Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File:                     2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier:          ZpfFJmbccqg/5N2yu6fSHsP9XsmGbiSRMUIx7Sb4rr4=
Subject key identifier:   3F:C1:C3:C0:D2:8D:2A:60:F5:A4:32:DB:A2:FA:BB:78:69:23:9E:E5
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer:       /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial:       018F3FD77F22FC917D0556BB9651CAD84946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number:          0BB7
Signing time:             Fri 03 May 2024 19:03:58 +0000
Manifest this update:     Fri 03 May 2024 19:03:58 +0000
Manifest next update:     Sat 04 May 2024 19:03:58 +0000
Files and hashes:         1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: lcKDWp/yE5ZZHREZtF/usVDWbwyuLvnVGfX1Nlm+XVM=)
                          2: wBPl-J0_NEjC8yclSCZzAA9Nw4Q.roa (hash: yVACB5PpvXZuv6IE/gIVyImNClRWP6Az0DQ4QSGFwx0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d7:7f:22:fc:91:7d:05:56:bb:96:51:ca:d8:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
        Validity
            Not Before: May  3 19:03:58 2024 GMT
            Not After : May  4 19:03:58 2024 GMT
        Subject: CN=3fc1c3c0d28d2a60f5a432dba2fabb7869239ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:4c:9e:44:50:7a:2b:30:6e:0c:19:a3:c3:
                    6d:26:e6:af:78:41:08:b0:db:c2:d3:63:7b:6a:b6:
                    3e:f2:ae:5c:e7:79:d2:0b:80:0e:17:1b:be:f8:8c:
                    89:5d:35:0e:9d:df:60:8b:35:b4:91:0a:2f:4f:aa:
                    ca:da:d9:24:e1:48:f9:b3:f5:47:22:40:80:31:4b:
                    53:df:08:9e:6f:d1:e4:ae:62:4c:ad:a4:30:64:62:
                    65:97:b7:98:20:5d:4c:0f:a0:a1:47:26:29:20:6b:
                    28:ae:d9:9e:a7:0b:64:97:6f:7f:ea:ab:d1:0a:cc:
                    b7:8c:d7:51:49:40:a9:d1:c3:29:20:b5:aa:c5:e3:
                    77:39:65:40:e4:3c:c9:32:a3:31:9c:42:5d:dd:80:
                    34:bd:0d:f4:af:61:c8:15:d9:fb:1f:ee:c4:39:59:
                    b1:a8:48:ab:d5:9b:c1:be:1e:9f:a6:14:af:98:8c:
                    03:30:91:cb:ca:f2:b8:86:4f:77:1f:97:93:81:a8:
                    97:d6:45:2d:1a:c8:5f:e0:59:75:b9:e0:2f:48:7d:
                    38:f4:87:ee:81:0e:9a:6e:11:09:6c:53:1c:18:bc:
                    f8:7f:b8:c9:2e:69:01:16:40:df:3c:04:b2:d9:99:
                    41:cf:a6:dd:0b:83:1e:14:15:a2:fc:76:de:5a:6d:
                    09:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C1:C3:C0:D2:8D:2A:60:F5:A4:32:DB:A2:FA:BB:78:69:23:9E:E5
            X509v3 Authority Key Identifier:
                keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:65:55:e2:06:79:23:6d:aa:4c:0a:ba:77:be:6a:1c:75:2c:
         4c:d6:a0:9b:22:96:f6:19:68:da:4f:da:e0:07:c5:31:a0:d6:
         56:28:56:73:ae:dd:a3:3f:6d:a9:c3:c2:2c:95:a5:f0:28:6d:
         a5:05:b2:d8:56:1e:66:16:ec:38:31:40:ac:51:cd:38:b2:55:
         67:ab:88:8e:c2:72:9d:d5:b9:92:40:eb:4d:54:b1:69:52:8b:
         dd:bc:cd:d8:6a:f8:4e:8f:93:4d:ef:7e:b4:77:23:5b:28:87:
         17:d6:c5:ab:ef:6f:67:2f:84:2d:0c:8e:51:1c:b4:c9:d0:fa:
         67:fe:fc:4e:68:5c:84:8e:91:77:90:5a:bc:df:a4:8d:f2:35:
         00:ce:69:b8:53:a5:03:4d:5f:61:71:1a:7b:30:aa:70:4f:0b:
         0b:5a:dc:5e:8c:e6:8a:3b:82:8f:d2:72:d8:15:8f:d8:ba:83:
         9d:73:d3:24:cf:e4:0d:b9:9c:2e:1e:d2:ef:3d:ca:0c:9c:ed:
         be:e5:24:83:3d:9a:70:f2:95:92:e6:cb:5e:18:80:81:c8:fc:
         99:62:f5:31:9e:b9:f2:d3:f9:29:46:36:44:cc:91:c1:f9:3b:
         26:19:cc:c0:da:a2:15:e0:a0:e7:94:e8:6c:be:dc:3d:7f:be:
         40:ff:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:38:25 2024 by rpki-client on console-fra.rpki-client.org