Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
File:                     W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft (raw, json)
Hash identifier:          tm18VXU+HEcoOqMVXK9p7DuEPmq62wiR5veyOu1rEPI=
Subject key identifier:   75:5F:A9:88:7E:8E:39:8C:4F:CB:AE:C6:11:1C:0C:66:4E:8D:A6:1C
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Certificate issuer:       /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial:       019512B692FB43EB59929FC9D01FA8294CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
Manifest number:          1456
Signing time:             Mon 17 Feb 2025 07:01:49 +0000
Manifest this update:     Mon 17 Feb 2025 07:01:49 +0000
Manifest next update:     Tue 18 Feb 2025 07:01:49 +0000
Files and hashes:         1: W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl (hash: 0EGDcZbK9l3oirTqtpwB+pTf/CNX+qwBs33uur77bwo=)
                          2: gtNjwWIklt9RQOUEEkHBnNPLSqM.roa (hash: vH0Ya4SYvhAbrE7j6LOzzc7/NQSUnPHlrM/bMm0UTx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:b6:92:fb:43:eb:59:92:9f:c9:d0:1f:a8:29:4c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
        Validity
            Not Before: Feb 17 07:01:49 2025 GMT
            Not After : Feb 18 07:01:49 2025 GMT
        Subject: CN=755fa9887e8e398c4fcbaec6111c0c664e8da61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:29:b1:62:e2:fd:51:dd:93:9f:bb:2b:80:
                    5a:a4:f1:2f:e1:17:34:70:56:51:1c:70:b2:d0:16:
                    52:34:c7:62:c1:44:35:37:80:46:37:2e:29:ae:c8:
                    6b:92:7c:90:d2:60:6b:b9:d3:bc:fd:28:2b:ea:02:
                    70:28:02:2d:01:5a:15:3a:b2:01:f8:14:fe:85:ca:
                    67:98:9c:c3:a2:64:b1:15:d7:34:43:7f:75:c8:58:
                    5f:61:28:d4:7e:43:02:46:d4:3d:f7:94:70:87:dd:
                    7c:c2:a1:93:f8:97:79:c8:e4:2b:a2:36:4b:fd:78:
                    52:c1:1e:5e:4e:4f:3b:29:92:e7:13:07:8f:48:8b:
                    e3:96:65:ab:28:6d:07:e7:db:d2:f2:4e:df:70:ab:
                    1c:72:bb:20:3e:6f:b6:30:0d:6b:0c:9e:70:63:f9:
                    d6:8d:63:38:f3:3a:d0:f4:b9:0f:dc:c2:2c:b8:57:
                    53:61:d1:81:f4:5e:98:cc:80:a9:fa:4c:11:6a:ec:
                    7c:f4:3d:7a:76:d8:1d:fe:a8:5e:3f:6a:c2:35:28:
                    53:04:da:ec:72:a6:3e:4e:7f:38:db:40:35:bc:6f:
                    a4:30:cc:32:28:14:21:63:1c:87:14:06:df:14:cc:
                    7c:6e:db:dd:2a:8f:d8:48:73:cc:e9:c1:6e:f9:3c:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5F:A9:88:7E:8E:39:8C:4F:CB:AE:C6:11:1C:0C:66:4E:8D:A6:1C
            X509v3 Authority Key Identifier:
                keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:48:8d:41:6c:97:84:44:4d:08:f4:ec:8c:76:b5:d8:b7:1e:
         04:56:21:c0:d6:46:97:cf:a1:ae:a6:91:ef:76:4b:f4:1b:09:
         dc:99:12:2b:81:af:30:ee:b0:78:db:5e:14:be:47:9e:45:65:
         80:c2:b4:ee:5b:27:f6:9e:dd:32:d4:76:e5:53:86:61:32:46:
         22:69:50:26:21:5f:fb:07:d0:2d:4d:c5:57:ce:85:0c:82:7d:
         b1:e5:2d:9b:ec:6a:95:09:6e:48:b1:38:b9:58:8e:c4:6b:0a:
         d8:8f:6d:b5:fa:b7:95:fc:90:84:72:da:1d:e8:b8:ff:a7:44:
         2a:60:47:7c:93:79:75:29:8b:ee:a5:6a:3f:4c:2f:fa:e0:6b:
         65:da:b9:4c:7f:a4:ec:04:31:04:53:c8:20:c6:d9:70:95:cb:
         8a:d4:8c:68:77:4d:73:10:85:7d:07:ca:8f:aa:b5:c8:a3:49:
         57:e7:2d:c8:ab:7e:c2:06:54:eb:f4:b6:50:98:33:e0:49:ee:
         9d:c3:81:d3:0b:00:58:12:15:ac:de:c1:c9:e6:cc:40:63:4a:
         33:f3:2b:41:4f:ef:8b:47:e9:15:23:4c:16:62:50:ad:18:61:
         d6:87:0b:52:7a:50:7a:b2:cd:3e:eb:96:0e:14:61:f0:ed:79:
         8a:ec:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:27 2025 by rpki-client