Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
File:                     jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft (raw, json)
Hash identifier:          ti7eJiaP3yX9qU3mXgR0IA46XFsNxdS1S5rKg6Etlvo=
Subject key identifier:   2F:48:78:CE:3F:E8:86:86:2D:A7:E0:F4:7D:56:37:06:F7:C6:B1:5A
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Certificate issuer:       /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial:       01963F54AF5F81305EBBCCAC4AC74CBB895E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
Manifest number:          0AF2
Signing time:             Wed 16 Apr 2025 16:00:36 +0000
Manifest this update:     Wed 16 Apr 2025 16:00:36 +0000
Manifest next update:     Thu 17 Apr 2025 16:00:36 +0000
Files and hashes:         1: Q2J036IozgyoNBJgrr_DVZbFeDo.roa (hash: 8JbN1rBzCDIs6MxiLB09FrHxCFN8hIMN9eyZ3xxwJNI=)
                          2: jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl (hash: mAuUzTOJmcyXG8duL4vDEFrLoiK+XAH8JsDqiiJKUx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:54:af:5f:81:30:5e:bb:cc:ac:4a:c7:4c:bb:89:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
        Validity
            Not Before: Apr 16 16:00:36 2025 GMT
            Not After : Apr 17 16:00:36 2025 GMT
        Subject: CN=2f4878ce3fe886862da7e0f47d563706f7c6b15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:0f:22:88:ec:76:3c:54:c4:2d:35:6e:01:
                    e3:40:cb:a9:a2:bf:2e:b5:1b:3f:eb:6f:36:5e:83:
                    db:b6:96:38:96:d1:50:46:76:fa:95:b6:7c:62:d6:
                    a2:c6:ff:3e:a1:e8:a3:fa:ef:90:e8:10:20:bc:1b:
                    d2:56:f1:35:59:a9:7b:4c:c4:8a:2d:33:55:3c:44:
                    4b:9e:a2:49:4a:f3:6c:3e:43:25:44:4e:10:42:4a:
                    aa:fc:be:c9:72:fd:36:c6:36:30:0f:1a:cf:cb:c2:
                    e8:40:5e:e2:85:ce:64:d6:90:45:04:fb:12:81:9e:
                    67:16:df:db:c0:18:9d:97:6c:b5:86:98:ad:0f:41:
                    d0:f3:c4:84:63:d6:6e:ed:e9:8a:80:1c:cc:4d:3a:
                    71:9b:63:4f:f8:64:6c:8b:f4:37:6f:e4:0c:c2:e0:
                    95:d5:84:d9:0c:69:3a:58:dc:12:2e:54:2d:e2:70:
                    39:bd:27:b9:ed:10:57:e4:9c:61:48:b8:17:d4:6c:
                    dc:c9:f8:e7:d9:45:3a:32:cc:66:55:e3:b2:68:a8:
                    27:ec:46:58:d6:0c:b1:aa:7d:96:fb:51:35:1c:02:
                    e5:46:87:14:70:f4:59:76:06:dd:6c:88:7f:4f:76:
                    26:6f:bf:7b:21:49:ec:05:8b:a5:ca:eb:b8:69:ea:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:48:78:CE:3F:E8:86:86:2D:A7:E0:F4:7D:56:37:06:F7:C6:B1:5A
            X509v3 Authority Key Identifier:
                keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:12:ce:8c:09:a8:7a:80:94:9f:42:91:a3:15:75:6d:6d:84:
         35:ad:54:a8:74:e3:80:2c:02:75:b6:18:c5:ae:81:3c:9c:d9:
         26:26:8e:78:ac:f1:19:4a:ad:d2:1d:df:50:95:90:5f:f7:ee:
         a8:49:21:f0:5c:14:b5:12:77:d3:d5:e0:24:cc:12:25:f6:e2:
         fd:c6:0b:8a:2e:ae:53:9b:69:82:32:e4:db:18:3a:73:af:e8:
         15:55:4b:76:d7:18:54:19:e9:25:5d:4d:83:5b:2e:d8:0e:1d:
         dd:05:a2:7e:44:2e:c8:bb:33:5f:c8:f0:10:7e:9b:43:7e:e5:
         6b:5f:f3:9b:21:83:f0:cc:f5:61:ab:2a:50:a7:fa:66:8e:4b:
         93:70:37:af:b2:ec:9c:19:8a:14:97:0b:52:6b:1c:b8:ab:6c:
         8d:d9:5a:43:09:64:65:e9:b9:af:c6:0f:9a:27:aa:85:94:3e:
         5f:2a:cd:f1:b2:47:a5:a8:d6:c4:29:39:4b:d0:83:c2:66:cf:
         dd:68:3a:8d:c5:c3:f4:61:b1:53:ed:8f:6c:c1:f2:36:ce:30:
         40:10:80:c7:58:6b:b8:ad:59:4a:72:aa:a7:fd:bd:b3:bb:ee:
         e8:dc:46:a3:3e:be:34:04:48:65:e0:0c:46:be:fc:24:f9:9a:
         68:65:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:44 2025 by rpki-client