Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File:                     aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier:          f42y5XrMcYHojVvbX8tB06qw60cAOuT815SgyH+HPFs=
Subject key identifier:   83:1C:2C:55:7B:44:4A:45:EC:EC:AC:2F:81:5E:0B:00:D6:C8:4D:A1
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer:       /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial:       0196A61CF91A12B7122D93D650950AF974ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number:          1529
Signing time:             Tue 06 May 2025 15:00:38 +0000
Manifest this update:     Tue 06 May 2025 15:00:38 +0000
Manifest next update:     Wed 07 May 2025 15:00:38 +0000
Files and hashes:         1: 1-POC2nfhxokaO34U4IxxrQdEyHg.roa (hash: HGa5ESI5zwwldA7SOJhQSh4vTo8C4LN7Ht6oX1cZupU=)
                          2: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: SrbOchmDDauxMbxtYUkfeo1gT6qYl6FGcM+gragoTbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:1c:f9:1a:12:b7:12:2d:93:d6:50:95:0a:f9:74:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
        Validity
            Not Before: May  6 15:00:38 2025 GMT
            Not After : May  7 15:00:38 2025 GMT
        Subject: CN=831c2c557b444a45ececac2f815e0b00d6c84da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:5b:41:21:d7:20:df:67:7a:03:d6:e0:15:
                    90:a3:c8:3c:40:38:78:29:6b:c2:f8:5d:cb:af:6d:
                    79:f4:2f:3f:92:39:98:1c:71:33:25:37:17:85:91:
                    fa:d0:f2:0c:b2:d8:fc:a0:a5:50:4a:9f:d7:a2:2b:
                    86:27:f9:28:b1:52:5c:91:a2:6e:63:d7:1f:e4:7c:
                    88:af:8d:ed:80:31:23:ac:5f:70:e9:8e:32:81:6c:
                    f4:20:c6:c9:9d:3e:a8:ed:4a:d4:6b:e6:e8:3f:fa:
                    90:95:a2:ea:3b:3b:53:ff:6f:dc:9d:5a:97:8b:0f:
                    d7:d1:fc:3d:2b:92:63:9c:be:20:30:a9:30:6b:46:
                    84:cc:95:ce:b3:95:b4:a6:b0:bf:c6:d5:8a:07:39:
                    51:64:08:95:95:8e:6a:5a:ce:7a:40:6a:ae:4b:60:
                    aa:c6:11:47:62:3a:e3:83:dd:c6:6e:b2:2f:83:28:
                    26:75:a3:1f:b0:59:1f:1d:f7:9c:c3:9c:66:00:d8:
                    8b:2e:63:1c:8d:d7:b9:ef:01:ef:56:cb:cd:26:50:
                    4e:0b:e9:17:ce:a3:07:7c:dc:0d:1d:e2:05:dd:96:
                    fc:80:a3:59:78:50:bd:c0:a2:46:db:4e:5c:9c:f8:
                    b6:0f:1a:38:0d:05:9f:ef:23:57:96:4f:c5:a9:f0:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1C:2C:55:7B:44:4A:45:EC:EC:AC:2F:81:5E:0B:00:D6:C8:4D:A1
            X509v3 Authority Key Identifier:
                keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:4a:5b:28:8a:ca:5d:ff:d3:5a:b2:03:ab:67:00:fd:d8:1c:
         35:a4:74:ce:dc:c3:33:0e:5f:fb:b0:b8:30:23:91:17:6e:c3:
         11:9c:41:22:ee:3d:e4:6b:7e:5a:7a:7a:3b:b1:82:81:15:13:
         e6:94:66:8b:fe:8c:8a:8f:69:3e:b2:5f:0f:cc:66:9f:d7:da:
         1c:e8:92:56:7d:2e:4c:0c:16:ff:59:7f:50:b6:ae:0c:cf:3f:
         68:b0:4d:c7:5b:6b:0f:2e:8f:5b:22:e2:5e:af:cf:98:17:3d:
         05:45:d3:92:bb:aa:de:43:49:90:28:09:c2:5c:d4:f8:9a:1a:
         35:2c:47:41:ca:99:45:10:20:f8:54:c1:7a:66:3e:a7:14:62:
         e1:09:38:c3:ea:9f:d2:a2:96:ec:7f:bd:46:dd:7c:81:15:93:
         47:26:75:4c:27:6f:8a:fa:ee:23:d7:bc:23:8c:35:9b:a3:1c:
         b3:d0:70:44:cc:1a:5a:bb:53:01:47:f9:8c:65:c7:bf:d6:ab:
         53:48:d5:26:60:a0:92:dc:f2:62:b4:75:53:3d:bf:33:68:3e:
         f3:e5:d2:a7:f3:a6:58:d9:d7:28:07:e5:52:02:ab:59:f3:10:
         d5:a3:98:02:8b:51:f1:04:b4:50:a1:fd:3e:35:9c:29:57:f5:
         0e:35:c4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:09:00 2025 by rpki-client