Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
File:                     jvzJdu-QODrOfwtOCeTYGe0Nm14.mft (raw, json)
Hash identifier:          ZXloGGSXhZq6seE3Rws6ExPDu62p2wyHbduat1itRqk=
Subject key identifier:   2D:6A:CA:21:1A:44:0B:F3:DD:97:EC:90:6D:0D:E2:93:91:8D:66:80
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Certificate issuer:       /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial:       0195116BDF4D53CB4810D721D916ED7DFDD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
Manifest number:          1140
Signing time:             Mon 17 Feb 2025 01:00:37 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:37 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:37 +0000
Files and hashes:         1: iZWDIUILuFWunNVYaqJwiBg2ZXU.roa (hash: BgNy6gZxNs+Fc3c2uaucV4KzH/PC8AB8rNSrrgEVedo=)
                          2: jvzJdu-QODrOfwtOCeTYGe0Nm14.crl (hash: z9T5YY9PRgH1r8786dEX/81ZkkZR4ZbZrFHpCYpS75g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:df:4d:53:cb:48:10:d7:21:d9:16:ed:7d:fd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
        Validity
            Not Before: Feb 17 01:00:37 2025 GMT
            Not After : Feb 18 01:00:37 2025 GMT
        Subject: CN=2d6aca211a440bf3dd97ec906d0de293918d6680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:b1:cc:ca:86:2a:fb:21:1d:3c:8c:7d:56:
                    e6:ca:5d:4b:e8:73:a5:c2:4e:fd:a6:7b:31:9d:1f:
                    89:5d:5b:32:fc:0f:4f:3f:7c:4f:ef:8c:56:86:a5:
                    4d:9c:e8:9a:19:32:85:84:b4:b6:d8:cb:c1:a2:32:
                    68:ef:f1:f3:9b:89:9c:7c:c6:13:9b:46:20:91:e9:
                    62:22:e3:ec:b3:70:37:12:24:b9:ec:37:44:cb:3e:
                    28:ab:90:0c:01:0e:72:17:bb:cc:f9:af:29:b0:b6:
                    00:91:18:9e:90:be:ed:d9:03:c8:04:60:7b:d3:f1:
                    b9:5b:33:b6:14:a9:f6:90:14:e5:00:0c:d6:0f:07:
                    68:a6:a8:6b:d1:49:d9:53:c2:8c:77:09:2d:e2:a1:
                    13:a5:bb:d0:02:42:d9:e0:3b:ad:0e:85:a4:25:79:
                    81:77:be:8d:ca:86:65:ca:3a:d6:89:f9:d4:22:6c:
                    eb:ce:5a:f8:56:42:bd:86:15:bd:0b:ba:cc:7e:a1:
                    da:c0:f3:72:b8:07:82:e5:69:06:0e:61:6a:27:6d:
                    1b:a0:83:ad:5f:c8:fd:a0:5e:f9:c6:0f:be:e9:be:
                    32:dc:7f:3f:fa:2a:39:0d:6b:c4:0c:84:5f:7a:12:
                    78:0d:f7:59:53:a7:0f:e7:4a:fb:98:88:27:9b:33:
                    22:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6A:CA:21:1A:44:0B:F3:DD:97:EC:90:6D:0D:E2:93:91:8D:66:80
            X509v3 Authority Key Identifier:
                keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a4:a6:6b:f7:73:c3:84:2c:a7:f7:7a:15:7b:fc:62:b5:39:
         79:45:40:01:e7:bc:4b:3f:b9:ed:56:8f:67:b2:18:7a:91:7d:
         67:a3:46:91:8d:f8:6f:8b:b5:bc:b3:87:9e:31:5c:6d:1e:30:
         8c:94:ce:78:94:7d:72:69:c9:63:59:9a:ec:1f:91:01:8d:e3:
         50:47:1e:0a:27:82:18:ba:81:97:56:6a:93:89:00:dd:34:65:
         8f:d8:5d:2e:e6:b7:b8:b6:71:d6:ab:d5:6a:ba:76:4a:d2:bb:
         ed:02:a7:11:11:8f:78:1c:b9:75:ca:23:7b:ca:38:07:59:1c:
         07:68:13:f9:16:6d:4e:97:69:d4:76:ca:11:58:5d:91:38:43:
         6d:1b:29:56:8a:44:d6:2b:20:3e:8b:46:62:0d:7c:7b:82:f3:
         8a:59:7b:e6:25:e0:ba:10:87:5a:9e:82:3a:9b:8b:09:d1:36:
         3f:78:eb:40:10:96:23:fc:b5:50:c6:b8:2f:67:f4:dc:fe:01:
         db:14:9f:79:2b:37:88:f2:bb:e7:7d:35:bd:94:c5:f7:63:68:
         4b:ca:03:6d:34:9b:e1:c2:aa:f8:fc:08:65:68:09:14:7b:c0:
         76:99:13:46:43:b9:0e:0d:c5:99:12:56:cd:dc:f9:37:e3:41:
         cd:99:28:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:11 2025 by rpki-client