Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File:                     jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier:          Rw59GDVjXXo/Tjc2DOfJqxounZwlwvDNz5x0O4YxyiE=
Subject key identifier:   36:B0:E5:E0:D5:66:3D:6D:D6:AA:A2:24:AF:63:A1:73:E7:4F:D1:7D
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer:       /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial:       0194C4638E1EE60EC37DB9F84084981F1516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number:          07CF
Signing time:             Sun 02 Feb 2025 02:00:45 +0000
Manifest this update:     Sun 02 Feb 2025 02:00:45 +0000
Manifest next update:     Mon 03 Feb 2025 02:00:45 +0000
Files and hashes:         1: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: qMH4tmLXoSnfC3LaGiAVh+o+6cGU7wTSKyD4NbjUnyE=)
                          2: lCFWlcHQXl8OCfG8VkJf_ovcDUY.roa (hash: SWucWn1D4Fv0B4+THeJJxTuUCPWrkWrGEDFRw9TIy8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:8e:1e:e6:0e:c3:7d:b9:f8:40:84:98:1f:15:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
        Validity
            Not Before: Feb  2 02:00:45 2025 GMT
            Not After : Feb  3 02:00:45 2025 GMT
        Subject: CN=36b0e5e0d5663d6dd6aaa224af63a173e74fd17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:c2:50:e5:2e:15:d0:49:28:2c:6e:a3:e7:
                    aa:f6:0c:64:93:5b:95:71:fd:79:d8:b1:c8:95:1e:
                    a9:4d:5f:9b:dd:0b:a0:55:a2:e5:46:26:4c:0f:34:
                    3f:3a:6e:d3:fc:a0:8d:e3:9a:04:c1:b2:4d:83:46:
                    b0:c3:2b:e0:55:b7:99:f0:23:a4:1f:00:b2:60:d3:
                    6a:e6:f7:e4:94:f8:0b:94:44:0e:a1:9f:a8:5d:3b:
                    51:2c:8a:9e:54:ba:54:2d:b9:b0:26:21:a3:98:3b:
                    f1:44:62:d4:a7:65:02:ee:20:89:9d:e1:64:63:96:
                    4a:0d:80:ee:ad:69:21:52:f9:9d:90:37:36:49:89:
                    d0:ee:66:04:8f:2e:1a:5c:d1:d3:2e:d1:f0:f0:7f:
                    e9:87:ab:d5:bd:b3:bf:81:c8:b4:93:a1:41:84:d6:
                    df:01:6b:ef:8b:9c:ea:a5:10:62:71:6a:64:7b:aa:
                    92:38:b2:81:6f:9e:7e:01:7d:65:fa:ed:4e:47:be:
                    2a:3b:d5:16:96:de:28:75:d7:19:3f:0d:85:88:40:
                    28:40:7e:c2:0a:d9:de:df:4f:46:ef:fa:fe:2e:48:
                    8c:a5:51:ab:4e:6d:1c:bd:64:53:f5:81:0c:e1:14:
                    ca:56:96:9c:1b:df:58:f6:ef:06:0a:cd:53:98:f5:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B0:E5:E0:D5:66:3D:6D:D6:AA:A2:24:AF:63:A1:73:E7:4F:D1:7D
            X509v3 Authority Key Identifier:
                keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c5:2f:6c:66:21:b0:43:4d:91:71:1f:8e:3a:aa:49:18:51:
         85:2f:9a:2e:64:62:fb:fe:89:f8:32:84:f0:3f:3c:78:92:72:
         6b:e9:03:e2:0c:c1:19:c0:58:74:f6:44:02:4a:f2:4f:2f:6e:
         4a:51:db:44:a1:f8:a0:e1:f5:09:2b:60:aa:f6:52:64:af:52:
         74:66:86:f6:38:f0:16:fd:6f:2f:2a:c6:3b:fd:a8:1a:93:42:
         22:a3:36:65:a1:36:a6:87:88:39:70:7f:6b:ab:6f:71:6f:78:
         c3:3a:7d:c9:09:9e:97:a2:7f:ba:57:0c:60:0e:64:be:4f:1e:
         ff:76:cf:23:35:36:f9:48:5c:42:4b:12:98:42:81:9d:90:07:
         39:54:5a:f8:7e:66:d1:84:03:53:b4:44:41:89:a9:90:d6:f6:
         95:e2:72:74:47:a4:48:f8:f0:14:86:0a:aa:a5:05:ce:27:a6:
         90:6f:e7:06:8f:63:4e:f4:d3:ea:a2:ac:0a:e4:e8:89:64:0a:
         e0:95:7b:f7:19:f3:94:54:eb:00:d3:42:13:4d:ab:91:6f:d2:
         c2:a5:f8:fa:03:16:52:08:a5:5f:ab:65:38:6c:5d:c7:f4:2e:
         35:67:eb:7c:f6:a4:44:09:d5:fe:1f:9c:37:8c:53:d2:14:71:
         58:56:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:40 2025 by rpki-client