Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File:                     jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier:          lL6jRkE7CjbEG+29T/VxzpjUFKOLS/T/rf3l/vMUpsY=
Subject key identifier:   18:A9:4A:09:E5:AE:8F:B1:9E:3F:43:14:77:E2:8B:E7:79:EE:59:3E
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer:       /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial:       018F866CA0A89250CD6032816401B288105B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number:          0D1A
Signing time:             Fri 17 May 2024 12:00:16 +0000
Manifest this update:     Fri 17 May 2024 12:00:16 +0000
Manifest next update:     Sat 18 May 2024 12:00:16 +0000
Files and hashes:         1: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: D6pBTKtrxqNjF1hJLbF4n1vTjLMFEJ8zDc7JQe0Pbl0=)
                          2: sL4aXJHvxyoKoJQl43SrZ8tUvj0.roa (hash: cUwC11AtC5URON0wuKpLkHQEC1E0/ekwRUbMQjhvvOI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:a0:a8:92:50:cd:60:32:81:64:01:b2:88:10:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
        Validity
            Not Before: May 17 12:00:16 2024 GMT
            Not After : May 18 12:00:16 2024 GMT
        Subject: CN=18a94a09e5ae8fb19e3f431477e28be779ee593e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:b2:2c:79:a5:06:79:1a:7a:73:f6:97:53:
                    07:03:cc:30:8e:6e:5d:00:73:b3:ad:c7:4e:61:20:
                    e8:f2:e2:16:d9:f8:00:8d:68:68:ef:24:6a:57:b1:
                    02:f2:3e:17:94:38:c8:a0:a5:37:28:96:d5:d4:bf:
                    b8:be:28:0e:59:e8:3a:de:92:8e:a6:33:23:db:88:
                    87:52:04:11:27:3b:dc:06:9a:03:86:f6:c0:08:87:
                    7b:e4:75:0d:11:7a:08:63:ed:5d:31:0e:e1:c4:1b:
                    64:3d:d8:61:ea:56:86:49:6f:b7:03:c9:39:5a:fd:
                    ed:1a:d1:8f:7e:29:9e:9e:66:9d:52:b8:31:02:ea:
                    1e:72:4c:ea:9f:b4:b5:84:e1:9d:65:59:95:e9:46:
                    94:97:9c:2f:9f:4b:ae:e3:d0:be:4c:5f:8b:0d:26:
                    cd:0a:84:03:12:13:28:51:f8:fe:09:a0:b0:5c:2d:
                    ec:dd:e2:5b:0e:fe:b5:d4:32:ec:4c:f6:93:3c:af:
                    26:7b:bf:7e:e7:d5:a1:db:e0:25:98:2d:1c:76:e7:
                    41:a2:69:10:f4:83:42:55:7b:e3:cf:00:d0:06:ab:
                    b9:7c:77:47:bf:fd:68:8f:14:e5:95:d6:e0:a2:4b:
                    88:c1:a4:d7:b7:20:8c:ef:66:49:a9:52:72:11:9b:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A9:4A:09:E5:AE:8F:B1:9E:3F:43:14:77:E2:8B:E7:79:EE:59:3E
            X509v3 Authority Key Identifier:
                keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:4d:ee:d4:9b:d1:93:aa:63:02:f9:50:d5:f8:5d:57:06:18:
         6e:51:de:72:21:6b:80:a2:a1:f1:10:e2:a6:a9:fb:e9:7b:ee:
         b1:4f:5a:83:17:0b:1c:b2:54:bd:8f:da:da:56:5d:3c:02:36:
         64:96:8c:fd:cc:0e:94:29:e8:d3:a2:d2:9a:27:8b:00:d3:0e:
         99:ff:e3:2f:a2:3a:ab:98:20:54:65:57:7b:ee:09:d5:df:32:
         d6:8c:84:2a:b0:9a:49:6f:2c:53:b4:8c:7c:e3:b7:fc:02:0a:
         9d:cc:c9:d9:91:5f:5a:e6:53:d2:3b:26:40:0b:ab:6f:3f:cd:
         11:46:c0:bd:58:b8:60:bd:a6:b2:46:29:51:60:26:79:98:8b:
         50:38:79:dc:51:b7:a6:a1:9d:9d:2b:7b:bf:00:fc:1b:f3:75:
         1e:f0:16:20:63:3e:f3:70:cf:13:1b:14:bd:86:c9:1e:e0:1e:
         60:72:f9:17:ca:8b:3c:4b:37:37:c5:50:18:05:40:63:f0:7c:
         7e:8c:38:83:9f:07:aa:a4:5b:7d:c3:ec:f6:d1:fe:33:c0:8a:
         b3:52:3e:e1:b7:44:d6:4e:9e:a1:c9:4a:fe:bd:9d:38:da:9d:
         fc:2b:b1:48:03:59:14:75:79:98:42:8d:67:71:d6:18:56:37:
         7e:d8:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:59:47 2024 by rpki-client on console-ams.rpki-client.org