Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
File:                     FMEnKYgtb8xADSTHoWGR6_ea064.mft (raw, json)
Hash identifier:          Prf2W77i+F5Y6tL+IpY3/pz6yIHybFr9EfbNdCbikEg=
Subject key identifier:   57:F5:23:8D:B9:BF:8B:3E:D2:5C:52:2F:BA:7C:66:B2:6E:A6:96:CA
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Certificate issuer:       /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial:       019644E8C1F51C460C08BE0CF59802E5B240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
Manifest number:          1490
Signing time:             Thu 17 Apr 2025 18:00:26 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:26 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:26 +0000
Files and hashes:         1: FMEnKYgtb8xADSTHoWGR6_ea064.crl (hash: PV/8lwxRt1yD3CgemE+E1kRV4zfUCVAZnBG/mm2/vJc=)
                          2: gTXc09MBtqnmw3GOQ02qrwpMS84.roa (hash: c/faZAzER1FA8lwrLMG8MZsQ5SgoZv9mWu1aAorpMcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e8:c1:f5:1c:46:0c:08:be:0c:f5:98:02:e5:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
        Validity
            Not Before: Apr 17 18:00:26 2025 GMT
            Not After : Apr 18 18:00:26 2025 GMT
        Subject: CN=57f5238db9bf8b3ed25c522fba7c66b26ea696ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:54:87:95:93:9f:41:e9:cb:c8:55:37:4a:a5:
                    1e:07:41:e0:3b:f1:be:b7:2b:39:fa:86:50:54:63:
                    2a:9b:8d:d8:de:3d:ca:d4:38:e1:e0:97:a2:b3:4f:
                    cd:d0:d4:a2:77:29:28:07:78:d3:3e:73:f7:a7:f8:
                    1d:d7:b3:b3:6a:3a:99:64:ea:db:9b:3d:c7:a7:e1:
                    51:a8:29:ed:8c:64:7e:96:a7:0e:8d:17:36:a8:97:
                    aa:28:06:97:02:82:8d:75:89:58:9b:d9:55:5e:3f:
                    d4:ba:f3:ae:97:50:65:a7:ac:36:4a:da:9e:ab:d5:
                    88:47:56:26:e5:12:e7:c6:2f:2f:3e:3c:41:09:63:
                    36:88:3a:0a:ae:68:e1:a7:35:81:64:39:cd:03:d0:
                    67:3f:82:2a:25:74:15:b9:2e:af:ea:2b:f6:e0:e9:
                    35:79:84:d2:6f:dd:c7:59:a5:00:6a:5a:11:89:8f:
                    3c:38:be:22:ac:79:f2:a3:c9:52:c9:2e:18:59:8e:
                    c4:20:64:f7:43:e9:ff:b3:07:72:d1:a9:70:0a:fb:
                    88:a7:62:8c:88:86:3b:1b:17:99:91:c9:bb:da:b2:
                    1f:d4:6b:d5:89:6c:32:be:6f:1a:a8:36:25:a4:7f:
                    0f:cb:5c:e5:a6:a9:08:e1:77:d2:e8:80:1a:17:6f:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F5:23:8D:B9:BF:8B:3E:D2:5C:52:2F:BA:7C:66:B2:6E:A6:96:CA
            X509v3 Authority Key Identifier:
                keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a2:08:7e:c4:87:e5:3d:8c:c7:c1:cc:6a:be:ab:1e:bb:e5:
         6c:43:e8:22:f5:49:9f:18:44:02:09:79:c6:fa:1c:3f:4c:bc:
         11:ea:d9:1b:3c:32:9f:19:45:79:68:ac:1e:22:1b:7f:e4:14:
         9b:6c:32:d9:ec:c2:77:d1:31:40:64:e9:dc:2a:09:09:9b:9a:
         d4:86:31:b0:45:a9:18:55:97:ba:35:ab:e9:5c:3d:f9:83:db:
         ac:ab:a4:ac:62:38:17:ee:eb:38:c1:17:a7:cc:e0:da:13:60:
         ea:1f:51:b4:89:4d:e5:d5:9d:4c:e5:ba:ec:9f:3c:59:f1:ce:
         dc:10:d9:ac:c9:36:0d:ae:50:d5:ae:e2:83:b6:fd:2b:32:28:
         18:ad:1d:be:ed:f4:a4:a3:56:e5:76:69:52:ea:6d:95:a3:a6:
         7c:44:d1:e8:1b:40:a6:f9:af:00:4d:23:2b:a6:6a:07:ec:d8:
         e9:96:b4:91:91:a1:72:ac:d1:01:80:b3:93:d4:ca:36:ce:b7:
         50:4d:8d:c3:d3:d8:80:39:3b:6e:36:95:af:cb:03:5d:cb:44:
         8c:fd:44:55:9d:b5:44:2d:c8:34:d1:41:df:4e:04:b3:81:46:
         f8:24:3a:86:84:10:86:db:b6:e4:10:60:96:b5:09:a0:0f:d9:
         9a:0a:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:06:26 2025 by rpki-client