Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
File:                     fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json)
Hash identifier:          Ls/cnmyqDEzA4I/SaJwCAheaQ72z/dPcHjC4xl3Pn+Y=
Subject key identifier:   2A:80:5C:D4:6E:B0:8C:63:8C:F8:7C:A9:C7:98:86:2A:BB:FE:F7:92
Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
Certificate issuer:       /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Certificate serial:       019510FE056E2A43532FE41A5D0B07817E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
Manifest number:          0E9F
Signing time:             Sun 16 Feb 2025 23:00:37 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:37 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:37 +0000
Files and hashes:         1: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: HbMpk9PXtz3WTFsWd7gzm8v80aGqXppQbiptLs3eQ48=)
                          2: jRJwX_ZKuADln4pES5WgoVS__88.roa (hash: K3aJVjlqhUCHgSM5vEOmY3eFV+XqReoMzhLc+qeCd0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fe:05:6e:2a:43:53:2f:e4:1a:5d:0b:07:81:7e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
        Validity
            Not Before: Feb 16 23:00:37 2025 GMT
            Not After : Feb 17 23:00:37 2025 GMT
        Subject: CN=2a805cd46eb08c638cf87ca9c798862abbfef792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:53:61:5e:e1:7b:30:5f:21:42:7c:91:83:
                    89:e5:26:45:fe:d7:bf:da:b2:7a:e9:e9:d1:57:b1:
                    57:b5:fa:7f:ef:25:74:e6:6d:66:cf:8b:b6:ab:1f:
                    e9:63:f8:18:1c:3a:cb:56:ce:18:dc:c6:7f:b5:29:
                    71:aa:d6:17:26:74:6c:66:a2:8c:01:07:ad:a2:1a:
                    29:e3:40:a2:0e:28:85:b1:2a:24:c7:c9:b7:2d:38:
                    27:17:f2:75:54:1b:6c:22:3f:4e:e5:e4:de:0e:4b:
                    c9:70:fe:22:47:f7:5e:ce:5e:32:dd:f4:7a:df:a2:
                    a5:4d:11:87:2d:07:6d:4f:c2:76:96:f8:45:f8:f6:
                    96:1b:d6:94:e0:28:e6:c9:95:2c:da:78:11:34:9c:
                    a5:07:37:b4:62:be:74:68:da:3a:80:21:79:e0:1e:
                    61:b8:92:59:80:34:e7:e2:4b:7d:11:db:33:6c:61:
                    1a:32:ae:0b:7c:12:92:2d:b8:47:7c:6b:e1:66:fb:
                    58:ae:57:d3:19:47:5b:c1:fe:a4:96:65:43:c0:d2:
                    86:ff:2f:07:c4:be:cd:45:1a:cf:38:35:92:c4:a7:
                    5a:b2:39:f3:28:dc:e4:48:a3:91:6a:ee:81:8a:6e:
                    1c:bd:07:e6:02:e4:98:9c:70:cd:55:a1:31:5c:0a:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:80:5C:D4:6E:B0:8C:63:8C:F8:7C:A9:C7:98:86:2A:BB:FE:F7:92
            X509v3 Authority Key Identifier:
                keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e5:5d:63:48:c9:15:8a:61:4d:bb:6b:4d:f4:3c:06:00:ae:
         d3:c3:d6:13:2b:b8:b6:85:fe:3e:3e:93:8f:7e:41:7e:ae:b7:
         5b:a6:8c:58:a9:59:e6:d7:6f:df:84:9e:22:77:96:3b:9b:b7:
         95:d2:28:7c:59:d8:cc:1f:16:87:41:51:09:b7:27:35:1b:e5:
         9b:a6:8d:0b:33:8c:15:66:3b:ce:6b:e1:08:81:e2:51:7a:0c:
         6d:ca:fd:13:1b:6b:b3:4d:18:70:fd:78:f3:2a:40:a8:12:9f:
         6a:b6:5b:f5:4e:2e:8d:c3:f9:be:0b:17:eb:09:ef:7d:c2:94:
         93:6e:b0:b5:cc:25:e5:c4:2e:02:98:b0:3f:a8:9e:80:f8:58:
         a4:55:3f:74:0f:e4:7b:5f:56:da:ee:48:ba:28:31:cc:df:e0:
         c9:64:50:4f:c6:df:2f:33:c9:a2:5f:bb:e6:f4:b9:9c:9a:ab:
         0c:90:88:ad:cc:06:02:95:e9:f7:d2:8e:0f:93:03:ee:06:11:
         b0:04:7c:ef:91:fb:73:1c:9e:6a:ec:50:bb:b7:1b:ab:2b:4e:
         19:20:53:f8:60:0e:55:c3:81:a4:39:cb:d9:5f:09:1b:df:15:
         90:fc:49:27:6f:0e:0c:94:61:dd:ac:a8:b9:0e:7f:a7:44:bf:
         7e:13:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:40 2025 by rpki-client