Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File:                     CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier:          bz2uTgbN2dwqTqAfuxPjH0jbtHpXajgi+bRE7HOv7gU=
Subject key identifier:   43:89:7B:48:22:23:B0:17:A6:F2:3C:42:56:6E:82:D4:CD:F4:DE:95
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer:       /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial:       018F381C7D521B7D25EED959582BB3DA9E32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number:          114D
Signing time:             Thu 02 May 2024 07:02:22 +0000
Manifest this update:     Thu 02 May 2024 07:02:22 +0000
Manifest next update:     Fri 03 May 2024 07:02:22 +0000
Files and hashes:         1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 13A/WQNRi5wZ9TmdY6LRT0006jxeMFJxD7bIlJC9+UU=)
                          2: yJaTd3auacSUdgRFCqoOvuQw5p8.roa (hash: sIFQu/AXPg680FikaxA1Ly8IKILv9WECEYptQJA9K/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:7d:52:1b:7d:25:ee:d9:59:58:2b:b3:da:9e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
        Validity
            Not Before: May  2 07:02:22 2024 GMT
            Not After : May  3 07:02:22 2024 GMT
        Subject: CN=43897b482223b017a6f23c42566e82d4cdf4de95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:66:9f:0e:ff:f7:d5:04:cb:95:9c:7f:27:
                    8b:01:76:9b:eb:23:ac:30:16:65:7b:e3:c3:c6:76:
                    e9:0e:0f:a0:a0:4b:bb:88:75:e4:b7:1a:fb:28:8b:
                    0c:ba:74:9e:d5:ef:cb:ba:2f:c7:eb:1a:e4:33:09:
                    37:95:4b:80:27:22:11:49:c8:31:79:c0:b8:ff:25:
                    a9:9a:7c:0e:77:35:7e:a0:99:3b:d3:e7:66:9b:55:
                    c6:57:bf:42:0b:45:7d:ff:e7:58:9f:1d:8e:ae:05:
                    19:44:c9:e7:63:a6:ee:de:a9:1f:33:7c:6d:95:9e:
                    68:6f:3f:2d:ae:0a:68:8a:95:39:77:45:c7:7b:88:
                    7e:c5:9d:70:ed:84:d6:3d:3c:c8:1e:f9:e4:35:ba:
                    0d:20:78:df:89:51:ed:b4:bb:20:37:8f:b6:bf:37:
                    e5:49:b7:86:39:81:23:77:ef:80:cb:20:46:7c:1f:
                    95:e7:30:64:fd:9f:44:a8:86:35:6c:2f:ef:4e:0c:
                    92:42:46:9f:d3:df:ed:8a:d2:47:d9:b7:20:64:2d:
                    0c:a3:a6:b1:00:f2:40:4b:f2:49:f4:fb:f9:d2:6b:
                    22:34:9a:a9:ae:9a:3b:33:04:9a:b3:4d:21:18:9c:
                    9d:c5:84:b5:87:04:72:2a:19:ee:62:20:95:9b:9c:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:7B:48:22:23:B0:17:A6:F2:3C:42:56:6E:82:D4:CD:F4:DE:95
            X509v3 Authority Key Identifier:
                keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d3:20:97:53:90:66:dd:bb:12:1f:92:9f:33:87:cd:13:16:
         78:5b:b1:56:82:8e:c1:14:bf:47:f4:b7:73:70:f9:78:c7:33:
         c3:9f:d6:b1:e8:50:e3:7d:03:e7:13:97:e4:f6:91:21:15:c1:
         7b:ff:d2:0b:f0:a0:72:25:b2:4c:1e:81:18:fa:5a:d7:6f:b2:
         74:48:31:70:2c:d8:db:85:94:59:63:14:92:9c:78:82:7a:d2:
         b1:b4:cd:fd:a6:5b:27:c1:7c:ac:54:53:aa:2a:93:19:9a:e5:
         94:a5:40:4d:91:d6:4d:f8:47:7a:f4:30:fc:14:4b:66:47:1a:
         d5:65:90:51:86:ad:dc:af:88:0a:97:a7:29:00:30:82:0d:4a:
         b5:3f:03:81:ae:ae:28:a8:0e:94:7c:59:ec:e2:12:dd:b7:f5:
         48:a9:7e:a7:1f:4d:88:4d:5e:c2:3e:b0:14:b3:7d:c6:47:a0:
         ad:f5:18:02:ec:1f:fb:1c:f5:1a:32:50:ae:c6:ae:6a:a8:fa:
         48:60:86:e8:cc:49:4f:26:7c:8a:55:95:3c:f4:12:33:3c:9b:
         49:96:0f:7d:c4:6d:88:77:c6:a5:4f:ea:61:64:77:9e:c8:ec:
         59:a5:91:98:8e:30:aa:84:11:72:b0:16:e9:88:82:a7:5b:c7:
         4b:74:fd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:12:48 2024 by rpki-client on console-ams.rpki-client.org