Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File:                     jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier:          w+00nZMNR2avoot14L0DCO9PVT9On07ipH6mT4KozEM=
Subject key identifier:   3A:C3:DC:A5:73:5A:E5:A8:B4:F1:BD:85:35:2A:70:BC:1B:B3:51:87
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer:       /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial:       018F87ED00B0E052D9830A42DE82D1B075C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number:          061F
Signing time:             Fri 17 May 2024 19:00:07 +0000
Manifest this update:     Fri 17 May 2024 19:00:07 +0000
Manifest next update:     Sat 18 May 2024 19:00:07 +0000
Files and hashes:         1: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: YmnLmvOKGxxBMnnzPgzsZW1ZEdCxsY9fns0rDoCTjBI=)
                          2: jfwf3-7mRn8bblW2_CcxDv3lrsA.roa (hash: HeNc0scCM3oYjXEKiwdG/18R1n0dyCH8xnY/zGH0v6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:00:b0:e0:52:d9:83:0a:42:de:82:d1:b0:75:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
        Validity
            Not Before: May 17 19:00:07 2024 GMT
            Not After : May 18 19:00:07 2024 GMT
        Subject: CN=3ac3dca5735ae5a8b4f1bd85352a70bc1bb35187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:e8:01:65:bf:03:11:aa:42:30:04:ba:6a:
                    0f:5d:22:f3:1e:a2:c2:13:6e:d3:60:55:51:c4:8c:
                    53:b5:4c:3b:6b:3d:07:26:0d:ae:2e:58:56:11:89:
                    1b:d1:ff:8a:96:9c:8c:cc:f6:9a:e1:ac:9b:04:1d:
                    ff:8b:c4:b4:30:a7:6a:6c:14:d7:42:0a:b6:1d:25:
                    ca:55:60:2a:41:e2:6a:c8:26:db:04:32:43:a2:1c:
                    39:4f:8a:7d:c0:ee:6f:0a:07:d7:ac:16:d8:a5:dd:
                    80:a3:9f:58:49:90:2a:2f:ab:c9:8b:4e:e7:cc:70:
                    cf:e0:04:14:02:e4:e5:86:31:22:2a:d3:d9:ba:88:
                    4a:3b:80:2f:e8:b2:5e:a1:ec:c4:7e:18:12:00:19:
                    6c:1e:fa:9c:cd:29:4a:ea:f0:ce:c0:2f:4d:73:8b:
                    79:84:30:7f:90:32:6b:34:90:aa:4c:30:cd:a2:33:
                    2a:cf:66:d3:49:26:e3:b1:de:b0:a6:9c:47:60:e3:
                    3d:10:96:8d:cf:a1:b2:c6:3f:23:8e:33:c8:ed:d4:
                    35:6c:15:4a:4a:f7:bc:9f:8c:1b:e1:29:0f:a3:ef:
                    15:f9:69:3b:87:95:ef:3f:bc:5d:05:d6:73:b6:14:
                    8b:82:bd:20:ba:a8:6e:74:60:06:28:b1:b2:49:63:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C3:DC:A5:73:5A:E5:A8:B4:F1:BD:85:35:2A:70:BC:1B:B3:51:87
            X509v3 Authority Key Identifier:
                keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1b:7b:86:02:7e:99:ce:65:a0:16:d2:67:a1:77:23:65:b0:
         f5:66:62:5a:a3:ac:9f:ea:31:65:83:0c:45:62:02:57:87:20:
         33:8e:65:1e:82:03:26:56:59:f5:36:96:30:78:49:51:e8:1a:
         1b:21:63:d3:97:a7:eb:77:59:43:34:0d:5e:ff:4d:64:05:6f:
         44:ff:63:ec:1a:af:5f:25:c8:d1:df:05:0e:f7:9e:e7:f2:08:
         c0:b6:50:65:96:71:73:a7:db:fc:06:8b:ab:30:68:0a:a1:7e:
         26:e6:68:ed:50:e7:7f:73:55:9d:d0:ca:80:36:27:af:f0:3f:
         09:05:cd:c5:4a:14:a4:21:75:f4:00:05:a6:d8:fe:44:ca:2c:
         2b:3b:fe:e3:4b:0d:02:72:05:a2:91:d0:ac:88:aa:aa:2e:c9:
         0d:5a:4b:5f:0f:f8:1b:c2:a8:8c:86:67:ed:0d:d5:a6:16:cd:
         53:a5:5e:02:b7:a5:dd:64:65:7e:31:48:bc:65:87:4c:18:7f:
         d7:05:30:15:6b:94:2e:cf:c4:d3:51:cf:56:2c:35:0d:41:38:
         12:dc:5b:da:68:3a:fc:eb:9c:92:81:2b:2a:65:99:23:1d:53:
         a3:db:4c:f5:84:6d:6d:38:70:fe:33:7d:41:e8:37:51:ef:35:
         77:1b:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:38 2024 by rpki-client on console-ams.rpki-client.org