Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File:                     jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier:          VY5Ur3TLsKqczoh73Xtk7xTWs+Bf8M8n5/nOD4nb2zY=
Subject key identifier:   AC:3B:24:E1:A8:F8:17:53:95:BF:AF:76:99:CB:EA:E3:41:2E:D7:BC
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer:       /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial:       01901E8FC8C8BA0A97036125133B518BB34F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number:          0238
Signing time:             Sun 16 Jun 2024 01:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:57 +0000
Files and hashes:         1: f9mFNCX8oTTYyjlGpKNg0vg15bE.roa (hash: gWRMmAjM5UrsbDydc+sB5DVAW+2FU8xnozRru7AFUBM=)
                          2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: 2aP4Zz77qzN43xEpDKZTXAAo6ahYRKzHD4h0cljui00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c8:c8:ba:0a:97:03:61:25:13:3b:51:8b:b3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
        Validity
            Not Before: Jun 16 01:00:57 2024 GMT
            Not After : Jun 17 01:00:57 2024 GMT
        Subject: CN=ac3b24e1a8f8175395bfaf7699cbeae3412ed7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:25:bc:a9:9a:2b:45:df:64:a2:4e:37:18:
                    2c:c5:02:9c:fa:b4:50:fd:eb:8d:cf:50:7f:79:b7:
                    6c:a7:ee:56:da:3b:46:8f:d8:f3:99:88:c0:04:44:
                    32:7d:d6:39:cc:17:16:b1:7e:b6:eb:27:b5:23:df:
                    e5:53:87:b3:e1:a3:01:3b:29:d9:f0:8e:f3:8b:35:
                    dc:a0:29:99:c5:90:bc:ba:f4:27:ec:30:c7:5a:38:
                    27:89:54:7c:79:0e:c6:89:33:99:3c:51:a6:99:4b:
                    e1:46:45:1c:eb:bf:44:fb:0d:56:90:1c:ee:3b:66:
                    7f:94:f5:a0:34:89:80:0f:6e:07:17:19:f2:13:4c:
                    0e:75:19:6b:02:a9:01:57:38:f9:1a:6a:0b:87:00:
                    6d:b6:db:c2:67:48:8c:b0:88:fd:5f:51:fd:46:95:
                    10:95:70:22:6e:17:50:fb:01:d3:92:56:95:19:44:
                    0b:5d:17:74:31:81:50:b9:a7:2c:15:9e:b8:0f:22:
                    62:fc:96:3b:f3:01:fa:02:9e:42:60:c3:2d:e4:6d:
                    f4:36:75:b4:20:f3:97:14:f6:83:b2:e0:50:51:4f:
                    06:07:8b:62:ba:e6:2a:6c:ac:49:d3:55:14:54:f6:
                    93:36:c3:33:d9:71:45:c1:b3:e0:d8:6a:2a:79:5d:
                    5b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3B:24:E1:A8:F8:17:53:95:BF:AF:76:99:CB:EA:E3:41:2E:D7:BC
            X509v3 Authority Key Identifier:
                keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:5b:dd:0b:15:a1:19:21:a2:42:99:e7:15:02:f7:08:c8:
         42:80:71:23:ff:64:61:3e:38:2b:ec:68:ea:ac:e3:ea:ef:32:
         95:aa:38:8f:22:86:a0:0b:ca:04:51:6a:e2:1e:79:b5:4b:69:
         81:fa:1d:5b:28:14:4e:b6:ec:fe:65:4c:22:35:f4:a7:4a:7c:
         ae:cd:d1:2f:c9:3b:2d:7f:0c:cf:3e:7b:31:5f:c2:86:68:0e:
         3b:a8:3a:75:a2:bd:2b:02:b5:18:aa:16:37:39:f0:99:6e:39:
         b0:b8:4b:c9:04:89:52:9a:52:3c:7f:92:95:ed:5a:75:72:2a:
         df:15:88:3a:9e:6c:9b:2d:b0:13:ab:43:80:0d:de:b3:7d:bd:
         66:99:0c:00:e2:d6:35:6d:14:ca:ea:aa:58:f6:b3:af:f6:ed:
         26:a1:7f:d4:59:f7:54:6c:fa:52:85:30:d0:ee:7d:e6:23:1f:
         66:c3:c7:90:2a:14:ba:2a:34:6e:e7:df:f3:99:96:87:18:8b:
         56:13:4b:23:e3:63:6f:3c:f7:92:d1:3a:64:8f:cd:9d:f2:f1:
         60:4f:42:d1:8d:66:dd:a3:70:15:5a:2b:7d:5f:22:ae:97:8f:
         fa:1f:91:d3:81:32:92:0a:7a:e0:ab:38:2a:8d:bd:c4:36:d1:
         cb:25:42:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:38 2024 by rpki-client on console-fra.rpki-client.org