Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File:                     jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier:          lVe7GjWgyY0wFmHDqA2tR5kbODC0MxdQDn+a2+jMbD4=
Subject key identifier:   28:46:76:61:4D:AA:69:6A:65:B8:2F:1C:0B:E0:83:57:A2:E6:17:6C
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer:       /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial:       018F87B66B9707CBDEBB90D937C755C7C807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 18:00:30 +0000
Manifest this update:     Fri 17 May 2024 18:00:30 +0000
Manifest next update:     Sat 18 May 2024 18:00:30 +0000
Files and hashes:         1: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: IbwbodkkE2EV4oE6zZ/9imSkKbouJPk8r1YUm25gZCY=)
                          2: q0JD4AgY0pYgCLJpejJKd3LwMfI.roa (hash: fXlO84H24+0Y2yVDrGeTmakBYz6/hsj1+kWFe5GlK6w=)
                          3: rD8IMEtkampQia3kEIfavkqSgdk.roa (hash: o+K+8vppDhUbyLbQcc2S9Xe0Qluu475AM+qx62fVdZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6b:97:07:cb:de:bb:90:d9:37:c7:55:c7:c8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
        Validity
            Not Before: May 17 18:00:30 2024 GMT
            Not After : May 18 18:00:30 2024 GMT
        Subject: CN=284676614daa696a65b82f1c0be08357a2e6176c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:86:5a:92:76:76:88:c8:08:2e:32:dc:f9:54:
                    50:13:cc:4d:bf:a3:13:f1:fa:93:64:6e:95:75:16:
                    fe:80:fa:21:51:53:21:71:ec:71:e3:fa:74:d1:31:
                    20:66:fe:52:e3:ad:6c:00:78:33:b1:d8:4b:19:ec:
                    94:1f:da:70:bc:ca:0d:82:2f:0e:4c:fc:9f:a2:39:
                    3f:8e:1d:15:d2:1a:87:b3:74:e2:e6:64:fd:17:a3:
                    be:9c:ce:87:56:f5:1c:b0:4b:ea:e3:9b:ed:d9:10:
                    a9:7d:dd:3b:8b:a3:7d:de:10:cb:01:4c:79:cc:62:
                    15:b1:af:6c:28:8c:41:8a:4f:5f:5a:f7:6c:62:a9:
                    82:e8:c4:2b:83:06:bd:71:2e:89:3a:56:51:91:19:
                    85:fc:79:6c:06:f3:fc:c2:3e:70:da:79:7f:d7:01:
                    1e:36:f1:aa:33:ed:ce:82:c9:9d:0b:89:1c:0c:8c:
                    89:d1:4d:c9:52:57:30:a4:92:a3:23:e1:02:16:26:
                    43:0d:86:93:d9:6c:2f:d4:e9:c6:f9:19:4f:4c:77:
                    99:82:97:df:82:5f:3b:c2:23:fd:db:ea:7c:ef:81:
                    da:16:58:c6:72:ca:da:bc:16:dc:e8:18:58:f1:05:
                    d6:57:8d:68:f6:68:b4:68:19:59:19:6e:15:25:ad:
                    06:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:46:76:61:4D:AA:69:6A:65:B8:2F:1C:0B:E0:83:57:A2:E6:17:6C
            X509v3 Authority Key Identifier:
                keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:80:1c:17:40:3f:25:9d:82:3e:06:dc:e6:44:61:bd:59:6f:
         8b:e0:ce:ae:ed:bc:e2:5d:6a:89:aa:a3:47:81:fd:d7:fc:1d:
         02:f0:c0:3c:ea:83:e6:af:64:8c:f5:78:59:f6:27:6a:75:a9:
         ec:cf:1f:32:10:8a:2f:d5:5c:bb:ec:96:77:94:51:32:86:cd:
         e7:a8:58:4a:e0:87:ed:56:f2:b5:91:5b:5b:2c:57:78:d2:56:
         4f:35:ea:23:43:fe:b5:48:17:6b:2f:8b:55:a9:26:38:f6:eb:
         8a:bb:c0:39:f8:e8:a7:0f:0c:f7:83:a4:20:1a:70:d1:ae:d6:
         46:e7:eb:df:a7:5d:d7:5a:0f:33:53:f9:c2:93:a0:b4:4e:a8:
         4f:97:c0:30:37:8c:2e:9e:02:29:ad:e2:99:bd:cc:5f:ab:6b:
         b5:56:a2:97:4f:fa:1b:45:72:05:f5:11:9c:6f:2f:54:9e:b3:
         67:72:4c:6b:db:f6:b9:6b:73:d8:7f:31:c6:3f:f4:99:9e:b4:
         30:c1:51:31:63:97:72:4b:28:39:33:8d:41:fe:c4:aa:a2:64:
         4e:e3:f2:a6:a3:1e:ca:81:c3:4c:34:30:92:6b:b7:95:2b:d7:
         77:36:a5:77:e4:74:b0:32:38:4b:c7:d7:b9:38:48:f2:67:3d:
         6c:ca:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----