Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File:                     J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier:          CW9sY1IKjmpo8kUZtPA6orOmijq/P3cUUjFgslyR09w=
Subject key identifier:   00:DA:BC:10:72:8C:53:E1:D7:8F:89:11:D7:0A:13:88:CE:C5:7F:52
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer:       /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial:       018F874A9107D99D1B7AA67FB8C582B0CF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number:          0BDC
Signing time:             Fri 17 May 2024 16:02:41 +0000
Manifest this update:     Fri 17 May 2024 16:02:41 +0000
Manifest next update:     Sat 18 May 2024 16:02:41 +0000
Files and hashes:         1: 1-PCSSvoZ5gUjrr6cIcKCJMpw59c.roa (hash: 6m6hnzoYF0ZzftZwHSSeILoWcOZf0xX+tWNtizpS68E=)
                          2: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: T2RfyeNtFlBqNQwqoraYeCCrceYTuzM1T7a9Q7HMfuA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:91:07:d9:9d:1b:7a:a6:7f:b8:c5:82:b0:cf:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
        Validity
            Not Before: May 17 16:02:41 2024 GMT
            Not After : May 18 16:02:41 2024 GMT
        Subject: CN=00dabc10728c53e1d78f8911d70a1388cec57f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:ad:7f:6a:a8:29:79:c6:1f:33:83:7a:77:
                    db:bc:67:2d:a2:42:c0:ff:bd:92:cc:bf:a6:33:c5:
                    eb:3d:be:33:11:30:a8:d5:e0:db:dc:cd:f6:67:33:
                    34:3a:09:1b:7c:92:c7:ee:58:b9:dc:9c:e2:b7:10:
                    0e:6c:85:38:d1:8a:ad:a3:65:25:d1:ea:cf:75:dc:
                    b6:a1:ca:b9:f5:05:7d:93:1f:fc:a9:b8:52:a6:93:
                    b2:83:33:54:1c:74:df:89:8c:ed:a7:fc:e8:36:1e:
                    38:4a:07:b3:d5:dc:79:36:b1:a8:6f:32:51:6b:35:
                    34:fc:d7:94:eb:7c:d1:74:f6:54:17:84:a8:f7:95:
                    2b:4d:c8:d0:65:8d:ec:80:09:e6:4c:4b:1c:6a:9d:
                    52:cc:71:3f:83:f5:be:b4:b2:30:3d:a0:8b:d9:8d:
                    5c:9f:59:0f:b8:64:49:67:f8:25:30:c7:31:f2:2d:
                    cb:98:a8:7f:e7:ef:b4:dc:75:db:c2:cf:97:52:27:
                    df:5a:2e:27:03:bc:81:de:28:fe:cc:69:0e:6d:b3:
                    45:64:b5:ae:e2:f9:a6:9e:1f:22:3c:82:41:27:a5:
                    76:ca:a3:8b:b9:03:48:57:74:27:ed:f3:37:ee:5d:
                    43:92:0e:ce:82:dd:9c:5a:40:15:9b:c2:2b:9a:0c:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DA:BC:10:72:8C:53:E1:D7:8F:89:11:D7:0A:13:88:CE:C5:7F:52
            X509v3 Authority Key Identifier:
                keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1c:80:6d:ee:43:a7:df:95:70:7f:2e:74:2a:ad:72:50:6e:
         8a:5e:be:a5:d7:4f:f8:e0:5f:69:d2:70:5e:91:71:84:98:9b:
         c6:53:b4:e3:07:86:2e:25:84:34:f2:92:23:f1:d0:cb:c3:88:
         0a:e7:e6:bc:93:56:14:ce:28:91:8e:fb:3e:9b:c1:a1:39:48:
         ab:36:2f:b5:20:04:c2:fc:ac:ed:3b:ef:3c:9d:79:bc:58:10:
         8a:cd:a1:c6:32:5c:8c:77:7c:df:f7:59:65:37:d1:90:ab:43:
         b8:65:46:ef:60:ae:f5:6d:03:ca:99:42:5f:79:50:dd:35:94:
         9b:f0:b5:70:b6:98:cf:c4:79:03:82:e9:9a:94:87:c3:11:6d:
         f5:19:ba:b5:84:d7:9f:a2:c6:26:83:8b:5b:63:d0:c4:29:97:
         4a:3a:a0:fd:b0:a0:56:0b:73:16:21:bd:1f:7e:c8:a0:67:81:
         4a:d7:7e:cd:b7:d0:b5:75:45:ef:28:df:ea:0c:40:21:0f:68:
         d8:ae:dd:cb:47:36:30:9f:61:3a:17:f3:7f:1c:0e:63:cc:4c:
         21:c0:aa:64:3e:aa:07:c4:a3:da:3b:5d:30:95:ee:70:dd:70:
         68:78:a1:03:df:ac:c9:d2:93:fb:98:8e:d7:33:2b:71:fa:b7:
         94:19:87:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:58:20 2024 by rpki-client on console-ams.rpki-client.org