Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
File:                     Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft (raw, json)
Hash identifier:          5CTighXJ7A7xm/9GS2ZLKhNz7aDB/pagso2VdVlKNFw=
Subject key identifier:   62:8E:A1:D7:C6:65:1A:2A:3A:72:B0:5D:88:D7:DB:43:CB:B0:87:67
Authority key identifier: 26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
Certificate issuer:       /CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Certificate serial:       019673E70507B969F257EDF09EC2A6463A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
Manifest number:          149E
Signing time:             Sat 26 Apr 2025 21:00:42 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:42 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:42 +0000
Files and hashes:         1: Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl (hash: Mp7/3gREnEFsex01iZTSD0A3esPg70101XtvaBXQSog=)
                          2: s_vj38_GYCn4aemkK1p2_MaatWQ.roa (hash: 3JnnhuGGZqjdBr8pR/nRqhjcsI/Mjb5T38Y9Ho7lfvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e7:05:07:b9:69:f2:57:ed:f0:9e:c2:a6:46:3a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
        Validity
            Not Before: Apr 26 21:00:42 2025 GMT
            Not After : Apr 27 21:00:42 2025 GMT
        Subject: CN=628ea1d7c6651a2a3a72b05d88d7db43cbb08767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:b8:98:dc:08:b1:70:dd:45:50:52:99:7d:
                    b7:fc:f8:c4:19:91:b8:03:7e:c8:28:e1:13:0a:83:
                    30:ac:df:7f:80:e5:34:53:5a:f5:52:89:28:8c:f5:
                    59:d4:9a:25:13:34:7e:52:2d:ee:dc:b6:c8:1a:75:
                    9c:f2:c2:1e:50:9b:c7:c8:16:ce:b9:24:44:67:27:
                    bf:f5:0f:6e:b6:e2:2b:2a:09:20:1d:f9:44:5b:99:
                    ba:ce:56:06:ea:e4:07:55:9b:b4:24:5b:cd:85:1b:
                    c3:19:dc:b2:28:ea:2b:15:b0:f3:cc:5c:b2:82:85:
                    65:b3:b3:87:de:4c:51:c7:5e:38:09:9e:d5:4e:f4:
                    34:ea:a2:5a:85:e9:7a:b0:d9:33:71:d2:89:c9:e1:
                    9b:0f:b1:67:de:6d:29:9b:f1:e5:be:73:04:77:4f:
                    3b:8f:4a:88:3b:1f:cf:cf:ec:27:48:54:20:e8:6f:
                    75:ba:bc:46:b7:32:7c:34:70:b2:06:88:6f:e2:1c:
                    96:5a:97:c9:38:d6:02:df:4d:cc:ad:56:ed:50:01:
                    fb:1c:cf:49:32:96:51:5f:ce:25:c8:bf:cb:28:29:
                    f3:e5:ef:54:32:14:f1:4d:9a:ca:35:81:c0:96:8a:
                    28:d9:cd:80:ff:0a:c5:36:b3:1e:b9:4e:12:5c:d0:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8E:A1:D7:C6:65:1A:2A:3A:72:B0:5D:88:D7:DB:43:CB:B0:87:67
            X509v3 Authority Key Identifier:
                keyid:26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:1b:39:9c:11:f0:5e:ba:34:c7:65:0f:e7:dc:55:67:a4:
         65:5c:09:f7:03:b0:ca:ec:67:1f:a6:5c:a1:95:3e:73:5c:7e:
         47:e2:24:49:6b:a8:4a:be:b3:fd:b9:f5:2f:84:a8:a7:75:44:
         fb:f9:95:0e:85:6d:6b:9f:47:bf:89:3e:de:ba:d5:75:8f:1f:
         ea:f8:d6:79:d5:98:9a:63:07:c6:00:eb:f7:b2:3f:40:b2:e6:
         0f:f4:fa:0a:ee:d8:ea:14:3c:aa:78:62:8a:fa:ab:f3:04:1d:
         9a:9a:1d:92:b5:69:a5:e3:9f:62:44:6a:47:9c:47:ae:1d:ac:
         c4:32:9f:99:0a:f9:7f:dc:ad:86:ba:c7:66:ff:00:f8:56:d5:
         87:4a:5f:bf:47:24:8d:26:99:3c:20:4d:b0:17:34:12:8d:8a:
         78:83:f0:a7:37:d2:33:04:58:6b:ab:34:8c:b0:59:c2:ab:16:
         d6:ae:82:11:85:91:27:58:ac:ae:df:f4:6f:de:00:e7:74:5f:
         50:66:32:2c:fa:e5:4f:96:86:5b:4d:a2:2b:39:ac:62:03:01:
         dc:55:90:db:4d:ab:9d:c7:01:65:e6:d3:39:88:cd:19:8a:82:
         ee:35:7b:5a:40:6a:4c:94:ec:38:e6:b8:e8:f3:e8:bd:59:fa:
         81:8f:ea:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:33 2025 by rpki-client