Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
File:                     jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft (raw, json)
Hash identifier:          fRIvR16R2lmNhXiDQcc9HT+drc5svvY+eMWyOZ4b5dA=
Subject key identifier:   B6:D3:D7:48:FA:AF:A7:9E:49:7A:B5:9D:7F:D5:16:C1:21:FA:7A:E1
Authority key identifier: 8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
Certificate issuer:       /CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Certificate serial:       018F87EDBF8ABEE77E8077DBF54FF1E97ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
Manifest number:          02E1
Signing time:             Fri 17 May 2024 19:00:56 +0000
Manifest this update:     Fri 17 May 2024 19:00:56 +0000
Manifest next update:     Sat 18 May 2024 19:00:56 +0000
Files and hashes:         1: jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl (hash: X8kflzBHRK2nTNa8vg+GQbeyunj0SkVfv34oa2a+pPE=)
                          2: rBFHy0ABSZlGMVMfAMJn6_-WDuQ.roa (hash: cawsq2zLEk5dmGhTuEf+V6Nf80QGUzA7FnYPoYhFqK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:bf:8a:be:e7:7e:80:77:db:f5:4f:f1:e9:7e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
        Validity
            Not Before: May 17 19:00:56 2024 GMT
            Not After : May 18 19:00:56 2024 GMT
        Subject: CN=b6d3d748faafa79e497ab59d7fd516c121fa7ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:6c:e3:87:3f:8d:25:30:03:ca:f5:37:72:
                    fc:7b:21:1a:0b:ee:8d:6f:e8:57:de:4d:df:83:86:
                    c9:1a:33:a5:79:9d:14:a2:b4:a6:4c:09:b0:8f:4c:
                    db:6e:c1:9d:53:01:cd:b1:f0:58:b3:71:c3:cc:a7:
                    27:f0:cb:88:95:66:a9:5f:aa:56:93:d8:30:72:15:
                    fd:60:1d:46:ea:fc:8b:5a:5c:4f:b5:c9:1c:39:fd:
                    ad:d9:d9:d1:dd:cf:f5:f7:2b:a2:11:28:69:3d:06:
                    eb:e7:8f:dc:d1:5f:2e:27:22:75:f0:f3:3d:60:3f:
                    d3:5c:6f:4a:36:e7:38:07:c7:56:63:2b:25:89:f7:
                    ec:87:ec:c3:b1:4f:4e:97:77:a8:6d:50:a7:62:04:
                    60:c7:1e:0c:93:ad:ab:4a:48:a0:91:40:c7:6e:b6:
                    f8:8e:91:de:d5:e6:9e:a8:ea:66:54:36:67:19:05:
                    e8:42:fc:cc:b8:a1:80:b7:dc:88:43:da:c3:32:58:
                    d0:66:16:4b:3c:e6:ec:b5:61:4f:16:71:5b:66:e4:
                    16:2d:f3:55:50:c3:09:80:70:4b:83:17:fb:75:89:
                    14:e2:68:78:76:0b:bb:b7:fd:44:62:f6:c8:87:cd:
                    8a:6b:72:be:14:59:25:3c:23:60:a9:39:28:4b:37:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D3:D7:48:FA:AF:A7:9E:49:7A:B5:9D:7F:D5:16:C1:21:FA:7A:E1
            X509v3 Authority Key Identifier:
                keyid:8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:b2:9e:e3:9b:b1:bd:d4:8f:6b:d2:5b:9f:0c:f1:e7:74:
         74:7a:35:22:49:57:39:ea:5c:07:52:7e:2a:46:bd:86:c6:90:
         de:a2:2a:b8:58:d9:5f:50:6b:4f:4c:d3:89:20:cc:77:aa:86:
         fa:e7:4c:92:30:49:e9:dc:6a:24:af:c0:94:ff:8a:16:76:3c:
         f0:e7:2f:cc:2f:ff:eb:91:00:4f:d1:0a:d7:ca:e9:8d:f8:9d:
         36:be:72:d7:1b:d6:f7:f3:1f:01:1c:98:0b:29:72:b0:65:fc:
         fe:74:98:67:5c:80:60:10:e3:c6:63:bc:d3:c9:83:32:d5:8f:
         42:3d:a7:41:6c:ee:f6:c0:aa:a4:05:a8:b2:b3:02:26:9f:7a:
         f9:a4:17:c1:93:cb:5e:73:7f:e5:b2:41:c5:76:0d:35:44:0d:
         e5:3f:8a:7a:59:bb:17:e7:c5:a0:44:66:bf:fe:b8:e8:38:02:
         b4:7f:c7:6f:f2:c5:5c:b0:21:b7:1a:4c:36:88:80:ad:bb:b5:
         83:09:64:b3:8f:5d:63:44:11:45:0e:7d:59:7b:1f:98:1a:fc:
         0f:37:e9:85:f3:4b:00:03:8b:ee:22:9e:9c:7f:96:de:77:cb:
         3b:85:7a:49:27:e9:1c:6b:3c:49:f6:0e:b4:de:e8:f8:e1:13:
         68:87:e8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:27 2024 by rpki-client on console-ams.rpki-client.org