Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
File:                     J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json)
Hash identifier:          3wHztbJX0eanDUDAOQOeT/nBpnqbgMpZeJWBTciYPuM=
Subject key identifier:   A5:4A:77:4E:3A:97:F4:CC:85:0A:CF:26:93:9C:05:DA:12:25:5A:7A
Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
Certificate issuer:       /CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Certificate serial:       019649A26E4BAD955D11153CFC64AA09C3BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
Manifest number:          066D
Signing time:             Fri 18 Apr 2025 16:01:43 +0000
Manifest this update:     Fri 18 Apr 2025 16:01:43 +0000
Manifest next update:     Sat 19 Apr 2025 16:01:43 +0000
Files and hashes:         1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: T5LhQmBD6pf4afAhpIFNQvQDUbgcbC/gpJJfPqFo7/w=)
                          2: dXMPZ44H3EK1ymUiEeV-kdVqljI.roa (hash: Z4FUo52Ap+7Yha/WP9YTa5vSQDQbjhKN2zcbF3wPUtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a2:6e:4b:ad:95:5d:11:15:3c:fc:64:aa:09:c3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4
        Validity
            Not Before: Apr 18 16:01:43 2025 GMT
            Not After : Apr 19 16:01:43 2025 GMT
        Subject: CN=a54a774e3a97f4cc850acf26939c05da12255a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:80:eb:4c:53:bd:f7:e1:6f:58:be:38:9f:
                    8d:fd:9b:e7:29:a3:69:26:c8:1c:20:e1:aa:2b:9e:
                    f9:63:ec:e7:dc:7f:5a:3e:03:7f:93:66:4b:29:61:
                    d4:56:61:89:f5:1e:21:69:3e:2f:d7:ab:79:a6:38:
                    d9:ad:06:54:3f:96:a2:f1:25:81:5e:fa:e4:99:d9:
                    90:64:e9:78:59:97:68:94:ca:4f:03:d7:74:d0:8f:
                    3f:64:cd:01:1c:0d:56:9e:38:f7:b5:44:cd:7c:80:
                    34:a7:e8:de:19:ba:04:b8:9c:be:4c:ff:0f:ff:26:
                    ae:8f:1b:47:87:f4:f2:27:31:3b:fe:9b:9c:ba:ea:
                    4d:f6:b2:65:fb:2e:53:6a:4a:33:5a:72:9a:be:2c:
                    89:92:d7:d2:53:77:ef:02:68:e6:ec:59:2f:ff:ba:
                    1f:b0:e7:74:28:ae:cf:81:30:43:db:4d:cc:97:75:
                    d0:cf:5b:5a:f5:5b:05:9a:11:99:9a:78:44:ff:f4:
                    48:44:09:39:b1:7f:0d:2e:0c:6d:f4:24:eb:8c:f4:
                    fc:fe:13:b5:aa:19:da:bd:3f:e3:30:ee:3d:e1:6c:
                    d3:8c:14:09:df:d4:69:d5:04:9d:a3:b2:ff:47:00:
                    ca:06:71:2b:9c:30:88:e9:b8:03:c7:fd:8b:d5:25:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4A:77:4E:3A:97:F4:CC:85:0A:CF:26:93:9C:05:DA:12:25:5A:7A
            X509v3 Authority Key Identifier:
                keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:3f:00:47:a7:16:2e:60:c8:b2:c5:97:eb:73:fa:4f:ea:36:
         ff:c1:9d:de:ec:b6:ee:e5:d9:60:00:5d:4e:7d:d9:1d:b7:78:
         48:b3:65:7d:c3:35:78:44:8f:c7:71:5b:ac:0f:73:fc:ba:b9:
         fd:0b:7b:c7:6b:95:cd:8c:f7:bd:a1:4f:6a:f7:b5:2f:68:38:
         6d:f4:f5:59:fe:59:34:56:8a:cb:f5:b2:55:93:d0:b5:bd:17:
         3a:6d:db:76:be:83:8f:23:b5:2e:2e:24:6d:6c:7e:63:e7:ab:
         a8:d0:b8:00:1e:fe:af:ef:ba:9a:2f:f2:0c:7c:5f:23:3b:c7:
         4f:48:ed:32:64:e9:fb:f4:f5:c5:55:e9:3c:78:62:1b:23:34:
         8c:07:8d:ce:60:8a:80:ab:57:a2:84:28:47:0e:2e:26:3d:5a:
         eb:3a:f4:7f:ec:c8:27:f6:d6:b8:3c:6e:8d:90:07:24:1e:ab:
         e1:e0:6d:c5:f2:dd:33:ca:a5:d8:85:70:a4:2a:9f:5a:0a:5c:
         7a:41:cb:84:7c:13:51:18:c2:8c:71:a6:b3:0e:4b:06:82:8f:
         db:7c:81:5b:9b:1c:3d:1c:ef:b7:96:53:9c:1e:c8:ec:94:46:
         e0:dd:bf:83:f1:99:9c:bd:c7:55:ab:ca:b6:63:0a:b5:56:22:
         f2:c8:3e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:02 2025 by rpki-client