Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          God7bkSkHaNSFzKSTJU0aknsGEMFAiy9yTpW+e11XM4=
Subject key identifier:   1F:48:BD:06:47:A5:10:2F:81:7F:24:D9:9E:6F:75:64:CE:E9:5E:3B
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       01965537D1CC961B2D4FCCA966CA496AB8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          1503
Signing time:             Sun 20 Apr 2025 22:00:43 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:43 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:43 +0000
Files and hashes:         1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=)
                          2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: 3IkQGLASCvplY/IWrvv6DzObAIibJV5vjcPUTdG+lC0=)
                          4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=)
                          5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=)
                          6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:d1:cc:96:1b:2d:4f:cc:a9:66:ca:49:6a:b8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Apr 20 22:00:43 2025 GMT
            Not After : Apr 21 22:00:43 2025 GMT
        Subject: CN=1f48bd0647a5102f817f24d99e6f7564cee95e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:6e:61:16:b8:0b:6f:a2:e6:54:89:b0:e2:
                    5b:ef:6e:6f:65:e9:26:20:a2:38:3c:29:52:5b:c9:
                    a8:04:24:c2:17:b7:32:a9:76:20:97:ac:23:c8:ea:
                    10:df:1f:36:ff:bb:7c:56:26:17:8e:5b:73:7e:a6:
                    56:2d:06:0d:30:84:3b:e1:bb:4b:bb:da:a3:ba:fa:
                    7c:85:b4:9e:c3:56:74:a5:e7:d5:b2:b6:af:f5:25:
                    62:aa:a2:fb:82:bb:20:7b:dd:ed:a7:57:81:bc:07:
                    60:6f:a1:4a:b2:35:b2:aa:9d:31:e0:03:71:0e:80:
                    4b:38:ad:48:b9:5f:df:18:90:e1:66:8e:81:e3:ac:
                    e6:28:ae:88:7a:cc:38:59:a7:b1:20:ef:ba:5b:fe:
                    26:63:42:42:3a:39:71:dc:c5:17:29:53:09:9d:69:
                    bd:d5:a4:7b:56:0b:98:f4:0f:e4:ad:a3:2d:71:f4:
                    9d:d6:5b:43:13:1c:79:09:1e:70:ca:49:91:cc:53:
                    76:23:c0:3f:64:97:ab:e8:b8:4d:d1:14:86:51:7c:
                    86:6a:54:2a:09:1e:5a:4e:23:aa:70:ea:c6:8a:43:
                    b8:b9:bd:18:6b:b6:39:b7:44:1b:2d:da:0d:4e:41:
                    83:ad:1e:17:aa:f3:d7:0c:73:a8:77:57:1b:9d:17:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:48:BD:06:47:A5:10:2F:81:7F:24:D9:9E:6F:75:64:CE:E9:5E:3B
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:a5:a0:e0:6f:b9:bf:8b:48:95:45:59:ed:c4:2c:00:8f:
         0d:5f:08:a2:02:03:5e:71:23:8d:e8:a7:de:99:a6:0d:65:bc:
         0a:12:fc:ec:6f:e4:3a:94:ce:6d:7e:e5:c2:ed:60:ce:c3:9a:
         f8:51:b9:aa:c1:a5:22:73:c3:c0:bc:19:75:9e:e0:63:e4:6a:
         f8:d9:99:a4:b3:3a:54:27:53:4b:32:9f:7b:0d:ba:db:f0:7b:
         d2:c5:65:bb:c2:42:e0:f1:bc:b3:57:cd:46:da:ac:b0:ee:ef:
         30:26:12:96:fe:7c:2d:be:22:42:0a:22:b6:ae:23:82:70:e8:
         c0:cc:39:6c:08:4c:4c:ef:bf:fc:36:6b:0e:49:c8:6e:76:d9:
         90:57:15:74:0c:e8:06:92:4a:5e:89:ee:25:f2:93:a3:22:10:
         32:f7:e5:41:4c:75:e5:cf:f5:73:cd:db:61:e5:5a:2f:af:4c:
         f7:d1:65:6e:b1:14:f0:c3:ec:8e:d9:e3:29:0e:be:09:58:ec:
         0d:d0:a4:54:6d:f2:8c:31:de:c4:53:71:90:00:41:de:bf:70:
         c8:c7:c7:03:73:89:e6:6f:17:09:03:a6:4d:23:c1:5d:48:76:
         7a:42:14:1b:1c:db:4a:11:32:d8:8b:e4:a5:66:09:cf:09:91:
         6c:3e:48:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:07 2025 by rpki-client