Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
File:                     frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft (raw, json)
Hash identifier:          yE+qLtpq+GCADCRCSB4YZTz/yBYIdbcqaYnbdzGfECs=
Subject key identifier:   31:52:05:ED:7F:8A:98:53:E6:BF:FB:C1:38:04:6D:85:F4:79:48:A9
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Certificate issuer:       /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial:       019511A3074CDE83140E97EF6F399CFF49BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
Manifest number:          07FD
Signing time:             Mon 17 Feb 2025 02:00:51 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:51 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:51 +0000
Files and hashes:         1: D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa (hash: iOwjeX+ly9me24ya3PbZf2MmDFD7bpYOFi09vEBVm6M=)
                          2: frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl (hash: ivToUu86W5cnM3DmpKtN4Yr7L1zkQSv2Ta0WeS1N4k0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a3:07:4c:de:83:14:0e:97:ef:6f:39:9c:ff:49:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
        Validity
            Not Before: Feb 17 02:00:51 2025 GMT
            Not After : Feb 18 02:00:51 2025 GMT
        Subject: CN=315205ed7f8a9853e6bffbc138046d85f47948a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:4d:b5:0f:9e:76:a4:9b:94:51:73:b1:84:
                    1d:00:ea:61:fa:38:69:2b:28:d8:fb:d1:04:13:40:
                    f9:cc:5d:55:0b:14:ab:de:5e:c7:d2:d9:bc:e4:96:
                    6c:4a:1d:38:34:fb:98:31:db:41:30:9c:d0:df:b8:
                    7c:56:16:f6:76:50:23:7f:60:2f:86:1b:91:f2:6b:
                    bf:52:47:c5:c4:2e:7d:27:b4:00:33:37:b2:e7:31:
                    8b:ca:c1:8e:22:e7:96:61:0d:9e:e8:5d:83:73:8f:
                    29:83:b7:7e:e3:6b:c6:cb:a5:02:52:a3:30:b7:f3:
                    15:30:08:d3:a7:c2:81:8d:34:47:e5:cf:32:f1:a2:
                    34:64:82:d6:c5:e3:47:06:42:73:c7:0d:80:0c:52:
                    66:26:63:75:14:d5:66:f1:72:8d:39:ff:23:72:44:
                    27:d8:24:eb:ea:34:fc:e7:f8:d1:43:79:6c:d6:58:
                    8d:0f:91:41:d1:b6:6b:a3:de:56:e9:19:27:1b:9b:
                    d5:f2:b2:1b:65:a6:94:dd:4f:32:9b:69:21:7b:81:
                    36:7d:5d:be:e0:02:bb:f7:5f:20:3a:cd:49:41:ba:
                    df:6e:8f:1d:b4:8e:ce:45:14:c9:3e:37:2a:ba:33:
                    e5:f5:c2:3b:0a:e2:30:08:14:a5:29:80:0b:8b:74:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:52:05:ED:7F:8A:98:53:E6:BF:FB:C1:38:04:6D:85:F4:79:48:A9
            X509v3 Authority Key Identifier:
                keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8e:ee:4a:5c:91:4f:d9:d6:5a:a0:06:e2:19:ac:be:46:5a:
         2a:44:67:59:09:ba:18:92:ec:8e:21:2c:d8:d8:d1:d1:f3:8f:
         a2:a7:b3:8e:06:28:ed:5a:b3:c9:e4:69:33:b6:0f:12:4d:d3:
         a0:57:cb:41:52:78:52:32:1b:c4:1f:59:3a:6f:d0:cc:b1:46:
         0f:13:1c:2a:87:dd:06:01:88:b7:74:5e:e5:4d:f6:4d:6a:82:
         88:4d:63:c2:c9:a3:d9:66:5a:2e:ef:14:7d:66:50:2a:d6:86:
         c7:be:84:97:c9:ad:80:d5:ea:bc:71:ea:ab:69:99:22:ab:ff:
         83:0b:6a:19:2b:5c:ab:8d:ca:c4:a8:de:b8:56:8e:51:58:57:
         35:f7:c3:ec:c1:ef:58:4d:ea:55:28:f8:ab:22:e8:98:c0:52:
         a1:6c:7f:e8:8c:6f:a7:7d:e0:cd:f2:de:a0:8b:5d:54:b4:10:
         4c:0c:69:24:ee:49:1f:d7:12:88:e3:2d:97:9b:05:17:c5:05:
         47:0e:05:ae:b0:17:61:1d:50:76:80:47:e4:f6:19:20:26:3b:
         35:43:ec:64:47:88:4a:b8:b0:8a:60:54:ba:b0:0a:01:d0:4a:
         67:b8:b5:a0:e1:6d:ae:c1:76:86:0a:7f:8d:f0:51:64:eb:cb:
         22:2d:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:05 2025 by rpki-client