Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File:                     CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier:          0qQpJN22kpx16LR2N5/O2H2cgVfxiY2POeKpe27DOvM=
Subject key identifier:   78:33:10:0E:A9:29:82:50:B5:8D:0C:0A:88:4D:94:FD:C4:46:01:2E
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer:       /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial:       018F1F6D9EA9C15666FD54E4BE5E119E39F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number:          0E46
Signing time:             Sat 27 Apr 2024 12:00:28 +0000
Manifest this update:     Sat 27 Apr 2024 12:00:28 +0000
Manifest next update:     Sun 28 Apr 2024 12:00:28 +0000
Files and hashes:         1: 4HJ8wkh3M0vvADEC4uLeyKywtJo.roa (hash: CrX3Dn7CuDJlLweBZymw4s4JuDcyiYc5su63NcT0yCw=)
                          2: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: Wa0EkvwT1/9sGhf+oHQwwHo85mUsJ6kwNX7E2zPDIZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:6d:9e:a9:c1:56:66:fd:54:e4:be:5e:11:9e:39:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
        Validity
            Not Before: Apr 27 12:00:28 2024 GMT
            Not After : Apr 28 12:00:28 2024 GMT
        Subject: CN=7833100ea9298250b58d0c0a884d94fdc446012e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:5c:1f:72:b7:ef:7b:90:b4:11:16:14:e1:
                    06:4c:f9:e6:39:fe:83:d0:23:63:84:a6:65:58:f2:
                    0b:16:66:d2:98:bd:62:e3:53:e6:9e:b0:51:29:1d:
                    5e:ae:a7:71:53:1b:07:5f:5d:ed:89:a1:8e:a9:92:
                    1a:38:9f:24:2a:4b:15:b6:ce:cd:f3:92:1f:64:be:
                    bf:25:d3:d4:54:da:96:8f:f3:29:d8:b5:82:a8:47:
                    47:c3:0a:3f:36:64:94:6d:ba:6b:9e:2a:eb:76:e4:
                    84:bb:25:5f:16:34:7b:f8:04:2a:e4:e0:19:c1:b1:
                    bd:7c:af:68:e9:65:98:0a:97:48:9b:ed:e2:cb:a0:
                    c6:58:45:aa:b5:52:f8:59:c9:29:71:ff:7f:d2:22:
                    22:a0:23:23:be:73:b6:63:65:3c:f5:f1:83:58:48:
                    dd:cb:0b:5c:53:e1:d9:a1:a4:b5:a1:73:e1:4d:75:
                    2e:99:0c:f8:2a:87:97:b5:2b:32:e6:01:4c:40:c5:
                    48:9d:43:c8:33:42:bc:48:3f:da:b8:2e:a3:78:e0:
                    8b:a4:15:5f:4c:21:01:46:c1:01:3f:f9:bc:9b:bb:
                    a4:8d:92:41:9c:7d:6a:c8:40:09:95:df:22:b8:a0:
                    04:1b:f1:6e:23:56:a9:a3:c4:89:49:7e:82:d9:42:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:33:10:0E:A9:29:82:50:B5:8D:0C:0A:88:4D:94:FD:C4:46:01:2E
            X509v3 Authority Key Identifier:
                keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:79:52:5f:78:ea:1d:2b:3c:c2:ff:d4:b2:fd:a1:52:d5:7d:
         9c:b0:be:2d:0b:3b:99:a7:12:a3:53:0e:6e:67:91:57:72:4c:
         79:fb:bd:a7:d6:70:c5:e7:c4:f9:d6:03:dd:72:38:c3:75:a5:
         03:91:ed:75:70:ef:69:b7:d6:26:e4:60:bc:e2:f3:c3:e3:b8:
         eb:c7:a0:69:68:5d:86:f1:60:f4:27:38:83:3d:e8:ae:17:f5:
         ec:cc:67:5c:d4:8c:4e:44:7d:52:f1:6f:90:50:f1:5b:71:75:
         17:4e:63:9e:2e:56:7e:35:8f:c2:fa:98:9f:d7:7a:ed:f5:27:
         12:ce:2e:fe:8c:e4:0e:ab:72:18:3d:31:aa:8c:fb:a4:35:01:
         35:d5:c0:56:fa:d2:3e:fa:d6:8e:2f:f9:5f:72:00:e7:6c:32:
         05:f9:a3:99:ba:d1:83:a2:32:a2:ed:b3:49:74:37:21:cb:8f:
         13:be:f3:6d:ed:9e:70:36:98:8c:4b:7a:7f:0d:62:8c:a4:32:
         23:a4:f1:09:91:35:6c:40:4b:07:02:a6:06:4f:ba:28:b0:e7:
         e8:86:1c:57:11:6e:7b:74:3e:84:62:b9:9a:d9:d7:85:24:9c:
         6e:ae:b5:68:22:11:ea:6e:d2:5a:35:40:6c:9c:e8:72:88:93:
         68:58:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:46:47 2024 by rpki-client on console-ams.rpki-client.org