Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          xB4OeVbvpAfnYprJcwvH7dz3/PR39qbcGO8dEi5LtWw=
Subject key identifier:   37:DA:5A:BF:F6:81:D1:21:78:34:AF:2E:11:F3:6F:EE:00:E2:7E:4B
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       019677C37269AB0C67EB3DE6C08DD7863987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          0DAE
Signing time:             Sun 27 Apr 2025 15:00:19 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:19 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:19 +0000
Files and hashes:         1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: k7GZjiGRO0/Cq2Wf9yUfNs+oRpeFMG655Qco+KzZpfE=)
                          2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:72:69:ab:0c:67:eb:3d:e6:c0:8d:d7:86:39:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Apr 27 15:00:19 2025 GMT
            Not After : Apr 28 15:00:19 2025 GMT
        Subject: CN=37da5abff681d1217834af2e11f36fee00e27e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:f8:6f:19:87:3e:14:56:da:43:f2:40:fb:
                    a2:50:68:03:66:33:db:99:48:b3:26:17:6b:2e:69:
                    92:fa:88:e7:e6:18:83:86:96:2e:e2:a4:6e:e6:ea:
                    d5:18:6c:1a:22:07:10:33:25:66:eb:cd:e7:61:35:
                    ee:d4:d8:3d:ab:d5:fd:2b:73:b9:ef:08:01:4e:5c:
                    6a:c2:04:52:da:15:d4:63:b1:1c:8e:13:a4:0d:1f:
                    99:f2:05:88:ea:dc:0c:09:05:8e:2d:bb:29:83:f0:
                    90:90:1a:34:cc:75:27:45:4d:5a:eb:b6:b0:2a:77:
                    7e:a9:85:96:f9:29:26:33:6e:2e:f6:3e:74:73:f0:
                    ff:9f:8c:04:89:82:6b:bc:4f:fd:6b:16:d8:5d:77:
                    93:69:0a:65:91:1f:01:3b:b4:c7:49:5e:6b:db:83:
                    1d:58:4c:5c:8b:4f:2b:f9:68:0a:0f:25:6f:54:92:
                    0d:61:e6:dc:08:d6:fe:a7:88:ef:41:28:e4:a3:55:
                    a2:02:36:b9:af:0b:d6:cd:2f:9d:e9:26:b2:44:40:
                    dc:ef:54:ba:cf:78:77:6c:29:92:a3:39:f1:47:e0:
                    eb:c2:12:68:ce:e4:b0:8e:90:9e:7c:6c:d5:26:51:
                    11:ec:44:f7:68:a7:5a:9a:91:1b:0a:b1:ce:d2:24:
                    b2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DA:5A:BF:F6:81:D1:21:78:34:AF:2E:11:F3:6F:EE:00:E2:7E:4B
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:28:85:2b:3e:5c:0c:0f:09:9c:d0:94:86:72:40:be:bf:be:
         bd:fe:eb:44:30:e6:59:a3:4b:b8:f7:69:fb:61:08:48:fc:13:
         08:a8:d1:50:be:1c:07:d6:4b:59:08:76:58:f3:72:76:1a:4a:
         f9:0d:9f:29:c7:3f:06:99:9c:8d:c1:45:21:13:b4:71:05:77:
         6c:3d:dd:13:fd:0f:b6:52:d7:17:c7:4d:30:77:d4:70:a6:97:
         65:e7:5b:88:16:3c:32:d0:b7:a0:ad:b7:64:77:22:2d:eb:ca:
         08:55:7d:ac:d5:47:cc:b6:5b:9c:4b:24:b9:9a:16:53:09:69:
         87:4a:bd:9e:77:7a:d8:65:5f:83:a0:56:ea:e0:a7:32:11:51:
         35:a4:db:9e:41:cc:54:b6:38:d4:12:17:09:8e:e0:0c:03:b1:
         54:0b:4a:37:53:94:eb:f8:79:36:86:30:65:10:f4:31:da:5e:
         ec:f7:c4:01:50:07:59:ef:23:1e:0e:aa:42:dc:f2:ab:4c:a9:
         6d:65:d3:b7:be:f0:c6:7a:6e:7b:89:0c:14:44:df:2c:ee:fc:
         c0:2e:67:e8:54:83:c2:c8:6d:40:92:5f:76:dd:67:91:bc:31:
         9d:78:b1:dd:63:ac:c8:e3:51:20:db:9a:0f:61:74:fa:18:bf:
         b6:91:24:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:16:42 2025 by rpki-client