Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File:                     jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier:          mUlAV3aHIVXrW32QAb1ZHWtBC3yWL1pB59FxxipfYC0=
Subject key identifier:   D5:83:99:1A:4B:8B:80:CE:90:2D:A1:D5:AD:46:28:8C:BA:14:D5:92
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer:       /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial:       018F8891F3CF105A8A479C5A21CCD3FBD2F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number:          0434
Signing time:             Fri 17 May 2024 22:00:17 +0000
Manifest this update:     Fri 17 May 2024 22:00:17 +0000
Manifest next update:     Sat 18 May 2024 22:00:17 +0000
Files and hashes:         1: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: v0QlOoP97gpQnGXkLoplnmkObQLqC1VVr01O4V9I9lM=)
                          2: keApGoX20Fi5wT691V2viEmsicg.roa (hash: xrM5+BP/GhlptQq/JHKSnVxaEn/uhlYwm+DGu3cE998=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:f3:cf:10:5a:8a:47:9c:5a:21:cc:d3:fb:d2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
        Validity
            Not Before: May 17 22:00:17 2024 GMT
            Not After : May 18 22:00:17 2024 GMT
        Subject: CN=d583991a4b8b80ce902da1d5ad46288cba14d592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:f6:12:97:08:70:59:58:52:f4:71:01:65:
                    c0:91:c5:70:d7:ba:ba:bd:2b:1c:54:de:83:bf:1d:
                    d4:ef:2a:29:99:53:d1:69:d6:da:17:3f:64:85:c0:
                    b7:ae:05:44:18:58:43:29:14:2d:7d:a3:96:a3:bb:
                    76:54:94:f3:25:d8:e0:df:88:43:d7:41:31:d5:df:
                    79:0d:54:f2:0b:32:a9:e3:82:a2:20:a8:91:32:58:
                    1b:7f:fe:cd:36:84:96:dc:db:af:a4:fd:6c:3e:df:
                    ce:3b:2b:b2:2a:42:4e:d6:30:0f:77:ba:30:b3:e0:
                    4c:85:17:d6:69:b1:38:97:5d:02:9a:09:da:cd:24:
                    c4:ef:2f:58:c1:9f:2f:41:74:e4:1e:ea:37:57:30:
                    aa:b2:aa:d9:52:9a:88:d7:01:95:57:94:fe:d5:32:
                    ab:06:ce:d2:87:26:47:fc:14:d2:05:2f:22:1e:39:
                    56:78:35:4b:9c:00:0a:53:7a:9a:d4:26:ec:cc:9e:
                    f2:a0:df:5d:c9:97:0c:d0:7a:33:bf:f1:73:9f:54:
                    76:bf:71:cd:29:14:be:b5:fc:9b:31:c7:ed:f1:9a:
                    d9:6f:05:18:78:30:c8:19:48:f1:66:44:cc:39:c1:
                    b2:b5:84:22:96:dc:8e:b0:8c:b0:38:38:d6:14:6c:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:83:99:1A:4B:8B:80:CE:90:2D:A1:D5:AD:46:28:8C:BA:14:D5:92
            X509v3 Authority Key Identifier:
                keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a9:22:cf:47:e4:c8:93:d8:c1:12:3a:34:a8:33:20:f9:e7:
         92:0c:4d:b1:43:2a:9d:f2:36:29:5d:70:e1:05:42:9d:e7:52:
         56:84:c8:7d:ff:ec:c1:78:7f:c8:3a:b9:ba:94:de:eb:93:1e:
         68:8b:14:c7:bf:bb:16:ca:af:29:93:1f:9c:47:9f:91:c6:17:
         d8:ac:2e:49:a7:b2:8a:af:d7:d3:2d:47:86:8c:54:85:a0:d0:
         7a:64:db:0d:cc:4e:43:88:b0:8d:8f:6e:e5:5c:f4:cf:54:36:
         55:55:f1:ed:19:14:20:6a:d6:72:bc:9a:97:ae:1a:81:f2:75:
         74:60:62:55:0a:f6:4c:5f:b3:37:96:de:fb:63:6d:19:60:24:
         d0:40:cd:ff:dc:23:94:c9:2b:e0:84:48:a2:2b:32:e9:0d:bc:
         6c:70:f3:c5:4d:b3:28:43:a9:b6:61:d4:a8:b5:a5:18:b2:66:
         47:8a:79:a4:2f:0a:fa:98:08:01:f2:2e:e5:40:89:5e:98:13:
         e4:7d:91:de:65:0b:c0:73:ee:02:51:6d:19:cb:9b:e3:de:3d:
         d3:ac:49:4f:77:01:1a:be:98:98:4c:c6:ff:bc:0a:98:72:c8:
         63:50:6e:d3:52:81:e7:cc:ad:a9:d1:94:2b:75:03:86:a7:c3:
         c8:ab:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:36:38 2024 by rpki-client on console-fra.rpki-client.org