Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File:                     fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier:          RyX4QDkCrYs+CSqXJqXpOj2HcXk4XovUAv19VODMJXo=
Subject key identifier:   4F:DA:0F:FF:A8:93:3E:D6:3E:B7:A9:5B:AA:1D:C1:16:23:05:94:72
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer:       /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial:       0194C3197ED0212D9AFF75FE3F1ACC31C0D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number:          013A
Signing time:             Sat 01 Feb 2025 20:00:15 +0000
Manifest this update:     Sat 01 Feb 2025 20:00:15 +0000
Manifest next update:     Sun 02 Feb 2025 20:00:15 +0000
Files and hashes:         1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: HF8ih9rRqFgpqvkbK6XHMU5t1m9cBKW1WdihrqE7AtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:19:7e:d0:21:2d:9a:ff:75:fe:3f:1a:cc:31:c0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
        Validity
            Not Before: Feb  1 20:00:15 2025 GMT
            Not After : Feb  2 20:00:15 2025 GMT
        Subject: CN=4fda0fffa8933ed63eb7a95baa1dc11623059472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:d3:d5:8a:ce:d2:25:b4:24:f1:63:2c:30:
                    d0:3d:fc:ab:0a:e2:06:3c:69:f3:ed:f3:20:01:c4:
                    25:97:6f:33:e7:fd:6d:84:51:e2:8c:6d:7b:c2:7d:
                    0f:cb:a1:9e:3b:f3:48:d2:10:da:26:16:c2:c3:9a:
                    47:9b:62:7c:0c:e9:11:85:79:c7:bc:46:b5:67:8f:
                    3e:57:2c:98:60:48:75:c8:90:89:bf:62:6e:9e:bd:
                    5d:6d:5e:44:fe:57:41:e0:f0:17:25:21:16:d6:99:
                    f5:0b:35:bd:e5:ad:74:d6:48:43:58:ed:d3:c4:c8:
                    f2:08:50:28:b8:72:5a:95:ed:1c:21:91:a7:58:51:
                    bb:29:d3:1e:f4:fb:46:27:4c:b8:b0:f8:2d:e5:13:
                    25:a6:4e:e2:63:8a:f0:83:ea:08:8e:15:ad:e6:b7:
                    92:c0:e0:06:38:23:0b:bf:ee:7f:98:3a:bb:70:97:
                    21:c8:09:86:b6:d0:cc:e9:06:d9:c8:6f:91:ca:1a:
                    62:bf:44:d2:87:d7:1a:77:23:dd:fb:6d:5c:78:7e:
                    e2:ac:2a:29:2b:71:74:5b:40:26:c8:57:70:92:4c:
                    c5:f3:d9:97:31:51:c9:e9:c0:a9:27:75:0c:2d:31:
                    57:5d:c8:10:95:62:98:8c:62:d0:7f:57:1b:e3:c4:
                    d8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:0F:FF:A8:93:3E:D6:3E:B7:A9:5B:AA:1D:C1:16:23:05:94:72
            X509v3 Authority Key Identifier:
                keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:15:a1:b8:37:cb:6c:10:ce:f3:3a:59:7b:2f:ee:3c:fc:5f:
         79:08:4e:29:93:83:7e:12:59:8a:63:b2:cf:f9:0b:f1:8e:1a:
         a1:74:b9:55:98:a9:56:27:32:b6:bc:4c:ee:97:53:d4:1a:f0:
         3c:5e:ad:24:5b:8b:9e:79:77:a6:af:69:ba:5f:d8:17:4b:f5:
         17:54:e4:7d:46:c6:8c:80:d8:c4:5f:d5:28:67:d2:0f:9d:c6:
         bf:b0:85:c9:c6:c3:71:c6:fd:07:1e:58:7e:4a:8e:3e:d8:12:
         5e:3b:4f:62:06:49:f5:b1:2d:1a:75:6c:72:7e:cf:4f:69:a4:
         cd:4f:02:0a:8b:4e:3f:8f:91:7a:a8:cc:9e:8a:30:22:ac:3b:
         fb:91:b5:30:1e:27:9b:59:a3:bc:aa:2f:08:b7:6b:d8:73:5e:
         ba:ec:d1:c5:f2:15:64:46:09:d1:c4:64:f9:53:b0:a4:4d:a2:
         11:46:6d:b3:e1:4d:ae:28:d0:8f:a5:25:4e:31:11:a8:49:38:
         fa:ae:33:3c:76:1c:68:25:9f:8d:80:99:c7:0a:5f:43:fc:dc:
         74:d8:dd:01:ca:92:3b:8d:ff:e6:03:0e:95:4f:51:46:d5:49:
         2f:ca:17:ff:26:2e:1a:18:b5:42:43:9a:8d:61:fc:ec:59:14:
         e1:0a:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:59:51 2025 by rpki-client