Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
File:                     jqzH87IYxJLYjb68nNy5otLTDtE.mft (raw, json)
Hash identifier:          c//90ff7qmA35dxiSTlf9Cl4tU/ekTIwQ6nKcxqUpvA=
Subject key identifier:   86:9B:00:B8:F9:0B:B4:1E:13:E5:35:79:74:F5:FC:F5:52:E0:09:13
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Certificate issuer:       /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial:       018F871159C34BF2B39F7FC91BE0A595E6C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 15:00:12 +0000
Manifest this update:     Fri 17 May 2024 15:00:12 +0000
Manifest next update:     Sat 18 May 2024 15:00:12 +0000
Files and hashes:         1: jqzH87IYxJLYjb68nNy5otLTDtE.crl (hash: R/V3zr7mHQs110aDjiw8dZssReSYArVaycmEKU2FVwY=)
                          2: sLKkxrWx3Gsg1QNW1nFohkkRCJ0.roa (hash: RZDr/DH89uogMLYohkV8dovcyLTkQRtwQukPOo0oZwo=)
                          3: vjrVLeME8THQqheahprmhdNXln8.roa (hash: e1Q9sYsk6/97LtU3SMpA73hOpymkDwClAGoLB/9xWqQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:59:c3:4b:f2:b3:9f:7f:c9:1b:e0:a5:95:e6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
        Validity
            Not Before: May 17 15:00:12 2024 GMT
            Not After : May 18 15:00:12 2024 GMT
        Subject: CN=869b00b8f90bb41e13e5357974f5fcf552e00913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:16:b8:71:d2:31:4f:a5:9b:a3:86:26:c5:
                    c6:8d:64:74:34:14:11:ab:ca:37:0c:f6:08:6a:94:
                    91:4b:bd:5f:c3:6a:9d:54:7d:ed:bf:5c:11:68:c7:
                    af:ec:d4:62:75:d1:c2:23:56:b4:8e:44:31:7d:70:
                    1f:02:95:b8:83:9d:07:81:fc:1a:29:17:c4:5a:55:
                    34:d7:28:fd:c5:f3:fd:06:a8:f4:52:8c:4d:ad:34:
                    b5:5a:e7:d1:2f:7f:64:42:ea:60:4d:c5:be:f7:bf:
                    f6:53:6c:61:e6:7a:ca:14:58:e1:6a:26:15:13:ed:
                    19:c3:3d:15:5d:10:cd:36:cc:b8:8b:6c:7f:fe:e1:
                    0a:ae:1c:b5:01:f7:f3:d1:4f:9a:20:b2:fa:f6:ab:
                    d0:69:b7:68:1f:d7:5c:e3:fa:5b:6c:9c:b9:89:98:
                    1c:98:13:6b:23:96:fc:c6:64:0d:a6:5c:2d:f9:76:
                    15:dd:9c:23:a3:b5:4a:ad:5a:fd:49:34:e5:5e:84:
                    5c:6b:47:0c:f2:28:96:ee:f4:a2:1e:45:31:4a:9b:
                    ae:19:75:8e:53:25:15:2b:7e:fc:a7:05:c7:2d:be:
                    04:11:ef:71:d1:77:73:24:e3:3f:51:fc:da:9a:fe:
                    4d:f0:27:84:48:8e:c4:cb:69:2b:29:ee:93:ad:28:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9B:00:B8:F9:0B:B4:1E:13:E5:35:79:74:F5:FC:F5:52:E0:09:13
            X509v3 Authority Key Identifier:
                keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:18:5a:96:3b:60:e1:91:62:c5:29:18:b5:36:f4:de:58:
         c1:3a:96:7c:4a:1d:2b:c3:52:19:b2:28:09:2c:1e:a8:fd:f6:
         f6:8c:d1:53:b2:76:a8:ce:ee:9f:30:7a:e9:e0:03:41:40:40:
         77:e5:36:ea:f2:d4:71:d1:10:39:6b:9e:81:56:dc:9c:28:f9:
         69:48:3d:f9:88:8b:6a:c7:48:c6:aa:ef:de:31:d2:2f:69:73:
         24:65:2d:df:58:22:60:ec:20:40:cc:96:06:17:10:92:47:93:
         53:ad:e6:c0:cb:30:54:0f:21:42:5a:33:82:14:c8:9d:6e:7d:
         7e:0b:d3:68:90:a3:a0:fc:04:7f:48:95:04:60:e9:70:02:e7:
         8b:cd:7a:d1:02:49:88:37:b1:fd:30:83:01:f7:81:11:08:bf:
         b8:84:31:cd:7f:eb:94:01:fd:4b:04:f5:37:7c:82:49:81:55:
         81:ae:f9:3b:ad:b2:08:a0:4c:4e:01:35:1e:01:39:9e:b4:d8:
         03:46:76:58:93:73:70:e6:c0:b1:b6:92:53:da:76:24:0c:8c:
         cd:6a:2a:5a:25:7c:35:e9:a7:48:7b:cd:88:29:9c:63:ac:28:
         94:e8:ce:0e:f1:58:90:12:10:4a:73:42:1b:c7:ca:fa:e3:88:
         7b:fb:53:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:24:59 2024 by rpki-client on console-fra.rpki-client.org