Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File:                     jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier:          chUeGm/Y9IVolDuqmzU4inGzXVYruBq9jhrE2QyQpOc=
Subject key identifier:   3F:75:35:60:64:18:62:13:15:27:C6:E0:3A:B4:7B:75:8F:31:AC:AF
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer:       /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial:       0196568176B01890B4BD4F3B84F920645AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number:          14D2
Signing time:             Mon 21 Apr 2025 04:00:47 +0000
Manifest this update:     Mon 21 Apr 2025 04:00:47 +0000
Manifest next update:     Tue 22 Apr 2025 04:00:47 +0000
Files and hashes:         1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
                          2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: S7jMLR4xvuW/8s+j/ZIWwaCJBKQUXjYtxI5isW9jMWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:81:76:b0:18:90:b4:bd:4f:3b:84:f9:20:64:5a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
        Validity
            Not Before: Apr 21 04:00:47 2025 GMT
            Not After : Apr 22 04:00:47 2025 GMT
        Subject: CN=3f753560641862131527c6e03ab47b758f31acaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:49:59:66:bc:3c:5e:d1:3b:49:62:ef:32:
                    7d:4d:02:65:24:d1:ed:94:93:ad:44:91:8e:de:89:
                    ab:d1:05:a5:a9:f7:32:85:bb:0f:9d:b6:74:44:cd:
                    89:dc:51:d3:2a:ec:2b:1c:3a:f5:17:6b:2f:4d:a1:
                    82:46:53:b1:cb:50:bf:60:01:50:01:25:56:b0:6d:
                    e0:38:f9:7f:e6:5a:5f:31:ed:51:5d:f2:28:1d:f7:
                    6f:47:08:7d:22:7a:7c:08:1f:a0:e3:25:54:fc:20:
                    63:2a:a0:11:4d:88:18:ae:91:a1:b7:24:2c:bd:10:
                    74:3e:bc:b9:1a:8e:c5:2a:91:75:f2:db:d4:d0:26:
                    87:61:91:b0:0d:f0:86:4c:65:79:ad:2c:56:49:a0:
                    c6:d5:c5:2c:cb:a1:7c:b9:9a:e7:38:29:f1:57:63:
                    bb:7d:44:e0:16:3c:a4:13:93:d5:40:d2:21:1b:10:
                    3a:f1:37:38:6c:41:de:c4:b5:f5:45:22:74:c7:a9:
                    0d:eb:10:56:9e:62:61:20:b0:ac:78:7b:0e:cb:5f:
                    d1:83:78:60:a9:b1:42:b7:91:83:df:c8:ba:1e:0a:
                    44:9a:27:b4:3f:d5:f6:c6:71:ab:0c:fb:85:36:4b:
                    fb:03:c0:bb:d6:66:63:ea:ca:6d:21:f3:cf:94:4c:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:75:35:60:64:18:62:13:15:27:C6:E0:3A:B4:7B:75:8F:31:AC:AF
            X509v3 Authority Key Identifier:
                keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f6:b2:6a:dc:32:61:81:89:fa:9f:30:43:5e:ca:de:9d:33:
         92:4a:cf:cb:31:19:1b:80:3f:89:d0:f5:0d:a8:4f:08:10:23:
         68:84:c3:a0:cc:51:3d:b3:fa:03:d7:96:61:07:01:9a:7f:91:
         e7:41:b4:76:7a:63:6d:e2:14:27:6d:5e:70:50:4a:cc:ec:01:
         af:22:68:b1:21:8b:df:41:e0:ab:e5:82:40:06:76:a3:4d:77:
         0d:03:92:d9:5f:68:25:44:26:87:1e:c1:7e:e0:17:31:a4:59:
         84:88:70:13:48:d4:6a:93:7b:87:3f:0d:2d:12:ff:6f:e4:d1:
         84:4d:7e:39:44:a2:cf:2c:9e:39:f6:e5:d7:37:94:77:ea:b0:
         0c:d1:b3:52:31:bc:9c:7f:43:f2:ca:e0:97:c7:7c:32:73:03:
         33:de:42:46:21:ee:da:b7:8b:8d:b7:54:1b:28:26:0f:94:7e:
         00:cc:c8:29:8e:f3:32:9c:7e:02:27:03:b1:3f:1b:e6:c2:bb:
         8b:98:b9:0e:04:1e:e6:73:c7:e7:b3:d4:38:93:d9:a6:4f:d7:
         70:76:1d:fa:27:f6:e1:2d:29:3d:e4:8f:96:46:a8:15:17:2f:
         19:6b:74:05:ee:af:c5:54:32:c0:f0:f9:9c:b6:cb:f2:44:44:
         8b:2c:4b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:51 2025 by rpki-client