Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File:                     fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier:          Y+evnzjJ5g4gurmawj9CD2TckwWRam9FjP5tzdpy/Oc=
Subject key identifier:   A5:67:42:59:D2:D3:86:07:78:2A:80:37:FB:B6:D8:90:F7:D5:34:F6
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer:       /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial:       019511354068FE47A8DD8648577599FB6EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number:          0D56
Signing time:             Mon 17 Feb 2025 00:00:57 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:57 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:57 +0000
Files and hashes:         1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: hWZ8S1NrgaWGd+Lx0Q1KNfJ7f/mQSn4k+aHIOr938+Q=)
                          2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:40:68:fe:47:a8:dd:86:48:57:75:99:fb:6e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
        Validity
            Not Before: Feb 17 00:00:57 2025 GMT
            Not After : Feb 18 00:00:57 2025 GMT
        Subject: CN=a5674259d2d38607782a8037fbb6d890f7d534f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:f4:3f:bb:44:77:04:b8:25:84:88:d6:c2:
                    8a:d5:0b:e3:11:79:47:d0:15:48:3a:cf:81:72:40:
                    a6:b1:76:15:e3:24:c1:a6:28:7e:67:f1:bf:25:22:
                    ce:a4:91:8b:35:03:bf:ac:40:f8:84:b9:84:1c:46:
                    55:34:68:c8:ae:a2:17:98:37:e1:8c:47:0f:94:9b:
                    9b:a7:f8:0b:d4:f4:06:14:94:41:0c:b8:a3:91:1e:
                    c1:9f:ca:a8:a6:d9:99:d6:b2:c4:a8:39:aa:fa:ad:
                    c7:b2:be:0f:a3:bf:c9:f1:d5:4c:02:f7:1d:c0:69:
                    16:95:d8:83:83:65:fb:d4:f6:37:69:21:c7:a4:11:
                    e7:d0:24:9b:18:38:e6:e1:9b:26:cb:99:d0:6d:f2:
                    cd:0d:c3:19:37:a2:06:8d:8a:f5:25:e7:87:fc:74:
                    69:84:2e:45:f8:64:41:ff:ae:54:7e:f9:96:c9:e8:
                    0e:75:3a:89:26:00:88:9a:d2:62:c6:50:3e:08:01:
                    a6:a6:07:15:9f:6f:f8:5b:aa:eb:1f:33:eb:fa:ee:
                    0f:24:9e:26:66:98:f9:5e:71:f6:5a:22:2e:7e:73:
                    bd:c0:99:bd:12:4e:27:08:90:6e:63:31:d0:df:43:
                    05:48:a6:8b:9f:81:5e:55:45:f0:28:e6:ef:dc:73:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:67:42:59:D2:D3:86:07:78:2A:80:37:FB:B6:D8:90:F7:D5:34:F6
            X509v3 Authority Key Identifier:
                keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4a:61:24:36:fc:44:36:de:c4:5e:e9:5f:f4:f8:2f:c7:64:
         8b:fa:88:5d:9f:2b:ee:2d:e5:bb:41:1f:74:42:58:98:ae:d0:
         f7:8e:4e:1f:b1:ac:93:2b:ce:5d:6e:85:93:e7:28:dc:1a:92:
         6f:a3:42:ea:b6:74:c6:5d:a0:ff:0e:16:c9:00:90:7c:c1:98:
         9f:2d:bb:3b:2a:45:a8:24:25:e4:29:61:07:02:ca:e1:f9:05:
         d8:0f:ee:51:7c:0b:eb:e4:7c:36:44:0f:28:43:d8:98:a5:21:
         ea:dc:de:94:8a:13:a6:23:44:4b:c6:e3:3a:53:1a:5c:05:e8:
         7a:c2:1f:1e:eb:bf:52:75:67:5c:b5:9c:b3:8f:c3:e3:cf:c6:
         49:a5:f4:87:95:c8:56:30:23:c3:af:1b:21:46:d2:61:67:43:
         e2:90:5c:bc:57:47:13:1a:0a:fa:6f:fc:f5:c5:09:8d:80:77:
         77:e7:b3:d3:0f:21:06:f5:6f:3d:46:e1:7f:43:2f:52:58:cf:
         3e:11:82:5d:49:5f:ff:d9:6a:a7:24:39:0f:45:aa:3b:f7:95:
         6e:61:e0:79:26:31:06:ae:00:1c:2f:ea:5b:cc:d4:2f:ae:16:
         96:99:9e:87:00:11:fd:fb:b4:52:c4:06:6f:a4:0f:e9:a5:2f:
         72:f2:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:24 2025 by rpki-client