Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File:                     SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier:          qU1B3iWfHzv9u6QEZJCO4kE169rlwEOM2h6DCKMVdaQ=
Subject key identifier:   6A:55:12:C3:62:ED:28:D1:66:59:3A:C0:3F:11:D8:04:B9:9C:08:12
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer:       /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial:       019512478B0FFD6B1ABB39C000ADC095A3D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number:          145F
Signing time:             Mon 17 Feb 2025 05:00:33 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:33 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:33 +0000
Files and hashes:         1: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: UxIWCgWlL+Du6OmZN2oUZnFH99NLtWXgD51F98COifs=)
                          2: ZLZClTfuDKfBFAb78-Sh9gGUq9o.roa (hash: ZjgvTzOG0NWN+AmJ71kj5d0LbF11Gt0UdOZExqIqebk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:8b:0f:fd:6b:1a:bb:39:c0:00:ad:c0:95:a3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
        Validity
            Not Before: Feb 17 05:00:33 2025 GMT
            Not After : Feb 18 05:00:33 2025 GMT
        Subject: CN=6a5512c362ed28d166593ac03f11d804b99c0812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:8b:c1:6e:37:fe:2e:8d:4e:59:40:26:cb:
                    4c:fd:9f:16:67:cc:68:2e:56:7d:0d:63:32:b4:a3:
                    69:b3:8c:91:4b:2c:22:79:2b:38:68:d1:6d:51:56:
                    8a:21:3b:26:28:dc:82:1a:75:eb:71:13:27:32:dc:
                    bf:df:48:09:47:b5:9f:09:e7:6c:a9:70:52:65:d2:
                    c9:4b:51:ef:58:34:af:8d:5e:a2:02:1c:9f:fc:eb:
                    ea:03:31:12:d9:48:0b:49:af:29:bb:ad:3d:89:ee:
                    18:e2:c5:43:17:57:6d:17:cb:7e:e9:2b:11:3d:12:
                    36:eb:b0:3f:a3:f9:f6:f7:b3:fb:a5:fe:34:ae:b7:
                    84:7b:68:bc:61:5a:26:40:19:66:61:65:d4:e3:54:
                    2f:e4:8b:bd:56:52:86:20:33:f8:7a:e4:b1:4b:50:
                    1f:db:9b:a4:e4:9d:0a:fb:35:7f:25:70:a1:9a:20:
                    07:3e:2e:05:71:c9:3c:a4:6e:58:7d:78:2c:ef:f8:
                    5b:d4:9c:de:ec:e4:fe:cf:1d:d5:b4:eb:71:73:c2:
                    b6:3d:2e:ec:ed:e6:f3:f7:fa:92:34:3b:80:1a:46:
                    62:01:73:56:a2:7e:ad:7b:68:94:e3:c5:b0:0c:7b:
                    3a:9a:ef:90:ad:df:72:6b:2b:39:2f:6f:c9:bf:73:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:55:12:C3:62:ED:28:D1:66:59:3A:C0:3F:11:D8:04:B9:9C:08:12
            X509v3 Authority Key Identifier:
                keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:92:fb:7c:d9:69:20:1f:1a:01:67:e1:30:48:c8:8e:84:
         e6:ff:c3:62:8b:02:85:29:b7:d2:92:c2:67:9a:6a:18:9c:9f:
         94:be:10:65:4a:14:66:28:2f:90:33:ad:91:c4:5d:fb:fa:ac:
         ba:43:ce:f0:0d:2d:ea:0e:c3:b1:72:82:53:a2:47:62:b0:10:
         a8:ed:e6:2b:93:11:1b:d4:8e:7c:82:5f:75:46:87:e6:4a:1a:
         f3:f1:a2:ba:78:95:a7:09:ea:67:45:d9:ca:97:f0:f8:f5:ee:
         26:e6:48:31:22:e0:4a:5d:1a:82:96:fc:13:57:fc:18:28:41:
         11:61:d3:69:93:75:b2:6c:60:ec:3d:b5:89:a8:d6:10:a4:24:
         49:92:e5:0d:64:cb:fc:53:2a:8b:46:d9:83:a3:4f:a9:64:7e:
         e6:6b:8e:c5:c6:30:7a:f5:ba:7e:9c:38:cc:fa:bb:74:5b:4f:
         5e:6d:be:ab:e4:cc:06:c6:30:90:92:9d:ef:46:a4:15:71:87:
         8d:81:1b:c5:5b:29:25:55:4b:cd:a2:58:00:69:f6:0e:78:66:
         3c:c9:b3:82:c6:dc:32:3e:cf:a5:8f:46:2e:63:f4:4d:e5:e7:
         b5:9f:45:fe:50:9b:8f:dd:ad:fe:a5:cf:f1:26:61:b6:4b:7d:
         70:32:56:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:57 2025 by rpki-client