Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File:                     fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier:          C0woaJgog8m7J0HDJbaA6ej1QTv9g1DeJ0nh7iarw+E=
Subject key identifier:   37:33:6B:E3:0F:DC:4E:7D:63:26:A9:97:40:81:5E:39:B4:19:69:DC
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer:       /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial:       019512477419B8FE4AD1C077291880EAAA46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number:          040C
Signing time:             Mon 17 Feb 2025 05:00:27 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:27 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:27 +0000
Files and hashes:         1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: S/QzC8XwjrUa1ABx4njEUwu9xEr4dykdL47uy3a4DYI=)
                          2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:74:19:b8:fe:4a:d1:c0:77:29:18:80:ea:aa:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
        Validity
            Not Before: Feb 17 05:00:27 2025 GMT
            Not After : Feb 18 05:00:27 2025 GMT
        Subject: CN=37336be30fdc4e7d6326a99740815e39b41969dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:f5:98:23:1a:bd:d3:ad:ca:d1:58:2b:2e:
                    77:a9:81:6f:70:82:80:30:2f:d3:78:18:e4:26:ad:
                    d7:04:61:b6:61:7d:92:0e:62:67:fd:7c:20:56:d6:
                    a0:3c:f3:5f:0e:8e:bf:d5:83:1c:5b:e9:31:23:73:
                    19:1d:87:34:02:75:95:58:7d:7a:79:74:8c:28:d3:
                    d8:70:8b:b6:7d:85:1e:5b:4f:57:20:82:0b:d8:84:
                    85:ab:05:bb:1b:45:1b:e6:96:62:64:06:e9:7b:9f:
                    90:15:ae:ad:1e:43:c0:9c:e7:26:b5:93:b1:b4:22:
                    4b:82:b4:b3:6e:6c:9e:a2:28:7f:2f:65:77:95:a5:
                    c2:e8:8d:46:0e:39:09:06:9a:32:82:89:9f:11:ca:
                    9d:bf:4a:9a:99:38:45:00:15:8c:ea:78:78:a5:1d:
                    88:f2:0a:1c:3c:dd:6c:45:4c:a2:f9:06:33:9c:04:
                    6c:1f:15:93:02:5a:cc:ff:d4:71:7d:4d:50:3f:df:
                    85:fb:ae:9e:3b:3a:38:a0:f1:e9:64:f7:2d:c8:d4:
                    4f:b4:34:d4:17:82:e2:e9:c6:af:f0:30:36:ea:34:
                    53:14:57:84:c6:d2:4a:71:27:03:c0:60:ff:2a:b5:
                    5e:a6:2c:f5:5b:c0:d5:e0:e7:fb:34:ad:62:fa:e5:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:33:6B:E3:0F:DC:4E:7D:63:26:A9:97:40:81:5E:39:B4:19:69:DC
            X509v3 Authority Key Identifier:
                keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:78:62:39:e5:df:42:11:5b:97:7f:70:d2:8e:bf:e6:30:
         04:d8:a6:6a:76:ec:42:e8:91:8b:0e:1b:42:55:a7:12:ea:a1:
         ab:30:e6:59:4a:e0:0b:e1:1a:42:c3:7f:98:79:a4:67:0a:0e:
         cb:ff:9b:3a:56:4a:05:52:1a:e8:0b:44:8e:e4:11:14:7c:46:
         27:93:fe:b2:7a:18:1d:84:13:9d:d1:ad:b3:75:f6:d1:23:59:
         2b:96:96:23:43:4d:23:d0:c8:2a:51:25:64:2d:e6:a1:d2:74:
         72:08:2a:bf:09:a7:a1:d2:ac:e2:28:01:67:6d:0a:c1:2d:72:
         4e:75:86:cd:5f:f2:51:55:59:70:f6:34:a0:78:4d:7c:53:56:
         b3:fd:03:a7:76:62:33:20:53:91:8b:e6:da:bf:ad:6c:16:83:
         5a:42:77:39:21:16:46:cd:e4:df:b4:ae:8a:af:21:96:4d:b5:
         09:80:cd:42:a3:a7:55:7f:33:f0:96:c8:61:47:89:b6:35:c3:
         f3:8a:2d:91:ba:92:52:c2:d7:8c:f2:ea:e9:64:7a:9c:77:9c:
         fc:3c:26:3f:33:69:49:17:ad:73:dc:21:88:21:79:c5:c1:57:
         5f:54:a7:78:8b:f5:e8:4b:ad:25:c6:2c:9e:ce:44:6a:80:16:
         a3:7b:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:50 2025 by rpki-client