Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File:                     femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier:          Ip/5ZpQf1Yvtdldm8n8FsyUt8OPPNeq1VhGVT6TEu3I=
Subject key identifier:   6D:2E:55:32:3A:E2:31:B9:41:83:30:89:34:65:4C:37:D7:FF:D0:2A
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer:       /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial:       019511354D13333846CF114FB2762259B0BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number:          145A
Signing time:             Mon 17 Feb 2025 00:01:00 +0000
Manifest this update:     Mon 17 Feb 2025 00:01:00 +0000
Manifest next update:     Tue 18 Feb 2025 00:01:00 +0000
Files and hashes:         1: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (hash: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=)
                          2: VGUAWcdE_uWGBzoEXuUWxSaeofE.roa (hash: ldYqKdQLO9amLNP7UTQrP4DX3OqZoopvjfltJwygHwg=)
                          3: d10u-uDwxzCO1ATs2RUc0qyrQbA.roa (hash: m3ajmbYacZUtKP1FwdP4sQzFhrAYqo+DMogwBusGYrY=)
                          4: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: TJkGLu3LSa7HUJCFGNzpmLvBQEsoq2QPnBahnxFOwS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:4d:13:33:38:46:cf:11:4f:b2:76:22:59:b0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
        Validity
            Not Before: Feb 17 00:01:00 2025 GMT
            Not After : Feb 18 00:01:00 2025 GMT
        Subject: CN=6d2e55323ae231b94183308934654c37d7ffd02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:7c:19:4f:78:1e:5c:b2:af:17:cb:90:be:
                    d6:8a:16:4f:63:51:45:dc:fc:03:13:8e:98:2e:2d:
                    43:9e:03:7f:4e:f9:be:56:ea:ec:d7:0a:3a:cb:15:
                    de:7c:10:a4:56:f8:7a:e8:d7:a4:50:bf:2b:f1:9a:
                    a3:ae:c9:17:50:07:80:e8:2f:30:ee:4a:03:b0:df:
                    65:01:f8:cf:be:49:0d:43:45:9c:1d:32:c7:6b:cc:
                    9c:07:cf:d8:06:bd:d1:88:49:de:f3:ca:73:ab:9c:
                    b6:5f:91:d9:a8:57:14:8c:07:bd:a0:33:ca:8c:9f:
                    57:f6:b4:79:e5:dd:57:95:bc:a5:b6:13:17:44:4e:
                    ed:f5:59:3c:65:41:b5:94:2f:21:89:3f:e7:b8:16:
                    bf:6a:72:c0:7e:88:86:5f:f0:64:99:26:16:de:78:
                    ec:19:f3:75:36:18:2f:5e:53:a1:d4:09:5f:0a:a7:
                    fe:66:90:2a:92:f1:67:fd:ec:57:59:1b:a0:74:a0:
                    ca:68:e8:eb:3c:31:1f:a0:5d:7e:fc:36:c6:85:ed:
                    3f:1e:1e:a7:db:b4:7e:1a:4d:e2:56:cb:7c:21:33:
                    62:c4:55:06:ec:68:f0:5a:7d:9f:e6:47:df:07:80:
                    51:d3:8f:29:2a:f3:2a:f2:28:76:1e:aa:e3:29:97:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2E:55:32:3A:E2:31:B9:41:83:30:89:34:65:4C:37:D7:FF:D0:2A
            X509v3 Authority Key Identifier:
                keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:fa:03:d1:ae:1a:7d:c8:a5:87:fa:4f:7b:11:7e:38:18:
         05:c6:92:6f:8d:28:f4:12:ac:d6:75:31:de:4f:ef:71:a2:86:
         64:81:0d:d7:4a:11:5f:9d:cf:bc:a4:02:7e:a5:c5:f0:24:6c:
         7e:4a:b0:2a:53:73:ca:84:5a:8d:77:a6:40:7f:1b:d2:4c:32:
         c4:0c:53:7a:64:dd:b3:bc:ff:24:5a:ae:db:3c:28:6d:77:38:
         bb:d5:89:6a:ba:70:be:40:0f:59:57:90:c1:46:42:9c:04:20:
         e3:07:dc:0d:77:09:9a:1b:b0:5d:f4:8a:d8:26:03:e2:60:eb:
         de:b7:54:fd:67:7a:85:fb:39:0b:05:d5:af:2b:9c:32:70:e4:
         fa:c9:a5:3f:3b:fb:74:46:37:98:3a:a7:eb:01:cc:4b:5a:c1:
         ea:79:ef:64:fa:61:b7:9c:17:c8:58:97:e8:61:06:70:9f:0c:
         a3:a9:b2:58:d2:c8:4d:ee:74:0a:ff:6b:90:be:96:cb:65:90:
         2d:1d:81:50:f7:89:6f:da:ff:c0:e4:8f:e1:e3:ca:b5:9f:5d:
         ef:9c:80:b9:7a:7a:42:3e:82:da:70:01:73:ad:2e:48:13:c3:
         f5:e1:49:ac:6d:15:4d:d2:bb:36:ef:c7:af:74:3e:6b:cc:92:
         2f:db:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:39 2025 by rpki-client