Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File:                     jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier:          ShQqc6JmVENdhnLqGcc4CC//A0CsmSelnkz3UJu9VS4=
Subject key identifier:   C9:BE:04:02:B7:41:D7:EC:EE:F8:BE:4A:40:73:D3:4A:3E:9C:9C:DA
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer:       /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial:       018F874B12D23C1516F9EAB67991D03FA8CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number:          8A
Signing time:             Fri 17 May 2024 16:03:15 +0000
Manifest this update:     Fri 17 May 2024 16:03:15 +0000
Manifest next update:     Sat 18 May 2024 16:03:15 +0000
Files and hashes:         1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: trWIjHDDlnb0e6LfezeXMcQ+x8sbFg5EHSRuBqEI3Co=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:12:d2:3c:15:16:f9:ea:b6:79:91:d0:3f:a8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
        Validity
            Not Before: May 17 16:03:15 2024 GMT
            Not After : May 18 16:03:15 2024 GMT
        Subject: CN=c9be0402b741d7eceef8be4a4073d34a3e9c9cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:62:95:55:44:90:15:57:2e:ed:bc:11:a3:
                    bb:79:cf:0b:1c:d4:4c:b6:d9:ba:00:41:0c:bd:a8:
                    69:48:8b:bf:5f:24:64:62:45:e9:c5:e1:83:74:d2:
                    9e:6c:99:3f:a7:26:1e:c1:77:03:6a:82:e5:46:bd:
                    e7:52:6a:5d:f8:8f:89:33:8d:8a:33:10:12:3d:66:
                    2e:bb:ba:55:35:2a:7a:b9:c5:80:d4:6e:7a:5d:15:
                    97:c2:79:c0:f1:e2:29:12:f7:90:9d:e1:ec:53:3e:
                    0d:e6:8a:f1:f3:24:b5:7b:9b:d7:94:16:27:09:0e:
                    53:30:a7:16:9d:ea:c6:cb:30:00:6f:66:d7:af:93:
                    74:cb:e9:2a:a8:4a:ab:1f:03:bb:f1:d2:55:bb:61:
                    29:56:ab:a7:8a:0c:dd:dc:cb:e6:ad:70:74:74:35:
                    7f:e0:01:50:fa:76:ba:bd:75:d5:47:cf:53:b0:ef:
                    4b:55:bb:8b:82:1c:78:f3:5f:f0:05:71:52:bd:ff:
                    a7:1a:b7:d4:5d:8f:d8:c9:50:2b:ec:fd:61:24:6e:
                    5f:46:0b:24:84:94:0f:03:1e:c7:fa:65:57:31:39:
                    eb:1a:98:d5:3a:cb:84:be:90:23:30:0b:40:a8:8c:
                    33:bd:0c:46:ee:57:b4:90:ce:ef:6c:98:d0:7c:ac:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BE:04:02:B7:41:D7:EC:EE:F8:BE:4A:40:73:D3:4A:3E:9C:9C:DA
            X509v3 Authority Key Identifier:
                keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:13:c7:f6:13:69:6c:04:86:bc:bf:f2:f8:49:7c:94:7d:6f:
         a6:6b:fe:fc:9b:a7:9b:bc:84:89:bc:f0:97:81:5a:a3:38:af:
         e2:4a:cd:27:2e:a9:1a:d1:17:e3:d3:60:68:a3:3a:de:f1:17:
         20:eb:68:45:25:ea:c8:c4:a5:d2:c4:52:b0:96:aa:9e:3a:7e:
         42:d4:7f:15:e7:24:12:ac:7f:a4:db:76:64:ac:7d:3e:29:b9:
         39:63:a1:ab:00:02:49:e9:28:9e:97:04:82:5e:a5:85:86:e8:
         1d:bf:ce:e4:99:76:e5:d5:53:43:4f:1e:d4:db:d9:80:13:2c:
         11:9b:26:61:d9:3f:e1:66:20:27:e2:6a:64:74:d4:45:68:8f:
         36:8a:ac:9e:8f:cc:8e:af:64:33:ba:36:c8:6c:a6:45:a2:8a:
         80:1e:6a:31:f0:0f:f2:8e:9e:25:bf:df:30:8b:27:95:01:d1:
         13:36:77:54:88:4a:29:77:b9:b0:c5:4f:84:7e:dd:5b:13:5f:
         18:fa:a5:68:2d:20:e6:b9:c8:9a:6f:46:22:1e:37:71:55:6d:
         3f:0e:37:07:d2:ac:d1:4b:4f:53:93:0e:01:fb:c3:91:1a:7d:
         03:dd:04:cc:19:d5:4b:a6:bc:28:2a:ac:9f:80:bf:e6:df:0a:
         d0:76:e7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:27 2024 by rpki-client on console-ams.rpki-client.org