Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File:                     FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier:          4xxEG8/xKaI565GuJuqMrJ4Sc9Q+3OjvMgb9NxSF+qk=
Subject key identifier:   4E:C4:05:AA:91:AE:0D:AA:1E:AA:F6:0F:C5:A8:5B:AA:9F:39:C7:5C
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer:       /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial:       0194BABB3BB6CD9130AFEEDC8A1BEF3AFD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 05:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:20 +0000
Files and hashes:         1: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: qpUgX6pilyCYIUMRZjmJxLRfXC39iXHxoEFtpn8qNiA=)
                          2: JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa (hash: GCMi3F+baVVPvUwQFwt0LCTFyVV4lIfA34WPsvrvO6A=)
                          3: RnPjQu1TRB6OusL4aMQpC4JKqmI.roa (hash: fzeYA/Ogqc2irWhfM/UbWuBPWyUJiutWTEcNUX+4+LU=)
                          4: Ut6Isd3FyfcwFqXffcOSTj20big.roa (hash: 6WWf7LzHGfNpFV/UMH6n5UZ2IDbI9b8RYTztg7MMT9k=)
                          5: YrBEbKYcRihrrXhf5rGMn4NnWP8.roa (hash: 0EjDwiQerEsJrNpiAV/U41dtG8QfC+EEgtF9mTKQLqE=)
                          6: oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa (hash: 60Qb8QX+Ft+JLMQ7m3ymUwisPXVeh0oMfLPMdsaJtK0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:3b:b6:cd:91:30:af:ee:dc:8a:1b:ef:3a:fd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
        Validity
            Not Before: Jan 31 05:00:20 2025 GMT
            Not After : Feb  1 05:00:20 2025 GMT
        Subject: CN=4ec405aa91ae0daa1eaaf60fc5a85baa9f39c75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:cc:38:4f:f5:f0:b3:72:39:10:5b:a2:48:
                    39:af:b8:b2:20:dc:13:28:1c:64:c7:91:35:c9:77:
                    71:dc:b0:67:bf:04:eb:a6:ce:5f:8b:ba:2e:2d:01:
                    bc:83:64:bf:da:8c:40:a0:b9:b6:80:db:8a:4f:65:
                    87:5d:b7:5a:35:c8:10:77:c2:3c:92:8c:71:13:ae:
                    ae:ea:74:a9:0b:fe:c1:fe:32:d0:af:e7:94:39:e1:
                    29:65:60:49:28:d4:11:68:55:be:05:2c:2c:a7:d6:
                    5f:94:16:d4:04:42:cc:c3:5c:79:e7:2f:5b:bd:3f:
                    7f:12:cf:81:33:7a:01:d9:0f:ba:f7:56:c6:ca:28:
                    bf:62:24:f8:31:70:ab:6e:49:34:e7:71:2c:cc:39:
                    b5:ab:ec:9f:a5:9f:97:c1:9f:35:84:97:a2:d6:15:
                    db:0a:d4:07:4a:9d:13:10:1a:32:d8:d3:0e:53:14:
                    6e:31:52:1b:af:d0:35:d2:8a:5d:7a:a7:be:aa:ee:
                    bc:3b:9f:0a:0d:68:69:7c:86:2b:af:e5:9f:be:06:
                    bb:c2:5a:c7:7f:17:8c:15:c1:33:a8:e2:43:67:ed:
                    93:1b:ac:8e:65:95:4e:30:3d:77:2c:ee:e3:43:5b:
                    1a:22:31:48:84:04:5d:75:28:7a:58:fc:bb:8d:80:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C4:05:AA:91:AE:0D:AA:1E:AA:F6:0F:C5:A8:5B:AA:9F:39:C7:5C
            X509v3 Authority Key Identifier:
                keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e5:9c:cf:f9:34:41:dc:23:cb:b9:a0:61:85:27:fa:93:9f:
         e4:b5:51:41:a2:d6:66:3a:12:d8:e3:07:48:4e:03:fb:58:06:
         d6:af:3f:fe:ef:85:a7:99:66:2a:f7:1b:a4:18:f9:38:a4:f0:
         16:19:bc:5a:b1:46:1a:7b:6e:d1:b9:db:21:ab:e1:81:58:c5:
         3f:4e:5a:d5:71:ab:bc:e2:96:9a:c7:12:d5:2b:f2:cd:60:22:
         a4:b3:e3:fa:bc:b4:73:6b:13:72:13:e2:f3:76:07:e2:58:97:
         93:10:b4:d6:10:d3:09:62:da:d2:c3:0e:c6:4e:5e:58:e0:5c:
         d1:ee:98:f8:ee:b9:99:7b:0c:a1:b9:c9:79:07:1e:35:4e:ef:
         c9:36:a9:40:20:76:17:bd:d9:b7:cb:40:58:9f:e5:23:12:a0:
         7d:72:df:e2:c4:9c:df:95:a8:4b:5c:f9:03:db:98:fc:e6:de:
         c4:c4:f4:d5:fe:81:d5:d5:e6:23:6b:69:89:9e:7f:98:45:87:
         56:0d:1d:12:77:b2:32:5b:37:f9:a4:ef:b3:63:9c:69:9b:09:
         75:ce:0b:2c:60:50:ef:cf:70:78:d6:93:15:ca:8f:d6:32:21:
         e1:b6:01:a9:fe:99:32:e9:33:c4:26:3e:e4:63:de:b9:a8:f1:
         a5:e3:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:36 2025 by rpki-client on console-fra.rpki-client.org