Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File:                     fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier:          15GjVwPdxQBifApbLBSzFu1CCAh0v4Aloxt3CaNZ9p0=
Subject key identifier:   25:CA:77:EB:76:36:66:D2:CE:60:74:85:03:FF:CE:FE:3C:F1:2F:2F
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer:       /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial:       01951134A0B2401C8BFE08C7400F1944F486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number:          0A49
Signing time:             Mon 17 Feb 2025 00:00:16 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:16 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:16 +0000
Files and hashes:         1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=)
                          2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: g8TvkKASH1WLbUNeoL9s9E+cUn3nky0DMHKejlBM0qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:a0:b2:40:1c:8b:fe:08:c7:40:0f:19:44:f4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
        Validity
            Not Before: Feb 17 00:00:16 2025 GMT
            Not After : Feb 18 00:00:16 2025 GMT
        Subject: CN=25ca77eb763666d2ce60748503ffcefe3cf12f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:59:c3:d5:d8:88:52:9f:90:93:19:5f:20:
                    2c:5d:a1:d8:f2:02:d2:ec:37:73:45:82:78:9d:9b:
                    22:f9:78:62:96:c7:01:39:f9:c3:6c:71:00:6e:9f:
                    cc:ec:6e:6b:8e:c2:b4:3c:dd:e9:5c:cc:a7:55:80:
                    1e:6d:25:7d:99:bf:39:d4:cb:15:32:41:71:fc:e2:
                    3b:8b:92:bd:ad:29:25:2a:57:6f:1c:9c:b9:76:18:
                    59:c4:77:17:7f:92:25:4e:6a:f7:1e:d8:a7:b6:c8:
                    48:32:39:95:b1:9d:29:ba:fa:56:b5:05:e9:29:e8:
                    6e:cc:e3:4f:46:30:3f:45:d6:c2:8c:af:8e:e3:c6:
                    e0:04:df:34:ca:6b:60:79:5f:2d:9c:a9:b5:db:38:
                    0e:6e:3c:31:34:ac:6d:6e:10:49:42:98:95:28:83:
                    db:55:c1:d2:67:f9:eb:1a:90:c2:27:ee:fc:ea:48:
                    7b:ef:a5:53:2e:2a:49:a6:06:df:d8:87:d1:a2:07:
                    a7:5a:b0:2c:49:cd:36:ff:97:f5:e0:d7:fa:00:f4:
                    a7:84:c8:8b:8e:cd:3f:ac:6c:7b:ce:c3:f8:37:98:
                    11:16:16:cf:5d:0b:b2:b8:21:b2:37:dd:c1:c1:0e:
                    de:e0:90:10:b9:93:b2:fe:ba:7b:78:2c:07:19:f9:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CA:77:EB:76:36:66:D2:CE:60:74:85:03:FF:CE:FE:3C:F1:2F:2F
            X509v3 Authority Key Identifier:
                keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5f:a0:dd:3b:d3:4e:1f:9f:f2:a4:d4:b3:8d:44:8f:d7:2b:
         ed:c5:a1:56:57:7d:ad:8f:dd:85:49:01:1c:a3:05:0a:64:fb:
         78:f7:c7:b9:12:09:40:b0:39:72:1e:f5:6b:cd:f3:70:0d:4b:
         db:07:54:22:77:18:12:f6:c5:36:18:c0:3b:0a:40:1a:d9:1a:
         6a:c2:76:4b:7b:ff:72:8f:9d:cf:e1:2c:84:21:bd:bf:45:b2:
         59:25:b4:37:7a:4c:a1:00:4f:a4:59:de:35:d6:4c:48:d1:56:
         81:6a:54:f0:78:c3:5a:c5:f3:62:10:69:1d:13:12:58:0e:24:
         b4:3b:63:6e:54:96:e1:a1:1b:e3:8f:b5:44:57:32:35:2e:af:
         69:24:33:ac:23:07:b4:ea:b9:7e:53:79:70:ff:d1:1a:09:26:
         84:d2:0b:22:53:d1:1d:ba:01:ae:fb:ca:21:51:dc:0e:89:6a:
         c4:59:d0:a9:f4:bf:98:f2:b3:8b:de:08:dd:57:ee:3b:3a:5e:
         9d:c6:f9:31:bc:7e:fb:c4:c8:3e:fc:6f:95:ba:a2:58:98:1b:
         07:cb:cb:56:e1:9d:06:18:3b:2d:13:e2:b4:29:08:73:79:53:
         45:ba:e5:9a:01:d0:5e:41:a2:93:5b:b2:62:b3:37:00:f2:0f:
         60:0c:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:44 2025 by rpki-client