Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File:                     JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier:          LPuW6vU/WhMTyjcILJqr6RK654BIDvvjsR5/NoR5Tec=
Subject key identifier:   D0:F9:38:30:51:37:85:19:51:21:B8:09:91:AC:EC:CC:DA:70:F5:B8
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer:       /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial:       0196C53AAA502D511DD63972A1885E47A546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number:          1534
Signing time:             Mon 12 May 2025 16:01:18 +0000
Manifest this update:     Mon 12 May 2025 16:01:18 +0000
Manifest next update:     Tue 13 May 2025 16:01:18 +0000
Files and hashes:         1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: NqapS87WO8SwnSFHiQE8SY+0dEj0L1/AoVGkJOEttvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:aa:50:2d:51:1d:d6:39:72:a1:88:5e:47:a5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
        Validity
            Not Before: May 12 16:01:18 2025 GMT
            Not After : May 13 16:01:18 2025 GMT
        Subject: CN=d0f93830513785195121b80991acecccda70f5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:79:de:33:eb:cf:84:e9:82:32:9a:50:20:
                    00:c2:7d:96:18:60:fd:79:04:b8:45:f3:1a:73:31:
                    fc:a1:ea:bc:05:f4:12:2b:dd:c8:7e:dd:43:46:22:
                    89:30:43:4e:25:8c:81:5b:b8:ee:37:51:7a:e5:7a:
                    bd:d4:ad:f8:cb:1b:45:46:2c:c6:30:7f:65:8b:20:
                    fb:8b:55:a2:fd:24:7b:cb:f5:cc:6d:69:77:f4:2d:
                    e9:d9:a3:f3:89:36:e7:85:95:f7:a3:af:f8:9d:fd:
                    39:92:f2:9c:99:d5:a7:ea:24:a1:c4:76:9b:e8:c3:
                    75:a2:9f:9c:85:d2:52:e3:fc:fa:47:38:0a:52:53:
                    59:b2:14:0b:4a:17:25:36:5b:e1:28:0c:2c:21:eb:
                    51:30:f1:db:ee:9d:ca:ef:34:08:35:6e:50:f9:58:
                    6b:8c:fe:d4:f0:78:9e:1c:62:f1:76:b1:7a:1c:47:
                    52:82:eb:2c:48:1e:09:71:eb:69:72:c7:54:ee:55:
                    3f:27:f7:38:e5:8a:a5:1d:ea:af:30:5f:ed:b4:3c:
                    14:e2:e8:5a:de:de:f0:0d:6a:3e:9a:bd:1e:3c:88:
                    77:f1:d8:31:b1:6c:2f:6f:c3:70:42:e9:b3:dc:99:
                    3d:74:a4:c1:dd:cb:71:7d:20:d5:f0:da:4d:21:d6:
                    3b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F9:38:30:51:37:85:19:51:21:B8:09:91:AC:EC:CC:DA:70:F5:B8
            X509v3 Authority Key Identifier:
                keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:db:ef:86:69:2a:f3:51:39:7e:c6:52:00:6c:17:74:a3:81:
         57:4e:dc:bf:f7:48:f8:d7:1b:24:10:32:bf:34:70:5f:e0:b5:
         b3:4d:b3:eb:52:5a:d9:71:86:b7:8c:d4:b2:6f:b3:7f:8c:42:
         7a:d0:c1:e2:b5:24:b4:be:6e:5f:40:12:af:d9:be:7f:cc:79:
         13:50:6b:bf:9f:e7:27:86:3c:94:fe:ae:81:07:91:6b:62:61:
         56:7c:e2:c7:04:7d:52:cd:4a:74:57:62:c7:1d:44:f4:e2:3f:
         84:50:0b:88:94:03:a3:05:e9:e8:af:94:fd:6b:eb:3c:23:59:
         36:cc:0d:e8:3a:fe:a8:2e:61:09:19:7a:23:5d:ba:b7:61:28:
         34:7d:65:65:a4:25:2c:5e:97:ff:23:2d:e6:3e:86:ee:b6:7b:
         f9:fe:bc:e9:aa:05:f2:fe:d0:2a:8b:d7:19:bf:b9:a6:fc:0c:
         67:6d:78:1b:45:39:81:1d:b6:45:7a:3e:b9:ac:3e:93:eb:bf:
         b0:df:8d:0e:61:8c:59:ab:e4:8a:a8:ac:08:4d:37:c0:a0:aa:
         47:04:f8:5e:e6:2c:b4:b6:b1:c7:ac:22:4f:c7:37:c2:43:c0:
         2d:0e:46:b9:27:3a:f8:f1:ee:d6:55:26:f7:1e:c5:01:f3:88:
         c9:50:d0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:06:08 2025 by rpki-client