Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File:                     JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier:          +zJnees8gS/8krU7htW+wWm4jPG/LTDWNiWrfBDikQc=
Subject key identifier:   4C:DA:AE:5D:80:03:85:33:41:B0:4A:87:39:5E:64:41:88:F4:68:65
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer:       /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial:       0190411B9D44B5151CC3043B99EB569C3EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number:          0CF2
Signing time:             Sat 22 Jun 2024 18:00:47 +0000
Manifest this update:     Sat 22 Jun 2024 18:00:47 +0000
Manifest next update:     Sun 23 Jun 2024 18:00:47 +0000
Files and hashes:         1: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: +TtmaicOyglC5TbgSEHIt/jU/s2cewu6vVtQORLhvts=)
                          2: dslDVWfQcpljojuoaEWGnLEjEY0.roa (hash: 97QfK0tJJJHyyErsDCXiqd9z1Mv97RO3BtuMZGOade8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:9d:44:b5:15:1c:c3:04:3b:99:eb:56:9c:3e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
        Validity
            Not Before: Jun 22 18:00:47 2024 GMT
            Not After : Jun 23 18:00:47 2024 GMT
        Subject: CN=4cdaae5d8003853341b04a87395e644188f46865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:58:ab:3b:fb:7f:9a:c4:87:ac:d8:ee:48:
                    e9:d9:2c:84:00:c3:ae:b0:20:31:a9:72:a3:ce:1e:
                    5f:67:ee:df:9c:d9:19:23:dd:02:1b:99:b0:aa:a7:
                    ec:ca:a7:0f:e7:b4:f7:cf:15:06:18:23:91:d6:2c:
                    a8:b0:fa:42:ce:5f:c6:0c:8b:3b:a5:12:bb:64:04:
                    9b:e7:94:23:9b:b3:2b:ac:c4:e4:e5:e8:b8:5a:80:
                    cc:45:f1:a3:8d:37:ef:6c:35:c8:1b:85:db:6a:95:
                    5b:cb:6d:96:30:42:a8:6f:c0:ed:2a:53:df:7d:5c:
                    91:78:a0:89:7c:64:9a:92:a3:68:84:56:d1:2d:c7:
                    60:15:ba:7c:f3:ee:41:b1:f1:be:73:a0:df:1d:74:
                    3d:d3:0c:22:22:e7:ca:92:23:c2:5f:46:f2:41:40:
                    ad:d3:c0:44:66:94:06:d7:9f:a8:ec:8e:7c:11:2d:
                    8d:43:78:f1:3a:63:d2:e6:7b:0f:9c:50:51:4c:a4:
                    b3:d3:77:05:00:f9:f2:b4:e8:a8:55:8e:8f:e6:a8:
                    5a:b5:eb:31:86:8d:3f:fa:08:30:01:a6:69:45:18:
                    a2:2d:f5:27:d8:c1:5a:b8:91:e3:eb:89:30:16:b2:
                    1a:38:6e:68:de:1c:47:e9:ec:bb:e0:52:dd:bb:a4:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DA:AE:5D:80:03:85:33:41:B0:4A:87:39:5E:64:41:88:F4:68:65
            X509v3 Authority Key Identifier:
                keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:3a:5e:64:cb:0b:4a:a0:82:43:98:2a:e0:91:fc:d5:67:
         fb:46:9f:35:76:55:69:94:e6:70:8b:17:94:a0:1c:6d:88:37:
         61:23:13:d6:8b:42:7a:4f:06:3e:0d:27:88:87:7f:57:aa:0a:
         bc:78:b4:6a:45:ce:ba:17:7f:3e:d3:ec:b5:9e:48:6d:bb:84:
         dc:e0:85:49:7c:4d:1c:25:bd:8d:ff:8d:a8:e2:60:ec:a9:54:
         af:2f:75:8a:fa:48:f4:78:48:0b:34:d8:e7:f7:af:30:1f:32:
         da:7c:62:61:fa:ab:32:e9:c8:81:a4:b2:a8:cf:e6:aa:bf:89:
         5c:5d:58:c6:1a:ef:bf:06:90:69:35:b9:a4:60:6c:35:11:16:
         fb:4c:c4:81:52:50:5a:26:fd:fc:b9:f8:f4:b4:12:9b:0b:bf:
         36:cd:3c:74:3f:3e:ec:9c:6b:3c:d2:56:40:01:6d:2e:d3:de:
         eb:49:1a:7b:3c:bd:a0:df:02:0c:97:2f:a5:b2:7f:c9:7c:8f:
         ed:62:9c:bd:12:8f:bd:04:56:e3:89:eb:17:4a:30:0f:f3:90:
         3c:6b:13:1e:db:44:62:eb:99:ff:0e:f4:75:c1:28:4f:33:22:
         fe:ab:35:d8:b3:d2:63:c5:d2:79:55:9d:aa:20:83:62:67:75:
         d2:94:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:45:03 2024 by rpki-client on console-fra.rpki-client.org