Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
File:                     jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json)
Hash identifier:          ljF3XS4xJYue2yDpXoNgw3Lx4Ci81WthqQ1eTvOoJOE=
Subject key identifier:   10:7B:5C:06:3F:2F:8E:06:5C:30:49:A9:BF:00:83:51:C0:98:DB:79
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Certificate issuer:       /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial:       019630507BDBAAA429B2D8ABE7B48473A19F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
Manifest number:          1430
Signing time:             Sun 13 Apr 2025 18:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 18:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 18:01:42 +0000
Files and hashes:         1: DYRo5UxpUtRoBr5siZIGMHmDOmk.roa (hash: CNeg8TW20mVMGXVcVuZCa6OMSEOFftuPH5JmAwDqWJM=)
                          2: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: oCY0RB11dZHY9HyjknvhgZ4w6AwAje1+CL1vE80igUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:30:50:7b:db:aa:a4:29:b2:d8:ab:e7:b4:84:73:a1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
        Validity
            Not Before: Apr 13 18:01:42 2025 GMT
            Not After : Apr 14 18:01:42 2025 GMT
        Subject: CN=107b5c063f2f8e065c3049a9bf008351c098db79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:fb:3f:f1:b5:75:84:c5:94:3a:57:fe:fe:
                    db:1b:63:d1:15:11:90:f3:ac:e2:6e:63:92:e7:11:
                    f9:0b:f5:77:65:62:cc:66:c3:e8:45:ec:af:1e:e9:
                    80:10:17:26:2a:b3:1b:e9:91:48:4f:23:97:81:5a:
                    e4:47:dd:20:e2:39:2f:d8:c1:f8:c1:04:5c:72:92:
                    74:15:11:1f:93:86:74:6f:f5:16:d7:51:c2:20:67:
                    82:4e:51:42:79:85:58:94:e9:8d:0f:62:07:d7:f5:
                    88:d3:11:36:b7:da:23:1e:61:80:1b:7d:e3:20:25:
                    cc:56:dd:36:40:59:5a:f0:b0:37:28:16:c1:a8:e3:
                    0d:ec:7d:c7:3a:08:89:07:c6:a4:ed:38:8b:8d:c1:
                    a8:45:b8:7b:08:b3:92:47:05:e5:65:98:1a:72:34:
                    36:73:7a:7a:67:72:cd:a2:4a:99:be:c7:3d:0e:23:
                    f1:38:ae:22:21:62:d2:5e:66:c7:c7:0a:90:9c:63:
                    c9:06:1f:e7:c2:d7:58:f7:9d:cd:b5:0b:23:95:51:
                    17:0b:68:5a:10:82:0c:96:12:3d:53:d5:aa:31:c6:
                    37:56:03:7c:f9:14:d2:2d:f3:27:32:d9:5d:a7:0b:
                    6e:35:f7:91:4b:6d:32:ab:28:ca:85:dd:35:1e:09:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7B:5C:06:3F:2F:8E:06:5C:30:49:A9:BF:00:83:51:C0:98:DB:79
            X509v3 Authority Key Identifier:
                keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:96:1d:16:0d:2d:33:79:28:1d:79:9a:4c:b7:77:30:26:a3:
         3e:21:1b:5e:8a:a9:1c:c1:99:41:95:4b:38:58:7c:62:ab:41:
         26:89:da:17:a3:73:94:fc:af:5c:f8:13:61:bb:f7:37:e8:86:
         d0:78:c6:22:b9:19:b8:f3:fd:6b:01:05:e6:2d:fd:7d:52:c4:
         da:8b:df:38:4d:1c:da:a7:40:76:bf:f7:94:ae:7d:9a:a9:97:
         c3:02:b6:bc:38:0a:cf:00:0f:c8:80:8c:48:94:45:e0:f3:95:
         55:e9:5b:d1:dc:33:2b:8b:ff:d0:3a:22:fc:16:e5:35:43:c3:
         58:07:0a:2f:53:88:25:c6:2f:a2:47:fa:4a:f5:66:8b:58:c7:
         6b:fc:ba:10:f5:a8:13:79:04:fc:29:46:9d:65:55:d9:42:ba:
         ba:60:0c:10:4a:c6:5e:06:cb:bd:c2:6f:da:90:d1:43:86:30:
         47:5a:ad:fd:bd:ef:0e:9c:0f:18:cc:e1:04:fd:03:0b:f6:3e:
         b8:34:ff:8d:bc:bb:94:14:0b:2c:3c:a2:fb:d0:a6:f5:02:a4:
         4a:79:47:96:2e:52:fd:19:75:73:bf:8c:48:93:85:95:0c:62:
         59:f1:44:96:55:fa:4a:7f:e0:48:1b:71:af:50:89:f5:90:89:
         01:01:fe:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:41:52 2025 by rpki-client