Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          KL5ztVCHGuwkcLfYRKGHM1jz6cfBVOU4gzgrgvmtHdQ=
Subject key identifier:   E0:AA:4A:73:04:1C:95:E3:BB:1A:E3:9B:9E:73:9D:FE:8C:B0:88:60
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       019629A960BC89299C1CEBBF194635FA8A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          0B39
Signing time:             Sat 12 Apr 2025 11:01:28 +0000
Manifest this update:     Sat 12 Apr 2025 11:01:28 +0000
Manifest next update:     Sun 13 Apr 2025 11:01:28 +0000
Files and hashes:         1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: 13T/XeaR0ctZtRAoOvlVcSKNwJnAVamVo1qVHhb7DBI=)
                          2: biUWqJNkwCLwTQCIKmoRRrKwBdQ.roa (hash: GnO+QVei8Vle4+1N/MUYYQK1LOgHwUlkdAPzcdRPuE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:a9:60:bc:89:29:9c:1c:eb:bf:19:46:35:fa:8a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Apr 12 11:01:28 2025 GMT
            Not After : Apr 13 11:01:28 2025 GMT
        Subject: CN=e0aa4a73041c95e3bb1ae39b9e739dfe8cb08860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:3f:93:19:65:22:07:59:a5:dc:17:38:32:
                    21:cc:62:5a:b7:a0:3b:58:d0:fc:ae:ce:13:ec:fc:
                    bf:d0:3c:2b:ae:b3:65:c2:99:4a:7b:c3:ff:88:3a:
                    49:8e:d1:18:bf:3c:06:c7:4c:f5:58:3d:c7:8f:fc:
                    8e:eb:cd:6c:36:2a:0c:fd:46:d2:e2:32:1b:c3:f1:
                    5a:2b:31:7a:14:51:a7:c3:71:2d:f1:aa:e6:4e:0f:
                    3c:58:db:8b:80:41:7d:87:53:3b:66:44:1f:35:9d:
                    63:e7:7c:f0:0f:dd:79:62:41:60:50:ee:2c:6f:92:
                    da:57:db:b6:b9:fb:62:80:11:81:df:3d:5a:7c:65:
                    f9:41:59:8d:4a:32:3c:82:93:7f:2d:0a:bd:04:2a:
                    c4:7d:67:68:59:74:f0:f0:99:f0:9d:23:99:f7:45:
                    f2:2a:d0:41:2b:7c:95:dd:e1:f7:00:40:fe:6c:5d:
                    d0:b6:b9:7d:44:89:a3:21:30:48:ae:ea:23:4b:86:
                    3f:a0:3c:6c:77:78:05:f6:08:1c:4d:ef:ff:51:92:
                    c2:d3:38:f9:ed:ab:a4:03:0e:c3:6e:45:f8:bf:68:
                    19:4a:9a:c3:16:70:37:b5:87:d8:0b:d9:21:cb:5b:
                    6d:3d:05:32:f9:56:30:ec:21:fb:1d:2a:2a:77:40:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AA:4A:73:04:1C:95:E3:BB:1A:E3:9B:9E:73:9D:FE:8C:B0:88:60
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f6:b9:c4:6f:c8:9c:fd:c2:e6:17:3f:81:d8:ef:64:d8:a2:
         b8:ca:07:d7:54:7c:27:03:c1:53:d5:08:eb:33:8d:b8:74:fd:
         1f:37:d9:43:5c:01:a6:41:97:ca:1b:08:9e:5f:c2:fc:00:9d:
         7c:fb:8f:33:6c:eb:a5:35:70:1e:6d:c3:03:8b:2d:1c:38:d4:
         92:0b:fd:f9:cb:4d:d8:64:56:06:4d:ca:94:f1:4f:6c:3a:fd:
         0c:6d:fe:34:b9:87:af:94:b4:1a:06:31:de:f7:66:70:b4:a4:
         59:b8:15:ff:21:bf:f5:84:01:8f:ae:62:68:4c:56:1e:4e:6f:
         65:41:1b:69:38:d6:12:47:2b:a2:ec:a6:8c:7a:6a:10:ea:a2:
         f6:39:8c:db:6d:db:a2:07:fe:3a:be:6a:cf:b2:0b:32:a1:6d:
         c2:f8:06:7b:a6:00:d3:87:16:8b:71:69:8a:0b:a4:ff:67:7b:
         8b:ce:09:0f:58:8b:a0:f9:4b:5a:25:ed:31:88:0c:d0:a2:92:
         f1:76:f2:57:d9:10:6f:f8:68:1f:04:8f:d4:75:ed:99:97:50:
         c2:29:a3:a3:02:77:0c:83:c8:e5:87:bc:b5:b7:98:0d:f3:5f:
         34:ba:49:b0:dc:15:4c:31:44:38:6a:c9:ca:f4:31:e3:ee:98:
         09:7f:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:47:56 2025 by rpki-client