Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File:                     JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier:          oj6qGyb9ilBb1FjtXY9H3JquZ41lOijbS3mRmDCiUwo=
Subject key identifier:   BD:51:C6:B8:4B:2E:2D:B0:EE:E9:2B:26:A6:2F:A5:39:57:6E:4F:16
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer:       /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial:       0195109011BF03F483B9E1C140100471AD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number:          146C
Signing time:             Sun 16 Feb 2025 21:00:31 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:31 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:31 +0000
Files and hashes:         1: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: kWY731Kt6FSDGBgu7QYpaeqeY+Wjq1YegthAklGgZK0=)
                          2: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
                          3: fIjleh2crKLbZG2p_pW6sJNXzgE.roa (hash: wfNWlZAoz4d7U8GGL+obzZQHM3GpRCjoUB+xMdyboeA=)
                          4: z1HbgF83tUPDafwyrFUvhnVfBSI.roa (hash: M4kl6p3Muv0ZCK8YB2U3krHANx0k77aGuotmnLEgebI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:90:11:bf:03:f4:83:b9:e1:c1:40:10:04:71:ad:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
        Validity
            Not Before: Feb 16 21:00:31 2025 GMT
            Not After : Feb 17 21:00:31 2025 GMT
        Subject: CN=bd51c6b84b2e2db0eee92b26a62fa539576e4f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:cd:6b:22:b9:56:59:5e:53:a0:86:02:86:
                    24:cb:ae:d0:c7:96:e3:b7:a4:3c:c0:3a:d5:aa:27:
                    12:38:22:d4:ce:f5:e0:c5:da:55:28:77:3c:44:3a:
                    4f:08:1e:38:f0:a9:9b:7b:41:0a:f9:8d:00:ce:f2:
                    7f:0a:2c:16:ce:b7:ea:b7:09:32:82:56:3c:e4:46:
                    6f:bb:76:77:93:2f:af:d0:85:77:1e:b0:1d:cd:d3:
                    ef:a5:79:62:6e:55:94:03:f3:f1:2c:de:73:8c:4a:
                    f2:fe:1a:64:3b:03:39:2d:6b:ab:76:f7:7e:84:d0:
                    63:8f:c9:b5:ac:53:f3:a4:b6:67:c9:ab:fe:07:31:
                    57:b8:62:31:75:54:96:fd:d6:63:7f:50:19:10:e1:
                    b2:fb:f4:43:dd:fe:d7:e0:a8:03:b1:d0:6f:2f:fe:
                    7b:35:72:50:e6:04:4c:ba:38:6f:b7:88:b3:fc:3f:
                    ce:eb:e8:b3:bc:38:b7:21:49:fe:54:e4:cb:b6:6f:
                    2b:43:c7:64:68:2d:a2:33:af:e9:b7:cc:70:ae:b1:
                    df:ec:0c:70:a3:51:49:31:03:13:fe:f1:4e:f6:60:
                    0a:c0:f8:aa:d2:54:73:8c:0b:cb:c6:75:15:1b:78:
                    7b:3b:12:7b:af:95:b0:0e:59:02:c5:d4:8b:5a:39:
                    28:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:51:C6:B8:4B:2E:2D:B0:EE:E9:2B:26:A6:2F:A5:39:57:6E:4F:16
            X509v3 Authority Key Identifier:
                keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a6:db:75:b3:28:a1:da:e3:8e:f0:ad:e0:70:55:57:20:e0:
         d5:4c:1d:31:ae:b0:0b:d7:a6:54:07:39:39:27:a6:af:c8:f4:
         d0:1d:62:6e:a9:f5:59:00:06:c2:c3:75:c1:64:9e:10:0e:db:
         9c:ce:4f:5d:df:46:eb:96:4d:3b:31:f8:40:29:98:60:da:72:
         d5:ec:cf:91:05:d4:ef:0f:75:d1:a6:73:03:74:40:8d:1e:51:
         76:56:66:e0:19:78:07:2b:48:ff:da:fa:05:79:e5:ec:97:26:
         cb:a3:ea:14:27:6b:71:b4:1d:4d:84:0f:95:62:fe:a7:ca:3e:
         04:92:73:31:47:e3:fe:24:b1:cf:98:51:aa:51:58:2b:1e:7e:
         a7:34:ab:cb:43:e6:53:ed:83:61:7e:f5:47:6e:33:e8:31:54:
         9e:4c:da:60:5d:3b:1d:e3:6b:51:f3:0b:5b:08:ec:1c:84:4e:
         99:f6:a9:7e:c3:32:5a:55:b8:24:1a:7f:e1:4f:f7:2a:67:3a:
         c3:fa:fe:aa:a4:2b:e5:87:66:5e:70:55:47:93:e3:e3:b3:51:
         d7:2a:d3:e4:2d:86:fe:7f:98:3e:a6:94:a0:41:8e:4d:f0:4e:
         14:67:8b:41:a9:9f:5f:6e:66:9d:fb:4a:0d:8a:47:b9:4e:c5:
         d8:2e:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:29 2025 by rpki-client