Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
File:                     FqBO4EsSgj6FP_JD02VR5M5oOnM.mft (raw, json)
Hash identifier:          1t6porDhoJAGnyg6lDVHR7o5OLeQ7F0YHbVZsmc2w4M=
Subject key identifier:   B4:F3:E1:DA:92:90:B2:34:63:82:AC:56:D1:70:C2:74:9F:CB:33:32
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Certificate issuer:       /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial:       01951210D31A9B826D03CE773BCD81CA2E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
Manifest number:          1455
Signing time:             Mon 17 Feb 2025 04:00:47 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:47 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:47 +0000
Files and hashes:         1: 7yvWMV7T5eN6efasr2rdxP4qnTg.roa (hash: IQLAVcCJbXWjx9lqcgGZjEbAOQis8qmzfLoEHM8bDrs=)
                          2: FqBO4EsSgj6FP_JD02VR5M5oOnM.crl (hash: ASkOHCjfII1UgyukI6BBgevo5GPhxTTje4XAA74LC/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:d3:1a:9b:82:6d:03:ce:77:3b:cd:81:ca:2e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
        Validity
            Not Before: Feb 17 04:00:47 2025 GMT
            Not After : Feb 18 04:00:47 2025 GMT
        Subject: CN=b4f3e1da9290b2346382ac56d170c2749fcb3332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:6b:c2:0d:d7:88:d5:6c:e3:1d:85:ed:3e:
                    25:a8:e1:49:9b:78:f2:58:dc:d0:e6:d9:98:27:27:
                    0b:90:9a:9f:d5:93:48:6e:9e:a2:4f:81:45:d6:42:
                    47:ea:37:94:82:3e:d3:4a:af:1f:4f:a4:0e:97:75:
                    d5:37:10:b7:53:a4:69:4e:b7:33:1e:de:31:96:a7:
                    b9:dc:35:46:24:25:29:4b:a6:c3:98:4a:fc:45:eb:
                    56:0f:e8:2b:43:3c:4f:87:83:b3:4d:15:b0:b8:2a:
                    c0:99:e4:b3:fd:c7:01:9e:19:de:de:df:5d:70:a9:
                    38:36:09:a9:fb:dd:0e:f6:89:f8:28:37:dd:c2:a6:
                    b2:5d:7d:3f:a1:23:da:77:e1:cb:2d:a7:6a:3c:8b:
                    b7:23:c1:bd:9c:4b:6d:15:de:01:5b:94:5b:c6:cf:
                    79:25:2d:23:7d:e4:fd:d0:78:f6:f7:01:a5:e7:f5:
                    f9:41:fe:cc:35:a1:ad:61:63:7f:fb:2f:dd:0d:34:
                    e5:6b:6d:54:d6:1b:05:4b:1d:4a:b5:e6:76:bd:8d:
                    cf:17:2d:20:0b:40:f9:94:08:f8:e0:8d:fc:69:61:
                    9e:84:44:7d:16:31:26:4e:7e:22:15:fc:0f:da:53:
                    cb:47:0e:39:f5:5f:69:9c:6c:63:1f:27:22:82:aa:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F3:E1:DA:92:90:B2:34:63:82:AC:56:D1:70:C2:74:9F:CB:33:32
            X509v3 Authority Key Identifier:
                keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f6:fd:88:ce:3a:fc:7f:c9:c2:5e:01:01:f7:3a:7d:14:28:
         4f:ca:1b:4b:46:64:44:ec:e6:d5:ad:34:70:75:0b:4a:04:a2:
         13:e5:76:a8:e8:f6:00:6c:af:d1:c8:1c:4f:32:0c:47:37:e8:
         39:78:eb:18:bb:6d:fd:1d:7c:18:9d:c6:37:3f:a1:79:8a:f0:
         2a:b4:f1:d3:f7:ba:c1:c1:64:6a:36:26:bf:5b:de:55:85:dd:
         4f:97:d9:45:de:86:2f:d6:16:15:83:d0:6b:41:76:3b:92:da:
         e8:a5:fd:6d:46:f5:fe:cf:68:cd:e8:ec:c2:f4:f7:09:18:f1:
         bd:15:e5:46:6c:37:38:f0:ee:55:29:26:ae:ed:43:93:c8:73:
         a7:b4:0c:67:d7:95:db:19:ee:9a:e6:9a:8b:17:39:c6:88:6f:
         01:6c:4a:93:b7:f6:b4:98:b0:f2:74:65:8a:f3:5f:79:d1:05:
         9f:4a:11:1d:64:e6:cb:59:dc:8a:be:93:9e:85:51:bb:4d:9d:
         de:32:2e:7e:2f:74:92:06:04:65:3d:ad:39:85:8e:70:ef:46:
         ae:bf:33:65:e9:de:39:0d:43:7d:e2:6f:f1:0c:47:c6:9c:83:
         40:b1:9a:2b:08:87:da:26:b5:0a:e0:97:09:b1:04:ec:49:8a:
         51:45:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:38 2025 by rpki-client