Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
File:                     JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft (raw, json)
Hash identifier:          GWs3BYVTDIhFGplonR1pYl0T0qs8jR/bG5nSB3NVzrM=
Subject key identifier:   68:B8:34:0E:E0:9E:89:78:01:4F:C9:B0:D0:76:E8:32:6A:0F:BF:92
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Certificate issuer:       /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial:       0196444411DD687905CF31BE897D8D96A4CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
Manifest number:          0C54
Signing time:             Thu 17 Apr 2025 15:00:33 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:33 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:33 +0000
Files and hashes:         1: JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl (hash: gTey6ygEORq3GT1d1ltLwN001uMRlbXukkkSBo4PiZg=)
                          2: MGwydjWSRkebMXZzXi4Q1wnQhQY.roa (hash: ppLwXZ59Our2Z5s5lQZSznHueKLv+6A7NwUPkwubwqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:11:dd:68:79:05:cf:31:be:89:7d:8d:96:a4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
        Validity
            Not Before: Apr 17 15:00:33 2025 GMT
            Not After : Apr 18 15:00:33 2025 GMT
        Subject: CN=68b8340ee09e8978014fc9b0d076e8326a0fbf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:08:fd:3c:8e:d7:d4:50:9e:1a:95:58:e4:42:
                    14:57:82:f0:5a:0c:04:be:fe:1c:0b:4d:91:84:06:
                    0c:83:d7:d7:ec:64:84:e4:00:ff:0d:83:9c:23:c8:
                    3c:20:13:53:41:20:1d:af:f5:3f:20:ad:5b:62:64:
                    5e:f7:67:51:f5:08:f8:5b:c6:ce:2a:60:7d:dc:59:
                    d5:a7:06:7d:cd:fa:fd:d1:78:94:37:70:81:7d:e1:
                    68:69:67:73:7a:83:22:07:04:3f:8d:3c:86:e9:f5:
                    31:31:0e:a9:4f:e1:8b:85:13:4e:5b:69:b2:1c:3c:
                    c6:87:72:68:43:66:3f:86:8e:64:58:6f:9a:27:a0:
                    02:4c:ff:7d:aa:8a:4c:6c:bb:f9:2f:53:27:83:7b:
                    86:aa:8a:e2:3b:1a:5d:a1:a9:fc:55:93:3e:f7:4a:
                    fd:5a:d8:d3:ff:eb:3d:c6:5c:ca:9d:67:7b:32:45:
                    cb:85:44:ba:8e:b2:46:75:a8:eb:57:c4:75:53:fa:
                    eb:8c:b7:34:e9:11:0e:c9:9b:c8:b1:dc:56:34:1f:
                    8b:65:5f:64:34:73:de:41:ee:00:b1:69:71:d7:4c:
                    67:6c:bd:11:02:4a:24:4e:8a:15:e9:62:19:bc:48:
                    f9:0d:1d:3f:0a:6e:c3:e6:bc:db:1f:19:c8:ee:ad:
                    25:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B8:34:0E:E0:9E:89:78:01:4F:C9:B0:D0:76:E8:32:6A:0F:BF:92
            X509v3 Authority Key Identifier:
                keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:1f:81:fc:43:bb:3e:53:d5:46:f8:09:68:0c:d4:fe:27:
         a1:91:de:d1:0f:dc:a5:c7:bb:47:d7:56:d0:2b:2a:2b:b2:78:
         54:8d:2b:a4:0e:91:74:d3:d8:60:09:e3:8b:d9:63:8e:01:28:
         68:76:91:33:d3:4d:29:ae:ab:cf:f4:5d:97:f9:d6:9b:03:b7:
         ce:99:a3:b8:83:f6:09:c7:e3:56:2e:69:91:26:eb:71:57:77:
         fa:c3:09:aa:e4:82:2a:72:c1:c1:a9:22:90:ac:c9:8b:70:b7:
         ec:7f:47:33:f4:6c:c0:17:45:71:06:fd:cf:53:a7:97:64:16:
         7f:27:bb:56:31:20:24:1a:ec:35:39:83:61:c7:47:ce:75:d9:
         12:1a:14:b7:8a:8b:a2:18:c0:85:29:7d:e3:d4:26:9d:5b:1c:
         83:dc:bf:c2:6f:ca:77:08:39:a5:83:c0:a9:f9:fb:cf:21:ef:
         f0:8d:af:d6:80:98:fc:bb:de:61:a8:af:94:49:5f:8d:e5:22:
         d0:b6:a7:d1:ed:25:86:1b:76:40:57:94:ff:1c:83:51:4f:1d:
         66:b7:25:40:89:bf:42:a8:fa:44:e4:70:d5:f2:21:77:81:f8:
         ef:a7:70:91:77:df:31:27:6e:5d:4c:f7:ea:24:60:7b:30:0c:
         2d:99:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:05:50 2025 by rpki-client