Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File:                     pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier:          xNb6IDWukMZLybBn9z5/WZVZwCNsvpXFKgKeCEAxg9s=
Subject key identifier:   7D:06:F0:A3:EA:EB:B3:C3:D3:89:FD:95:6B:10:2B:28:79:FB:98:AF
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer:       /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial:       01968880528FC28BCB84F507841AD61DE353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number:          151B
Signing time:             Wed 30 Apr 2025 21:00:33 +0000
Manifest this update:     Wed 30 Apr 2025 21:00:33 +0000
Manifest next update:     Thu 01 May 2025 21:00:33 +0000
Files and hashes:         1: _fFHOJoXpOrY_um7x7QB-vvO3bk.roa (hash: p/LewBD8vsUMOUJR34qULDasx72iNLAz4cIqUSFI+5E=)
                          2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: kMnMNsxO/+RdiNlKacAQysUkhtkfetyEB0KllyWC7F0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:80:52:8f:c2:8b:cb:84:f5:07:84:1a:d6:1d:e3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
        Validity
            Not Before: Apr 30 21:00:33 2025 GMT
            Not After : May  1 21:00:33 2025 GMT
        Subject: CN=7d06f0a3eaebb3c3d389fd956b102b2879fb98af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:47:95:6d:64:1f:93:8b:06:94:f1:0e:79:
                    4d:bd:7a:86:db:72:4e:e9:15:09:53:5c:cc:f4:59:
                    7c:5c:d2:72:0e:23:64:9f:79:e1:ba:7f:d6:9a:58:
                    3a:82:37:ec:04:bd:55:ca:59:24:ae:c8:8f:05:62:
                    76:63:49:59:92:cc:35:2c:05:e5:e5:6e:b8:06:c7:
                    fd:30:4c:b5:22:46:36:9c:a0:d3:e7:f9:ce:ff:27:
                    bb:c4:10:0b:5c:79:22:52:f8:c9:dc:fb:db:35:05:
                    10:05:7e:47:0d:f1:22:6c:b5:0c:24:7c:d6:f9:01:
                    c6:8d:9b:06:f7:c7:78:78:1a:99:24:8b:bc:0c:90:
                    23:c0:c9:00:13:af:1d:e5:ba:ee:76:07:b2:a7:cb:
                    dd:c5:54:a5:53:18:72:0b:64:83:a7:e6:ce:f7:cd:
                    2a:cb:e4:e9:73:94:a4:68:56:28:98:0c:8e:45:2a:
                    24:65:6a:fc:45:06:8d:5c:22:57:fa:c2:75:7a:51:
                    eb:19:82:50:8d:04:79:0f:29:93:74:3c:3c:3e:2c:
                    df:9d:a2:28:39:b6:ad:4b:1e:04:30:3d:27:9f:c0:
                    72:dc:49:34:84:b9:08:88:7a:e0:a6:b0:08:63:89:
                    22:2e:7b:c0:1e:69:0d:31:67:a0:69:be:6c:fe:57:
                    97:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:06:F0:A3:EA:EB:B3:C3:D3:89:FD:95:6B:10:2B:28:79:FB:98:AF
            X509v3 Authority Key Identifier:
                keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b5:d1:e9:17:59:eb:31:91:48:b6:87:8a:eb:29:aa:c9:a0:
         ef:e0:81:1f:85:9d:38:f1:9d:4d:83:41:7e:2d:78:31:18:33:
         ec:c3:cd:2d:f9:c8:72:bc:db:46:de:86:73:a0:dc:dd:7e:1b:
         42:47:1f:f6:8d:8f:35:41:7b:65:38:64:28:64:44:65:cf:85:
         06:cd:40:13:f6:41:c7:34:4c:33:c6:0d:04:72:8c:78:03:36:
         d4:a5:6f:8c:28:a5:90:a1:c7:2d:d2:9b:87:b2:46:c0:85:ad:
         2e:e3:b7:42:a3:85:88:cb:10:4b:cc:3c:40:00:d9:ca:1a:ba:
         5f:53:a7:ba:8a:b3:dd:e2:f7:55:fe:ec:8d:cc:04:9e:31:00:
         2a:9f:13:c2:b5:80:d0:8e:65:27:14:ab:cd:a5:1b:d6:5f:86:
         10:16:c3:fd:b2:7c:42:6b:ab:dc:85:4e:2d:f0:86:de:6d:63:
         81:a1:ca:4f:1b:31:53:61:97:27:f2:ee:b2:94:2f:2a:23:24:
         c6:63:02:d0:59:bb:c2:ec:6b:74:6e:1d:a3:8f:ba:b1:a2:a2:
         61:01:9e:06:d2:ae:70:a4:5f:89:69:9b:de:d2:d6:e1:b8:59:
         9d:a6:6c:9e:e8:b7:4b:83:90:73:b8:26:d7:8b:72:30:f2:f0:
         99:ca:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:46:37 2025 by rpki-client