Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
File:                     jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json)
Hash identifier:          4iUIBu+HUaA/4nLjyo5hGc3ZucW+bk+21ozCcF+2ctM=
Subject key identifier:   B3:AD:1D:7B:52:8D:63:5C:33:09:F3:3A:2F:38:ED:B6:ED:62:CD:29
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Certificate issuer:       /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial:       018F8749FDAE436A0947C94D04231DC5D896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
Manifest number:          10BD
Signing time:             Fri 17 May 2024 16:02:04 +0000
Manifest this update:     Fri 17 May 2024 16:02:04 +0000
Manifest next update:     Sat 18 May 2024 16:02:04 +0000
Files and hashes:         1: gZk8yrdkfh6FrWipj46ad2zUth4.roa (hash: wYG1bbxzZdcc55SqOAsqbPQDL10st03ZgGepqjCnxWE=)
                          2: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: qndAcFnLLs83IiGB4HcogD2JXPiNChmoXmwlzr+ZZhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:fd:ae:43:6a:09:47:c9:4d:04:23:1d:c5:d8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
        Validity
            Not Before: May 17 16:02:04 2024 GMT
            Not After : May 18 16:02:04 2024 GMT
        Subject: CN=b3ad1d7b528d635c3309f33a2f38edb6ed62cd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:2d:e1:32:91:4a:66:d0:27:5e:2b:54:fd:
                    49:5c:d1:07:0f:17:f8:4a:a5:ea:6d:7c:34:61:27:
                    b6:6b:c0:2b:1e:48:77:a3:ce:48:c5:28:c0:76:0f:
                    87:40:2a:1e:5a:59:86:08:ec:dc:39:9d:6b:1e:6d:
                    9d:37:56:66:3c:d5:00:a2:da:a5:8a:fe:7c:c3:0b:
                    23:69:f4:73:0d:4c:9c:73:8f:a3:33:9c:bd:15:5b:
                    40:e8:96:98:96:40:4a:1d:74:e3:8e:58:74:67:21:
                    33:ad:d8:2c:b3:21:0c:ea:71:b5:64:25:cd:fe:5a:
                    67:d0:43:11:33:a7:7e:2d:74:37:4d:1e:47:74:41:
                    95:4a:5f:d1:5e:e7:0a:84:8b:a9:ff:37:0b:80:83:
                    0c:3e:86:41:24:86:f1:82:87:26:03:5c:58:2f:73:
                    22:37:f0:a8:8b:d1:74:b7:6c:55:6a:0c:0f:b2:d0:
                    9c:85:96:11:b5:39:74:5a:0f:07:e6:13:29:f9:b9:
                    4b:24:8b:4d:57:33:05:10:70:c9:b3:62:29:a1:ef:
                    b5:81:34:99:82:46:1a:b8:bc:20:39:8e:fe:68:96:
                    9b:50:d6:1d:3e:ab:a6:2a:e5:64:f3:31:dd:fb:f6:
                    04:1f:68:c9:d5:53:c6:d8:fb:2d:ac:4c:42:22:f9:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:1D:7B:52:8D:63:5C:33:09:F3:3A:2F:38:ED:B6:ED:62:CD:29
            X509v3 Authority Key Identifier:
                keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:30:d6:c9:11:47:72:c3:cc:a4:ff:0e:a4:5c:cf:a6:b9:
         aa:ff:5f:e8:31:f0:43:9a:15:74:0f:08:06:8e:da:04:78:c8:
         6f:ea:d1:5a:92:2a:94:70:41:3e:2a:71:4a:28:82:e5:41:7c:
         31:be:87:e6:da:89:c1:80:85:ea:2f:dd:85:27:19:59:db:58:
         ad:d5:dc:bd:99:38:73:59:cc:f1:39:ea:40:36:21:22:7b:fe:
         79:da:95:1a:d1:61:94:ca:db:de:4e:8b:d4:ba:d4:c6:e7:03:
         b5:a9:c0:b0:6e:6c:41:64:99:80:2c:11:4d:c9:3c:38:25:c8:
         10:3c:4a:1b:92:64:a7:70:42:31:21:b0:e1:20:50:dc:0b:cd:
         6b:d5:92:d8:b0:68:9e:fa:29:90:53:fa:02:64:3d:11:a5:61:
         ce:bc:84:3e:5a:38:0c:2d:4d:7f:f3:fb:cf:80:e7:6c:f6:ad:
         da:0f:b5:a8:1b:47:b1:78:de:6f:ef:4b:fe:b0:35:5a:47:33:
         d7:7a:ab:8e:1a:d4:c8:3a:e0:41:49:25:eb:eb:82:2d:a0:fc:
         97:89:60:7e:52:2e:ec:a9:14:53:de:f3:03:25:0d:4a:fc:4d:
         52:2a:24:b9:d1:ce:11:af:f1:2e:be:ab:ce:30:e4:de:fd:6a:
         74:df:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:09 2024 by rpki-client on console-ams.rpki-client.org