Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File:                     fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier:          6T50qB73xNbhfWBB/9kvRNc91XpfqcYfE9LM9CMc1as=
Subject key identifier:   5C:AF:9F:A3:0D:FA:E3:9A:D8:7B:E3:9B:8C:A2:FC:1B:52:6E:27:7A
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer:       /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial:       019510FE06A608E346478236986574D1D800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number:          1455
Signing time:             Sun 16 Feb 2025 23:00:38 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:38 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:38 +0000
Files and hashes:         1: EeK6cauICbjiVCSXw89JJKbgWuI.roa (hash: dQibGt3eUNBx7bxOeGKDFYcaj4qO4S1imLS16SxshcI=)
                          2: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: 7zmvrxswVxgEuq8xrd7hB2gHWrmJ8xpFPLATgXKr8u4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fe:06:a6:08:e3:46:47:82:36:98:65:74:d1:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
        Validity
            Not Before: Feb 16 23:00:38 2025 GMT
            Not After : Feb 17 23:00:38 2025 GMT
        Subject: CN=5caf9fa30dfae39ad87be39b8ca2fc1b526e277a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f5:40:d3:ff:53:b2:5e:82:75:ea:a8:c8:df:
                    ce:13:38:05:6f:d1:84:4c:f4:0c:5d:c8:05:3a:de:
                    92:33:d3:80:4d:5e:30:98:51:3c:f4:4d:02:a3:45:
                    36:02:ca:67:79:03:0e:f8:dc:b1:38:f7:19:e0:a3:
                    55:b7:67:62:a4:8e:6d:c2:2b:b7:dd:79:ed:0c:d0:
                    af:77:79:f4:5c:a4:8c:72:6b:30:0c:77:54:15:d9:
                    4a:2d:ae:7f:9f:56:95:7f:cf:da:28:98:5e:f3:a0:
                    bb:ee:f0:4b:a2:52:2d:45:8a:0d:19:03:57:89:55:
                    d8:39:2a:54:a6:9d:ac:9a:cf:dc:6d:9f:03:cc:47:
                    c3:a7:86:1a:28:21:bb:1f:a8:ae:7f:5f:ce:0b:5e:
                    43:30:3c:78:1c:04:c0:7a:6a:40:0e:b6:c0:91:0b:
                    13:61:27:91:b5:68:84:77:9f:b3:63:e9:0f:d8:db:
                    dd:27:de:85:ee:66:4a:c9:d3:ca:b2:cc:19:02:c1:
                    b3:40:20:98:b6:6c:cf:78:15:6c:a1:ea:ca:fb:66:
                    4b:94:40:e5:b5:f4:3b:9a:03:b5:6f:c1:f3:47:3f:
                    87:18:b9:54:94:75:14:0d:c9:90:b8:f5:3e:32:8c:
                    48:f5:8c:3e:b2:93:86:84:8d:2c:4c:c1:49:c2:26:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AF:9F:A3:0D:FA:E3:9A:D8:7B:E3:9B:8C:A2:FC:1B:52:6E:27:7A
            X509v3 Authority Key Identifier:
                keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:07:66:5d:cc:ea:a0:c0:e8:d8:a3:65:09:06:58:51:ea:
         f7:65:28:77:26:07:8c:22:4f:0c:ab:fe:0d:af:a9:bd:d2:4d:
         6f:f9:28:78:ae:0a:8a:0f:c8:0f:77:6c:42:9a:45:53:f3:7c:
         d9:e0:d3:b8:44:4d:35:b5:73:bd:b4:53:ec:89:2e:00:49:1e:
         73:5b:d2:37:88:01:4f:ea:4a:cd:60:7f:bf:08:61:47:1b:d5:
         e7:b5:f3:1b:a8:73:27:8d:42:58:ac:fa:da:47:4d:9d:4e:4a:
         fa:5b:83:eb:9f:70:a4:1a:5f:8d:88:d2:6e:ad:31:fb:04:8b:
         d0:7e:0d:e6:7c:f1:7d:a5:6e:4e:b2:e3:aa:3b:fc:85:9a:67:
         58:4c:c6:f2:04:8a:14:b6:3d:e6:09:e0:94:e5:f2:f2:63:dc:
         f2:f3:1c:e3:ba:68:c9:36:04:de:b2:91:7a:06:f1:ae:61:fc:
         16:72:67:dc:d4:0f:c7:01:cb:e8:c1:e4:2c:9b:e9:ab:3d:73:
         49:ca:d7:ed:55:49:93:e4:14:f1:bb:2c:db:fc:10:c2:19:20:
         eb:7e:41:0b:c3:3c:4b:ff:37:f5:d0:b1:c8:fb:4b:2f:93:24:
         16:84:75:07:87:47:2c:78:7a:31:dd:fd:11:2d:46:e7:41:c0:
         da:ab:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:33 2025 by rpki-client