Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft
File:                     JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft (raw, json)
Hash identifier:          hLkp6nPXZieX2O5hpHwBdPFZbn+L0g7cJaMt7xaJHeM=
Subject key identifier:   87:7F:74:B6:B7:62:57:BC:E2:BD:8E:AA:E1:60:7C:D6:19:C9:BB:BB
Authority key identifier: 24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47
Certificate issuer:       /CN=241455f852c6ad4a0412e5ea308aa66172d1d147
Certificate serial:       0196120E99B751A7951785E44381683BB146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft
Manifest number:          14DF
Signing time:             Mon 07 Apr 2025 21:01:08 +0000
Manifest this update:     Mon 07 Apr 2025 21:01:08 +0000
Manifest next update:     Tue 08 Apr 2025 21:01:08 +0000
Files and hashes:         1: 72Lp3gMgXLCMsbrlXXDr5SM4zrw.roa (hash: adAz3jIZPGF9iKKNN5t8HD+ygmv2PMwG3grTyntjKTs=)
                          2: JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl (hash: AJrB7RHpfRCrLKdqK7GwkzaVt1K8bBXB0vYbW9+RhZw=)
                          3: zqHV1s3_ke5VR1xw5hKua-2OaIY.roa (hash: 0keVGUwlHiXeuS1CJF1dPMcb+8zsBp943xc7umCmbts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:12:0e:99:b7:51:a7:95:17:85:e4:43:81:68:3b:b1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241455f852c6ad4a0412e5ea308aa66172d1d147
        Validity
            Not Before: Apr  7 21:01:08 2025 GMT
            Not After : Apr  8 21:01:08 2025 GMT
        Subject: CN=877f74b6b76257bce2bd8eaae1607cd619c9bbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:09:da:2b:36:86:ae:27:d8:69:34:a8:b3:bd:
                    f4:0e:6c:41:57:d6:70:4a:42:9d:40:d1:c9:37:2d:
                    03:25:f6:d7:2b:4f:9d:9a:24:08:6f:5e:c7:06:f3:
                    61:b9:c5:a0:be:6b:c0:14:dd:82:8d:61:9d:67:bf:
                    bc:87:04:20:ef:ed:7b:99:c3:a1:3a:53:42:dd:c4:
                    ef:58:fa:9d:7d:1a:c1:93:f9:f8:2c:23:09:de:a9:
                    51:f3:2d:3c:66:53:1f:27:5c:99:f0:35:8a:b4:88:
                    fc:2c:b7:13:10:fd:5a:f3:f0:cf:2e:4a:0d:25:8e:
                    50:24:90:80:a0:62:22:f3:f5:57:75:e1:00:c4:8c:
                    7e:e6:ef:43:c6:f8:99:46:fe:d9:19:02:3e:e6:de:
                    31:84:0b:1f:25:c6:c6:a0:16:19:99:e6:0e:fe:63:
                    7a:ba:30:60:27:66:60:06:7b:93:27:ba:a3:8d:fc:
                    87:18:df:0b:bb:df:fd:51:7f:23:7b:93:9d:5a:8e:
                    f3:fc:f2:c1:9f:61:73:85:50:4d:56:ab:41:bd:2a:
                    2a:f3:d0:b1:59:af:cf:c1:d6:2f:44:b9:2d:c7:b4:
                    45:1d:3f:85:26:a1:f7:73:b4:81:4d:d4:d2:56:b6:
                    e9:f1:78:74:86:c2:95:26:0c:bb:28:83:95:a4:9f:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7F:74:B6:B7:62:57:BC:E2:BD:8E:AA:E1:60:7C:D6:19:C9:BB:BB
            X509v3 Authority Key Identifier:
                keyid:24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:15:ff:08:71:51:87:11:70:a6:1f:fa:cc:81:dd:e1:dc:
         91:0f:0d:41:b1:75:98:ee:11:6a:a6:27:11:f3:3c:84:e4:33:
         fc:a2:57:f6:ce:20:8d:82:cb:94:03:71:82:00:52:2e:d8:99:
         a7:80:39:74:df:6f:5c:c8:5d:c0:06:6e:bf:46:ab:c1:3d:1c:
         23:11:67:4d:76:5e:18:f4:89:46:03:4b:dd:b7:ff:d2:11:98:
         f9:6c:b1:3b:32:f2:18:e3:8f:61:c3:cc:71:01:16:7c:a9:8f:
         d0:3c:16:91:44:cb:6c:ef:6d:9c:13:e6:e1:9c:b4:c1:e5:be:
         c4:ae:fa:8c:c1:12:f5:77:2c:8a:46:88:a1:7b:7d:1c:cc:a2:
         56:8a:bb:fb:5b:58:75:8a:9d:3b:c9:7c:e5:02:56:1a:cb:62:
         b7:5c:77:cf:5a:c9:77:5d:d2:a7:63:8f:e3:74:cb:fb:3e:56:
         78:f0:8b:58:f2:3c:71:f6:19:c2:43:4b:8d:44:18:86:64:93:
         c7:d0:f6:6c:3a:c5:8d:4c:34:e8:d0:ba:ca:ef:33:75:c6:d0:
         5e:f3:9f:92:81:5c:ee:4c:a8:9d:d2:c8:b4:35:20:3b:2b:0e:
         9e:16:6e:79:a3:57:20:55:9d:73:23:7c:57:ab:30:f1:a4:0c:
         8c:cf:ef:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:05:06 2025 by rpki-client