Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File:                     tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier:          4uUimv2rroPDkUsHUsQ8g78qS1+m4/at3bQsEVjgAwY=
Subject key identifier:   93:FC:86:DC:FA:57:C6:AD:21:BF:5B:B1:F6:50:86:B0:C5:39:44:30
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer:       /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial:       019511A2697541F0499666D3057BC6F9741F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number:          1455
Signing time:             Mon 17 Feb 2025 02:00:11 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:11 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:11 +0000
Files and hashes:         1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
                          2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: xEb9EX8DhRzc1iG9g/UitzvQ4M6z6WJuydaaUyMd5CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:69:75:41:f0:49:96:66:d3:05:7b:c6:f9:74:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
        Validity
            Not Before: Feb 17 02:00:11 2025 GMT
            Not After : Feb 18 02:00:11 2025 GMT
        Subject: CN=93fc86dcfa57c6ad21bf5bb1f65086b0c5394430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:24:73:a3:09:77:0d:82:2f:07:c4:96:2c:
                    d5:44:66:ef:9d:6f:fe:1d:32:02:a8:cb:a7:00:4c:
                    43:dc:d4:81:4f:87:ba:d2:de:3b:95:3b:e7:90:62:
                    a0:83:94:1a:00:20:ac:de:e1:d1:b4:8b:b6:8d:e4:
                    ea:1b:d8:f1:2b:c2:4e:74:25:02:3d:65:07:41:4f:
                    41:e2:2a:30:a7:ae:df:17:f7:6b:66:5f:3d:c5:c8:
                    4d:a4:d2:6d:51:2d:9f:4f:11:2f:95:ae:d0:84:6f:
                    ca:dc:93:ec:65:3e:64:f8:48:59:2b:eb:9a:fa:2a:
                    21:12:24:58:53:d0:7c:4b:47:c6:0b:50:54:85:fc:
                    d4:2b:c3:cd:f1:11:01:64:a4:de:90:05:71:aa:21:
                    59:70:e0:65:bc:a3:8a:53:17:c6:04:2e:64:be:d3:
                    d2:8e:f9:62:0b:c2:05:a2:20:7d:a6:4a:4b:df:2c:
                    36:fb:22:99:b1:e9:86:2d:d6:9e:b4:08:2d:38:ca:
                    9a:e3:51:42:b2:8d:41:08:5b:1d:58:10:9d:87:10:
                    be:63:27:f4:66:6e:71:12:74:02:d2:63:ef:ae:4a:
                    1d:c7:b6:9b:a1:a3:94:54:10:63:78:b3:a6:fc:c1:
                    0f:e6:9e:68:7c:96:05:31:af:29:00:1c:d3:6b:cd:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FC:86:DC:FA:57:C6:AD:21:BF:5B:B1:F6:50:86:B0:C5:39:44:30
            X509v3 Authority Key Identifier:
                keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:71:a8:32:49:e6:b8:33:58:0e:08:41:87:a5:93:f5:28:
         4d:f6:9b:14:ac:83:1b:94:f9:5e:60:b2:7a:25:5e:2b:e9:8b:
         45:2e:f5:c3:7a:a1:ff:d7:9a:6e:d4:67:cd:25:16:52:a5:07:
         cf:e1:da:85:63:84:d1:07:4f:a2:e0:98:8b:58:6b:2d:32:c1:
         87:c2:7f:27:6a:02:23:9f:f4:aa:5e:c7:db:da:02:95:3a:f8:
         9c:ab:76:dd:a1:17:82:ad:3c:07:38:5e:59:b4:05:e2:2f:46:
         20:d6:4f:be:6a:5d:52:99:19:31:d5:fa:d9:f5:06:02:d0:86:
         ed:b1:6c:da:0c:07:58:ef:ca:f3:af:9e:74:fb:f8:c8:71:66:
         f9:0d:29:3b:95:09:ef:fb:97:5c:cf:8e:37:7f:6a:1d:b6:01:
         91:c2:a9:7b:ac:7d:bc:d5:9d:f9:a6:94:54:7a:24:0c:5e:12:
         0d:e8:bc:2e:12:6e:a4:a4:58:90:06:08:b8:11:ff:8c:e2:7d:
         69:33:61:83:e9:7b:64:0a:4d:81:09:2a:28:7d:ad:bf:8d:2b:
         e5:02:d2:9e:e2:34:8c:bf:a5:e3:4b:f5:b3:96:4f:1f:c6:01:
         92:81:bc:8f:3e:0e:00:13:28:3f:ff:48:20:bb:58:6c:59:67:
         41:64:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:18 2025 by rpki-client