Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File:                     jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier:          KyjUnsEoJb78dzaGeLOWpnPV5TKupuyC5c4AGsC928E=
Subject key identifier:   49:A9:84:EF:30:33:6B:CB:38:B4:CA:64:C6:64:51:87:99:B5:F3:F6
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer:       /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial:       019238B88257E62C01A5A2953FECA479A4D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number:          0B9C
Signing time:             Sat 28 Sep 2024 13:01:08 +0000
Manifest this update:     Sat 28 Sep 2024 13:01:08 +0000
Manifest next update:     Sun 29 Sep 2024 13:01:08 +0000
Files and hashes:         1: fKmf-IRn-RieML2Df_fSoPqK0XA.roa (hash: a3ciufMxqjS5RuFYVFmQC6v890mDm7Xx0FW1HcI0PTE=)
                          2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: hMZU05IUQl0yd6PcgfjNjTndQxx7B4ol0kPsZvTyhpk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:b8:82:57:e6:2c:01:a5:a2:95:3f:ec:a4:79:a4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
        Validity
            Not Before: Sep 28 13:01:08 2024 GMT
            Not After : Sep 29 13:01:08 2024 GMT
        Subject: CN=49a984ef30336bcb38b4ca64c664518799b5f3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:18:b6:36:d2:21:72:58:64:81:8d:97:54:
                    d8:be:de:6f:22:68:a5:b4:19:05:4d:f5:e5:58:b6:
                    05:3c:6c:37:93:00:c3:25:31:fd:c8:b4:53:37:77:
                    0d:88:f7:83:30:b5:ee:b0:89:8e:d3:ed:52:19:c2:
                    f8:e9:ad:83:b8:07:28:8f:be:60:0b:84:2a:8d:bf:
                    55:34:73:c5:80:3c:0e:76:a4:76:7c:cf:d6:11:21:
                    af:5e:07:43:e0:b8:9f:71:0b:d0:f3:5d:95:06:17:
                    0a:77:95:a6:e3:53:f6:01:91:7a:e9:83:07:6e:4c:
                    85:6a:88:ca:66:88:e8:ac:ae:1b:fd:34:68:78:38:
                    06:bc:38:d6:6a:b7:77:20:2d:de:a6:4a:64:77:9b:
                    25:36:4a:6a:a7:2f:07:74:f4:4f:80:fb:f0:d7:3b:
                    ec:b0:29:db:37:fa:5a:cb:77:ca:28:21:a3:97:6f:
                    ed:85:cf:e3:0e:5e:5e:04:f7:97:a4:be:76:94:f2:
                    28:37:81:1f:74:59:e5:29:3e:65:7d:e5:f2:b5:7a:
                    72:ef:65:5d:fe:47:b9:70:f8:5e:2a:1f:7d:07:58:
                    90:4b:80:e3:89:09:ed:9c:3f:4f:56:5e:37:53:2f:
                    7f:47:47:1e:83:20:a2:21:71:24:83:1d:a0:95:58:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A9:84:EF:30:33:6B:CB:38:B4:CA:64:C6:64:51:87:99:B5:F3:F6
            X509v3 Authority Key Identifier:
                keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0d:68:dc:e8:6d:28:a4:88:fa:a4:1c:7e:65:40:2e:eb:cc:
         3e:9d:6c:fd:16:28:52:a7:f4:1d:70:de:02:48:8a:cc:b1:a4:
         cf:99:42:ec:83:ac:cb:46:9c:0a:63:a1:30:ec:ef:54:5f:fb:
         a0:68:4a:a0:51:f2:93:44:63:ec:33:bf:e8:97:77:91:b8:21:
         b7:b7:04:17:84:33:14:2e:e5:74:9a:a5:8e:2b:39:d6:33:ee:
         41:57:86:d2:6b:79:27:14:aa:47:f0:5e:a7:f5:26:77:be:42:
         f5:9f:80:8a:6e:64:fa:59:b8:63:75:a0:0c:91:cf:44:18:41:
         ad:98:0d:44:0d:7f:91:ac:de:e5:ab:e0:7b:71:47:12:9c:d1:
         34:7c:e6:e9:88:2e:53:70:96:bd:77:18:fe:0c:55:66:52:cf:
         74:53:48:d3:66:af:5b:91:81:c2:4c:4d:b8:7d:1f:49:56:01:
         ee:dd:70:c6:db:75:3d:3a:88:fb:6a:42:67:59:26:a7:f1:de:
         2f:f3:bb:78:af:26:6a:44:22:57:00:c4:5a:60:6c:cb:95:93:
         ab:9a:5f:c4:59:3e:08:72:f0:5a:4f:bf:e1:46:b4:7d:36:07:
         4e:e7:21:cf:90:13:e6:13:7a:13:15:20:8c:f1:a2:87:1b:1f:
         c3:97:eb:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI4uIJX5iwBpaKVP+ykeaTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx
YzY2OTMwHhcNMjQwOTI4MTMwMTA4WhcNMjQwOTI5MTMwMTA4WjAzMTEwLwYDVQQD
Eyg0OWE5ODRlZjMwMzM2YmNiMzhiNGNhNjRjNjY0NTE4Nzk5YjVmM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ8YtjbSIXJYZIGNl1TYvt5vImil
tBkFTfXlWLYFPGw3kwDDJTH9yLRTN3cNiPeDMLXusImO0+1SGcL46a2DuAcoj75g
C4Qqjb9VNHPFgDwOdqR2fM/WESGvXgdD4LifcQvQ812VBhcKd5Wm41P2AZF66YMH
bkyFaojKZojorK4b/TRoeDgGvDjWard3IC3epkpkd5slNkpqpy8HdPRPgPvw1zvs
sCnbN/pay3fKKCGjl2/thc/jDl5eBPeXpL52lPIoN4EfdFnlKT5lfeXytXpy72Vd
/ke5cPheKh99B1iQS4DjiQntnD9PVl43Uy9/R0cegyCiIXEkgx2glVi23wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmphO8wM2vLOLTKZMZkUYeZtfP2MB8GA1UdIwQY
MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt
Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4
LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIA1o3Oht
KKSI+qQcfmVALuvMPp1s/RYoUqf0HXDeAkiKzLGkz5lC7IOsy0acCmOhMOzvVF/7
oGhKoFHyk0Rj7DO/6Jd3kbght7cEF4QzFC7ldJqljis51jPuQVeG0mt5JxSqR/Be
p/Umd75C9Z+Aim5k+lm4Y3WgDJHPRBhBrZgNRA1/kaze5avge3FHEpzRNHzm6Ygu
U3CWvXcY/gxVZlLPdFNI02avW5GBwkxNuH0fSVYB7t1wxtt1PTqI+2pCZ1kmp/He
L/O7eK8makQiVwDEWmBsy5WTq5pfxFk+CHLwWk+/4Ua0fTYHTuchz5AT5hN6ExUg
jPGihxsfw5frFA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 15:58:08 2024 by rpki-client on console-fra.rpki-client.org