Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File:                     JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier:          r7kVOxxYt1+uSRet4HkJ4kn7HvKipfCRgnwwdApOPgk=
Subject key identifier:   77:40:A3:2A:17:AA:62:45:7A:F8:D5:63:9F:AB:F8:3E:B5:94:22:3E
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer:       /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial:       018F8D15900563D0DF6B8EE510337F2BD592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number:          0960
Signing time:             Sat 18 May 2024 19:02:31 +0000
Manifest this update:     Sat 18 May 2024 19:02:31 +0000
Manifest next update:     Sun 19 May 2024 19:02:31 +0000
Files and hashes:         1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: AsOcormMx18lh95ZHV/T5+tH1d882vVXbvDBC5AhVC0=)
                          2: OZLsOnF4b-1Br2AXgyfuE7fovTw.roa (hash: OpispfEnIIDiKYzwfNfUlgsy7/vfj480Ss0Ag3dfTyI=)
                          3: y8iYUkz9jYdwVRZT0iWOVSwV90w.roa (hash: sUx5I10tcOWbV7uFCL8OG8lSTWDQ6gTCWxg/sFAiDSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:15:90:05:63:d0:df:6b:8e:e5:10:33:7f:2b:d5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
        Validity
            Not Before: May 18 19:02:31 2024 GMT
            Not After : May 19 19:02:31 2024 GMT
        Subject: CN=7740a32a17aa62457af8d5639fabf83eb594223e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:c0:36:96:dd:b3:71:fb:cc:2e:1f:ed:d8:
                    e6:d7:4d:bc:90:7f:98:fe:49:40:4f:dc:16:e2:c2:
                    7b:c6:2b:bf:60:ec:90:22:63:62:9c:5b:93:4c:44:
                    65:d8:4f:e3:e6:f0:63:48:fa:dd:b1:fc:58:7a:15:
                    4b:ff:99:e9:2c:2b:cc:a6:53:2a:52:1e:df:ec:65:
                    34:44:e0:fe:63:47:20:16:4f:36:40:18:cb:a5:ba:
                    5d:3a:86:7b:8b:a6:f5:64:50:b2:2c:23:97:15:2f:
                    32:45:8c:95:27:8a:55:e4:37:84:f6:6e:ab:91:15:
                    f7:e9:e3:3d:30:33:b8:3f:7d:56:df:11:1b:9f:35:
                    6c:a4:ec:ad:31:cd:01:92:bc:9d:6f:8a:29:36:74:
                    59:d9:27:1d:43:c5:a5:7f:a7:0a:f5:03:d9:36:e8:
                    de:b4:28:16:82:77:2a:08:a8:7e:51:b1:57:6e:d0:
                    f6:65:f8:f8:91:15:60:f4:c9:ea:88:48:cb:e5:79:
                    7c:0c:f3:2e:11:10:a5:ca:f7:97:a1:b9:02:48:d7:
                    5c:d3:92:9c:ab:23:8b:d3:aa:79:4c:28:cc:97:f6:
                    5a:d7:8d:df:d0:83:01:4f:47:5e:4d:f1:6b:69:31:
                    01:68:ff:4f:3d:00:1c:0d:b6:65:7f:d1:68:df:68:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:40:A3:2A:17:AA:62:45:7A:F8:D5:63:9F:AB:F8:3E:B5:94:22:3E
            X509v3 Authority Key Identifier:
                keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:52:22:10:03:6f:27:92:14:92:72:fd:b7:3b:57:b8:17:
         00:da:f1:82:61:17:1e:0a:2d:64:3a:2e:ac:9f:b5:50:f9:60:
         a8:76:61:e6:29:3c:d8:dd:f0:2e:f6:ee:51:4a:fa:93:75:09:
         62:23:a6:12:8b:a8:26:b2:0a:df:58:8b:07:9e:d0:2d:d5:e4:
         c2:02:58:ca:d4:b9:bb:c1:d5:36:69:f5:10:83:03:3c:9f:81:
         eb:34:7f:cb:85:e4:ff:58:a1:a1:a6:ba:48:6c:7f:25:fe:27:
         ae:1c:5d:67:a9:87:f0:11:6d:2e:62:95:95:62:a7:4a:b0:97:
         83:f2:f2:fe:61:2a:6d:0c:54:9f:98:7d:be:0e:8a:22:d1:8c:
         bb:28:e5:45:1f:33:80:04:c8:a4:47:3f:b6:95:9f:cb:c8:17:
         b3:b8:0d:2a:80:ca:62:56:bc:bc:57:d8:fa:cb:8b:91:49:36:
         be:d9:45:15:1d:e7:17:e6:af:7a:59:ef:a5:cb:b3:24:a7:f1:
         4d:e5:b1:6a:22:b6:7d:33:a8:55:cb:e0:3a:24:49:a5:f9:a9:
         be:8c:29:05:42:df:d7:8c:d8:40:57:2c:7d:80:ff:83:23:fa:
         98:95:f4:59:68:e1:bf:9a:e4:a2:d5:fe:a4:a4:28:88:5b:aa:
         54:ff:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:52:25 2024 by rpki-client on console-ams.rpki-client.org