Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
File:                     eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json)
Hash identifier:          FQnPGVi+egkVVTCrhqB6CR2NWM4/OfZmghWvFtBg1UY=
Subject key identifier:   CA:90:8B:18:55:81:57:F9:D2:6E:4B:05:4C:5B:DA:FD:AF:53:B8:A9
Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
Certificate issuer:       /CN=792304cece7fb6551d621e257743753d7d3e7eba
Certificate serial:       019511347F5F197B7FBB5258A7368FEC4B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
Manifest number:          119B
Signing time:             Mon 17 Feb 2025 00:00:07 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:07 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:07 +0000
Files and hashes:         1: IMdPglYzX5a0Y8UZyR6PoX9F3qI.roa (hash: LlemrthVpDv3Bg7I6x+S4EwJBWPGL+Tm33DKrH5qsTc=)
                          2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: tFTwd8fSwWd8dZOpOffAIZYjfmBZe8jAMZjXaFhnpvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:7f:5f:19:7b:7f:bb:52:58:a7:36:8f:ec:4b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba
        Validity
            Not Before: Feb 17 00:00:07 2025 GMT
            Not After : Feb 18 00:00:07 2025 GMT
        Subject: CN=ca908b18558157f9d26e4b054c5bdafdaf53b8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:85:6d:11:96:53:8f:a5:91:c0:41:aa:18:
                    e5:8a:64:0e:a1:05:2b:25:5d:28:c2:f6:f5:ff:3a:
                    a6:c5:f8:4b:f8:93:46:a9:8a:21:04:fb:2f:73:f4:
                    de:87:88:21:91:bd:7e:53:6c:7b:f1:cb:de:ec:f3:
                    b7:1f:88:3b:83:9f:48:15:7a:45:92:d7:4a:ae:9b:
                    af:09:84:fe:4c:3b:82:f6:3e:7e:26:dc:d1:d8:b7:
                    8d:66:ea:17:1e:a1:db:28:52:57:db:98:4f:b9:7d:
                    47:ba:1b:cf:b6:69:b6:b4:a8:77:17:8c:0d:73:45:
                    cc:67:b0:3b:da:e2:4f:e0:81:9b:c4:f0:44:e9:79:
                    5b:d2:d1:1e:b7:cd:35:f5:4a:80:11:0d:d9:bc:92:
                    13:4a:fa:aa:3f:2f:d0:a0:4b:0b:33:a4:58:dd:e9:
                    fb:55:a3:71:06:95:04:8b:4b:53:b6:db:1d:91:ef:
                    40:34:cb:e6:28:a8:6f:19:5c:6d:33:de:68:dc:e7:
                    2f:54:b4:8a:09:2f:bd:e7:87:d4:c2:e4:47:a1:3b:
                    e6:d8:ee:12:37:53:81:76:98:d1:c8:2a:de:d3:16:
                    7e:68:4a:02:46:46:01:8a:6a:19:51:1f:02:4d:0e:
                    98:32:7f:d7:70:4c:e8:18:33:19:00:58:13:43:21:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:90:8B:18:55:81:57:F9:D2:6E:4B:05:4C:5B:DA:FD:AF:53:B8:A9
            X509v3 Authority Key Identifier:
                keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:90:10:f4:ae:2e:97:63:3b:98:85:53:e2:cb:cb:62:2f:74:
         4a:67:50:eb:79:3f:ca:2f:c7:25:8c:d9:eb:39:7e:69:d4:4d:
         62:db:6e:e1:27:d0:91:37:bf:c7:8b:c6:88:89:18:86:d6:b9:
         21:9e:9b:11:bb:71:fa:c8:15:ea:9c:ae:2e:18:04:1d:5b:10:
         89:71:83:40:5d:df:f6:3e:85:78:db:87:ab:0c:fc:65:75:ec:
         db:89:52:c4:39:07:bb:de:ce:78:2d:3f:8a:53:c0:c0:51:1a:
         f9:11:ee:50:37:c5:7b:f5:13:d3:32:38:b7:19:9d:cb:02:a5:
         a7:42:a3:3a:f5:11:e3:92:30:eb:e9:e2:7a:a4:b4:5a:12:94:
         34:0b:e6:85:23:63:ea:24:b1:32:9c:4e:3a:5f:86:c5:db:60:
         79:53:94:38:a4:b2:c6:b8:0a:cf:18:75:10:a3:51:56:a9:5f:
         d9:01:32:54:3d:5f:67:fe:fd:67:d5:ab:09:7f:99:dc:cf:7b:
         37:49:57:17:5e:75:de:00:53:fb:eb:40:82:bd:8d:e8:45:37:
         4e:f3:5f:ce:67:da:d8:93:aa:27:db:8e:9e:a5:3a:a0:61:f5:
         9b:0d:9e:ff:d6:7e:46:da:3a:40:3f:94:15:54:a8:5d:fd:d7:
         32:75:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:02 2025 by rpki-client