Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File:                     JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier:          0j0r00rk5P79jZFkro1ZJdhQVgq8qd8gHIliNRJ5IOY=
Subject key identifier:   9F:FF:E6:2A:1C:D4:13:B7:88:91:BB:5A:0E:5B:19:D0:A5:D8:0D:FA
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer:       /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial:       0196C013C4A3F8609B10D15B1CC16F9EF81A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number:          0745
Signing time:             Sun 11 May 2025 16:00:43 +0000
Manifest this update:     Sun 11 May 2025 16:00:43 +0000
Manifest next update:     Mon 12 May 2025 16:00:43 +0000
Files and hashes:         1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: ctMtcQkFqz4zRxL1XAkPFkl41RTOhhdTg5mBZK60sds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:13:c4:a3:f8:60:9b:10:d1:5b:1c:c1:6f:9e:f8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d26a5146996d220461081072c76396582fca84
        Validity
            Not Before: May 11 16:00:43 2025 GMT
            Not After : May 12 16:00:43 2025 GMT
        Subject: CN=9fffe62a1cd413b78891bb5a0e5b19d0a5d80dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:ba:1e:07:1a:8e:87:72:f2:da:cb:7a:f5:
                    d6:85:a7:50:6c:49:24:87:54:4a:f3:d1:f5:f7:d3:
                    ce:21:29:16:f4:95:c0:bf:c3:33:eb:3a:58:41:fa:
                    d7:de:af:00:89:13:d9:70:6e:12:db:0b:71:fe:6c:
                    2e:d1:8e:84:7a:52:40:5e:e4:75:ff:64:65:a5:11:
                    13:4e:f0:b9:7f:42:a3:42:30:c2:a1:c4:2a:b1:13:
                    ec:6f:3f:6e:cb:c1:11:6f:fb:3a:f2:4e:41:41:ee:
                    6c:62:3e:3f:93:cd:59:e8:f8:cc:46:ed:37:8c:ac:
                    a5:b5:37:e4:b0:c6:0c:6a:40:21:06:bf:e5:53:a1:
                    ef:b6:15:9d:f3:6f:19:37:06:06:55:c4:8a:81:52:
                    75:44:5b:28:4a:a4:c4:77:1a:3a:99:07:aa:10:8c:
                    46:db:85:2d:d4:76:66:42:3d:07:2d:92:21:16:cb:
                    4d:a5:61:51:b0:d7:57:6a:40:40:af:53:a7:c8:c7:
                    ab:76:74:28:d2:e7:77:34:4c:90:16:cf:fe:2e:f6:
                    79:99:52:44:fa:d2:9e:91:7b:96:2d:68:47:04:69:
                    11:a2:4d:42:cb:b2:ca:8c:aa:b6:14:fb:80:ba:9a:
                    93:0d:17:17:bc:37:de:49:25:7d:b1:be:c2:78:1f:
                    43:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FF:E6:2A:1C:D4:13:B7:88:91:BB:5A:0E:5B:19:D0:A5:D8:0D:FA
            X509v3 Authority Key Identifier:
                keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7b:56:74:13:5f:b9:53:6c:4c:b0:5b:1a:a8:e3:db:ed:16:
         c3:aa:a9:cd:3d:d1:b8:c5:2f:45:0d:ad:f3:12:a1:17:41:e3:
         4e:51:6a:0c:e9:3d:e3:b1:ec:f8:7f:b4:aa:2b:c0:88:3e:36:
         76:96:67:35:87:82:5f:f5:cd:c5:63:5a:de:ab:59:ea:a2:1e:
         90:e7:4c:86:05:a1:34:f3:12:fe:6e:49:9e:2e:38:fd:d9:aa:
         ab:9f:8c:07:a2:28:52:8e:c5:1a:19:3e:71:5d:f6:09:6f:ae:
         5a:53:06:a6:85:06:22:09:61:39:6e:7b:41:86:0d:61:45:a3:
         25:7b:39:9b:c5:aa:70:ee:d4:8f:da:3c:eb:51:66:88:d9:48:
         7d:a2:46:cc:d8:f3:b0:92:1c:db:7e:8d:c2:18:a4:06:d2:68:
         2e:44:25:95:08:c8:81:87:cd:fe:19:33:e7:3a:29:da:64:e5:
         5d:81:6b:ec:f3:39:84:89:79:39:b0:cc:44:1a:e4:44:e6:2c:
         e0:18:57:8e:dd:eb:5a:c8:24:b9:e2:1a:0e:5f:18:74:99:1c:
         ac:b5:8a:f1:45:90:7c:27:61:fd:99:f6:98:85:7c:b8:cb:35:
         18:d3:4b:6f:cb:7c:a2:b2:32:28:bb:73:2d:07:0a:2b:ff:ce:
         b9:c1:e9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:45:45 2025 by rpki-client