Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          PNl1QglOOfJoBS6g/D3QCsh9MAVsmzSn/c/oKLZkQjU=
Subject key identifier:   E4:04:BF:E4:47:21:82:95:55:85:9F:06:35:71:E1:19:16:CA:9B:93
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       0195124750A65027ABAFD9E2D3F529F3EA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          145B
Signing time:             Mon 17 Feb 2025 05:00:18 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:18 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:18 +0000
Files and hashes:         1: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: wK3zbSsosqK5zMibnkmicowylB8m8Ucxubn5hOb9vc4=)
                          2: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (hash: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:50:a6:50:27:ab:af:d9:e2:d3:f5:29:f3:ea:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Feb 17 05:00:18 2025 GMT
            Not After : Feb 18 05:00:18 2025 GMT
        Subject: CN=e404bfe44721829555859f063571e11916ca9b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:c7:25:90:21:f4:97:f1:05:95:79:90:2c:
                    bc:98:60:b1:c1:67:6a:e5:8c:e7:e2:50:ac:7e:30:
                    69:d5:e0:46:4d:e7:74:ed:a1:38:66:4f:78:36:c8:
                    51:2f:5e:10:9b:1a:6d:13:1d:7b:ca:3e:e8:93:6d:
                    2b:e0:0e:8a:3d:25:4b:4f:f8:cf:94:98:2f:2b:74:
                    13:59:e8:c3:92:20:1a:13:0e:59:f8:11:de:c2:53:
                    bd:74:9a:38:ac:01:a8:9d:5b:22:a9:4b:44:34:73:
                    a0:b7:80:f1:66:ef:5d:1e:a1:a2:37:ed:56:75:b2:
                    93:5a:08:ff:32:98:0e:fe:60:d2:b2:f8:cb:93:19:
                    cc:7c:12:bb:e7:79:b0:6c:b5:35:8e:56:47:ec:3e:
                    da:d2:5e:2b:43:2a:2f:17:48:d7:63:d1:ff:44:85:
                    ef:99:42:a4:4c:49:35:cc:95:58:d0:2f:c6:5b:45:
                    70:1c:c1:87:06:02:3a:b6:4f:c4:99:96:ee:d6:3a:
                    5a:a5:29:30:f5:a5:3d:bb:72:ee:29:da:13:3c:e4:
                    e4:89:3a:ce:f6:6e:bf:b9:85:70:75:be:36:1b:b5:
                    a2:e7:79:4e:f8:82:62:cd:d0:bc:8d:df:6b:e0:4f:
                    e7:4c:f9:46:2b:bc:2d:8b:9d:97:01:2d:44:f3:c7:
                    91:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:04:BF:E4:47:21:82:95:55:85:9F:06:35:71:E1:19:16:CA:9B:93
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:03:a8:9b:64:67:74:50:7b:8f:18:ce:b0:82:74:09:70:
         7c:df:c6:f9:60:eb:18:a1:25:09:ff:eb:b1:e1:57:54:5a:01:
         8b:0a:86:6e:41:3d:cc:53:98:c6:98:40:90:20:f4:c0:d0:ba:
         fa:cb:93:87:d6:5e:34:18:bf:93:d6:90:18:df:e1:22:3d:0b:
         26:7a:99:25:95:bd:3f:c0:f3:9b:95:be:02:b0:82:2a:b6:ef:
         4f:b4:9a:88:4f:14:74:9f:8a:1a:02:af:9b:6e:ce:35:d1:8d:
         ff:01:c9:64:b6:78:cf:73:e5:67:7f:dd:75:f7:06:ac:28:a9:
         3d:7d:36:2b:7b:3c:aa:8c:37:36:4b:15:aa:81:4d:20:2a:63:
         74:89:7d:50:47:f2:15:21:31:0b:95:fa:2d:bb:67:9e:4f:39:
         9c:1d:fd:18:92:85:71:fe:5a:f4:9e:74:77:a4:ee:82:a7:2d:
         b2:a4:34:58:ba:af:28:f2:3b:20:c8:d3:3e:0c:4a:17:47:44:
         ab:75:55:da:24:20:77:85:f4:48:bb:82:36:a3:f1:92:95:41:
         9e:7f:c1:68:a2:58:20:76:4d:74:76:42:89:f0:55:ea:ae:a5:
         33:a0:e7:1c:a4:6c:90:84:78:97:f9:a9:e4:a7:4c:a8:b7:79:
         19:b3:28:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:12 2025 by rpki-client