Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File:                     iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier:          Jf3Oj1STnYRSsEbHD4w5XUObkPi8nWIWtMJN+mHAeE8=
Subject key identifier:   55:81:54:47:FA:12:AB:A8:6D:6F:EA:08:04:4A:A9:86:A4:7A:63:E3
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer:       /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial:       01963EE6C0ECB72128B51CDB6E9FE88838D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number:          1488
Signing time:             Wed 16 Apr 2025 14:00:32 +0000
Manifest this update:     Wed 16 Apr 2025 14:00:32 +0000
Manifest next update:     Thu 17 Apr 2025 14:00:32 +0000
Files and hashes:         1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: rQZTs3sGMG0XtCDmjybxO1OOY6RL5ALVWpY23mT3DlM=)
                          2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e6:c0:ec:b7:21:28:b5:1c:db:6e:9f:e8:88:38:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
        Validity
            Not Before: Apr 16 14:00:32 2025 GMT
            Not After : Apr 17 14:00:32 2025 GMT
        Subject: CN=55815447fa12aba86d6fea08044aa986a47a63e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:72:c8:e4:5b:4b:7b:7d:c0:54:98:15:33:
                    7c:6c:bc:c8:b8:3e:db:41:fc:a9:e7:49:55:1e:4d:
                    21:d5:97:13:47:a9:0e:87:a1:19:32:82:2f:23:0e:
                    62:3b:c5:bc:76:07:b9:d4:27:fc:53:59:ca:1a:93:
                    51:20:d6:f5:dd:8b:d5:c7:7a:cc:1b:9e:ac:4d:61:
                    a3:dc:92:bf:5d:dc:ef:60:2e:e2:a7:1b:a1:f0:bb:
                    5c:5e:19:95:0a:69:13:b5:81:cf:00:53:38:a7:b8:
                    38:ea:25:c4:c5:ba:5a:77:09:1c:5a:38:b2:14:6e:
                    a1:bd:89:0d:7b:d1:3b:16:4f:e9:3f:81:cb:8f:f0:
                    d3:63:10:b3:2f:e3:d6:2e:ff:bb:5d:e1:b7:65:a8:
                    c0:b8:d4:26:d6:fd:a7:e9:15:18:ae:ea:fa:7e:d1:
                    18:a8:f3:5b:8e:48:69:50:f2:da:23:bd:a2:04:a3:
                    ae:b6:e4:32:95:98:0d:11:7a:bb:fc:ea:a5:f9:2a:
                    2d:ea:9f:a6:45:77:fc:bd:7d:c6:6b:94:ce:4a:52:
                    52:f0:bf:e8:fd:ed:a6:14:e0:7e:18:b9:6b:09:20:
                    ab:09:f0:a5:6f:ce:7a:b3:eb:81:4f:43:28:30:8a:
                    0d:42:3a:d3:5c:4b:77:20:31:ec:d7:39:e5:58:b2:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:81:54:47:FA:12:AB:A8:6D:6F:EA:08:04:4A:A9:86:A4:7A:63:E3
            X509v3 Authority Key Identifier:
                keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:77:8c:f0:c6:49:12:fc:96:be:42:4c:8f:d3:ab:8e:6e:ee:
         e7:80:2f:37:0b:65:ac:55:2d:9f:57:0b:a1:47:ae:fa:ab:a4:
         c1:1a:31:f8:d4:15:6b:64:17:f6:da:8a:67:f4:42:bd:b4:2a:
         48:9b:72:f8:71:48:f9:46:a6:17:06:55:c8:7c:0f:6f:e5:53:
         bb:34:de:4e:ce:6a:28:5d:9a:e7:ff:f3:5c:90:56:9f:b0:0c:
         da:e8:78:83:e9:32:46:0d:c2:dc:88:6d:6d:61:6f:4f:56:65:
         34:e6:c4:66:2d:fa:fa:c4:47:c5:81:45:12:ca:c8:f0:8a:12:
         4b:76:fa:01:fa:ee:f3:38:2d:a7:92:c7:32:cf:5c:c8:1f:7c:
         65:d4:e7:86:f0:75:0d:41:35:49:25:0c:c9:4c:71:f5:73:8a:
         81:aa:f2:d2:ad:69:91:06:0f:dd:6a:19:aa:04:a6:26:9c:42:
         b3:e9:ff:49:df:88:0f:3f:fe:41:bb:a5:3b:24:ce:a7:89:62:
         c8:3e:15:cf:18:df:8e:22:ff:32:01:9a:3a:5a:2a:b5:68:29:
         b2:16:4e:56:cc:51:44:87:35:43:c6:2f:9a:fb:99:e7:30:b1:
         18:45:3d:15:f8:8b:82:be:b6:62:60:0b:af:9e:a7:3d:d9:4e:
         39:80:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:29:05 2025 by rpki-client