIwMDExWhcNMjUwMjE3MjIwMDExWjAzMTEwLwYDVQQD
Eyg5MDg2M2JlOTM4MTMxMTE2MjU3Yzc2M2Y0MDkxMTZkMDJlMDk0MWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpft7Z9G1dJr8A6XBIfOShzz6fWU
9RWd7xuXq3z3i11T/AAE/vdFVHCECOycNhzwsFiGUbLbpbe0fwPgaT3FQg04P4Lw
EDxe6bhsLjNmWQ5bEBvdHf0roXpohfY0cBAhz7f+fJ61IA4TetuM/oneaOh+44K8
g93ESnjQRLxQ5LeF2cPxXEtOhzqx7TkYPDn2sUMf0UZR1DQV+uQhKNz0MukV3kKd
vkw1JRSkoABvux8KS5rgmcs0fEjgQQE88R8PrGy6c4rhDje/3SbrXK0wkH8QyrXO
LNOnNmkHf7sr3gGFISPVuRL31nswC+m/YWMFHvd8CaK4OTNx6LbH1sEwawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCGO+k4ExEWJXx2P0CRFtAuCUHgMB8GA1UdIwQY
MBaAFBT8EhHuOvZX/JT5L6AwnebGyUBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQt
NTk4OWE0OTAyZDFhLzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQtNTk4OWE0OTAyZDFh
LzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2nGkMcb
TfAcv1QRFGnB3DQu1Sai9e3cVzOQmY12f8R9MzpvCCr+n+7Ov6lkCGDe2kQDIGcu
Ghn/HT8P6zhVRAC03jYDwvARGXk0IhOk9GIWLgppS9/QA+lZj5LtnNYkiodVw21l
qC/3lBRYGu07YAInKQ9ASyQkky3DakyaMkM10Z4WjZOwNFuY+ln3q9GSCf9EAsHW
W5rx1PGZ8xQKlAAkxO+++r9dFvCngtNXm6dLV/1T0sbIVj6UCbG7Pm6eykUqx95D
bXz0RJtkbkPe6hKfdMDeNd45qM9nfjj+Xjeo8rfw2M9TUz3hkG9KgcJx5iH1/0t9
BN1zCoiDG3EK6A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:25 2025 by rpki-client