Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File:                     0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier:          JUQLMvJOJ822wfzwqZt6pMJth2XBpr7XD+LnFdsH2Js=
Subject key identifier:   46:DD:4A:7E:44:62:47:6D:0C:A4:56:8A:D9:1F:51:32:8E:C2:31:26
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer:       /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial:       018F362F98DE7A495768513CEF9DCD7159F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number:          03D7
Signing time:             Wed 01 May 2024 22:03:59 +0000
Manifest this update:     Wed 01 May 2024 22:03:59 +0000
Manifest next update:     Thu 02 May 2024 22:03:59 +0000
Files and hashes:         1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: q0CQGjzusYDvd9CVLGops4e84spUrtyU/SxTdc6sWQ8=)
                          2: 7UlI42vnDzSkn0I0rZW8cgapAAo.roa (hash: EARlfphkOocNFrtvlg7wcZKV51qNRTK4zKhbqhPLny0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2f:98:de:7a:49:57:68:51:3c:ef:9d:cd:71:59:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
        Validity
            Not Before: May  1 22:03:59 2024 GMT
            Not After : May  2 22:03:59 2024 GMT
        Subject: CN=46dd4a7e4462476d0ca4568ad91f51328ec23126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a1:41:68:19:3f:6c:ca:62:82:fd:5d:7c:f9:
                    4b:27:03:f2:91:f2:e9:c3:bf:e8:c8:6d:e7:74:ce:
                    a2:e3:6c:c9:f0:a3:16:8a:ca:a2:26:49:6c:30:2b:
                    b5:dd:20:1a:83:8e:b9:41:9c:c2:d2:9d:fd:8c:ac:
                    c7:14:39:78:0f:aa:28:2a:27:87:65:32:5c:e9:b5:
                    39:32:43:56:5c:03:7f:11:62:2f:36:48:8b:90:23:
                    36:c7:09:f1:25:7d:29:6d:be:3a:c6:f6:7c:ca:7e:
                    be:bc:53:a2:79:7e:5a:da:4a:e6:ce:68:47:64:2b:
                    5f:5b:4a:86:50:ee:50:64:3b:de:1e:74:af:86:e3:
                    25:a8:7c:9c:f4:58:09:85:d8:cc:b3:ea:41:6b:52:
                    88:96:25:ef:d1:a7:65:e9:b7:b5:35:ec:1b:f5:ab:
                    d0:61:a3:54:7b:19:bd:1d:ba:a6:79:85:af:8d:5c:
                    f2:69:94:47:6a:62:01:df:08:27:f6:31:8e:50:27:
                    b2:2b:6b:d6:96:77:13:9f:79:f5:fe:ae:7a:66:c7:
                    7c:7b:8a:c6:18:4b:d0:30:1a:4f:d6:61:f2:43:24:
                    bb:60:7f:51:40:1d:e5:bc:7c:4f:c2:94:53:23:bb:
                    cb:5c:3b:f8:fe:c8:ca:54:7c:dd:47:67:bb:72:70:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DD:4A:7E:44:62:47:6D:0C:A4:56:8A:D9:1F:51:32:8E:C2:31:26
            X509v3 Authority Key Identifier:
                keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8c:58:11:06:ec:41:11:6c:7a:7c:5a:b8:ca:45:41:ed:b6:
         f1:1d:1a:91:87:ae:5c:52:c0:4c:13:10:53:ed:9e:0b:92:56:
         d7:1f:65:2f:91:fc:15:a8:9c:c2:68:0a:23:37:db:1b:eb:23:
         09:87:e6:9a:f7:4d:99:9f:42:2a:71:01:bb:3d:8c:67:71:ba:
         a5:d8:27:2c:81:e9:34:2c:a3:a4:a3:cc:32:51:01:de:ad:41:
         c2:be:cf:59:3c:dc:33:25:d4:51:bf:dc:85:bc:0e:3c:76:c6:
         4d:f0:f7:9b:75:d9:6c:07:e2:53:9a:54:52:23:f3:0f:c9:ff:
         99:ab:a8:04:a4:31:ec:26:f5:1e:9b:06:fa:13:be:de:0b:40:
         e0:ca:14:37:8e:0d:9d:46:c0:d0:39:5d:cf:5b:bb:55:5a:55:
         89:d0:74:8c:7c:98:c0:be:a0:b0:3f:99:e9:fb:2e:14:db:ad:
         7a:af:13:73:e3:5e:8d:f0:23:bd:df:cd:89:d8:44:6b:10:83:
         7c:47:f2:3b:10:1c:70:9d:43:9c:e9:69:78:10:b8:6a:bc:57:
         b5:b5:71:ee:13:3c:12:fd:68:3e:da:6d:4c:9f:db:8b:1f:81:
         b2:82:4a:ab:c6:e9:a8:0d:9d:05:77:49:4a:68:57:65:e6:57:
         5f:b4:85:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:31:13 2024 by rpki-client on console-fra.rpki-client.org