Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
File:                     F5meIRkUpo24Pq8_f9OExT50dFU.mft (raw, json)
Hash identifier:          JYVmwYdiKNUqfvKrpD1xrvhVUfg8h9KUn3cwbDPQLiY=
Subject key identifier:   29:90:5E:C8:41:7E:85:91:58:D5:94:88:57:5A:A2:C2:25:E5:43:9E
Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
Certificate issuer:       /CN=17999e211914a68db83eaf3f7fd384c53e747455
Certificate serial:       019511A2D9A402721114AF2B597793B21429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
Manifest number:          129F
Signing time:             Mon 17 Feb 2025 02:00:40 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:40 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:40 +0000
Files and hashes:         1: F5meIRkUpo24Pq8_f9OExT50dFU.crl (hash: jnQktLaiNY0Q5knHdsJnT7ycpeonRfP0iEn6ha6oQzY=)
                          2: jdjC0ww4NA_4Jmou2NIqk7PauVQ.roa (hash: DpdKiPWViVyeUlQa6RYjsV7wbTabm/grnxVTUMHIZOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:d9:a4:02:72:11:14:af:2b:59:77:93:b2:14:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455
        Validity
            Not Before: Feb 17 02:00:40 2025 GMT
            Not After : Feb 18 02:00:40 2025 GMT
        Subject: CN=29905ec8417e859158d59488575aa2c225e5439e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:18:6e:d5:95:02:19:0b:ac:57:02:77:64:53:
                    9e:2d:95:12:30:60:7e:10:75:49:7a:c7:c3:fd:74:
                    af:2b:77:6f:f3:1b:94:82:68:8a:e4:f1:0d:62:06:
                    a5:5f:60:60:80:94:e8:96:fa:75:46:f6:a6:2b:44:
                    78:10:79:48:7a:9e:2b:d7:a9:66:35:7f:2f:45:1e:
                    8c:aa:1d:f0:65:d3:5b:66:2b:11:33:cb:48:c5:a8:
                    c4:4d:99:90:18:7a:cb:9b:11:f3:fe:68:42:04:05:
                    8c:81:59:50:89:65:20:5f:e3:09:e9:1b:60:56:1d:
                    4e:fa:66:cb:7a:d9:fc:2d:29:7c:48:9b:c6:64:11:
                    7c:23:56:69:a6:23:81:f7:0a:88:97:3c:db:3f:05:
                    00:7f:83:d9:97:e7:32:9c:5d:5d:8e:21:01:d5:9c:
                    22:83:80:57:91:3b:0a:bb:68:45:dc:85:2c:a1:23:
                    3c:0b:21:fc:e5:61:08:5a:1c:4c:3d:be:80:c4:2d:
                    22:64:c8:67:8d:2e:77:02:c6:74:2b:f2:6a:3e:89:
                    ea:cf:4d:66:fb:c1:e6:c3:ab:d2:54:2b:91:ed:35:
                    ef:38:0f:b5:6d:db:11:6a:8b:67:f2:68:3a:17:ff:
                    9a:c7:35:69:a4:b3:3a:59:5e:60:53:b8:40:2c:fa:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:90:5E:C8:41:7E:85:91:58:D5:94:88:57:5A:A2:C2:25:E5:43:9E
            X509v3 Authority Key Identifier:
                keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:d2:5f:db:1e:ea:cf:d3:dd:2b:95:d7:1c:7f:11:4c:d0:6a:
         1f:e1:50:a8:a7:5b:28:c5:64:18:79:1f:a4:42:23:de:d4:f0:
         9e:d5:13:ff:05:b7:46:20:1b:05:d6:74:b7:fd:e8:96:9e:be:
         3e:31:c5:13:06:04:e3:2d:39:ac:9b:7d:4c:94:18:08:8e:d5:
         89:d2:03:cb:b4:b5:c2:3b:3d:13:e8:d7:45:8f:1b:ed:d7:57:
         ed:1d:5a:73:cb:1a:d3:6d:7e:46:d2:a1:81:55:82:44:09:a2:
         b8:cc:b9:6e:74:ee:17:f2:8b:36:4c:18:08:f1:43:81:6b:3e:
         22:75:b3:71:eb:cd:80:f6:bf:83:d0:9a:51:de:a3:dd:5d:8f:
         bd:62:6a:bd:b3:c9:73:89:f1:b3:62:f7:e8:fb:9d:20:61:b0:
         cb:fa:05:28:ce:a3:62:ef:23:94:92:b2:a4:fb:12:b7:e3:e0:
         8b:44:8a:2c:58:ac:2f:d7:a4:43:bb:86:67:65:89:33:8d:55:
         67:21:9d:a8:d9:68:b7:f4:7b:b5:00:b1:b5:51:2f:b5:db:e8:
         2a:ae:b2:b6:5f:ac:5e:93:19:30:69:25:d5:20:2a:c8:fe:bb:
         34:3f:35:c9:6c:5f:b3:56:31:39:70:61:b1:a8:28:76:c4:df:
         72:83:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:19 2025 by rpki-client