Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
File:                     JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json)
Hash identifier:          Hz2HW53wijhpXjYMeW0ybH8GzG9Pe9Ky8BtumgZIfpg=
Subject key identifier:   D0:E8:D4:99:CF:C5:57:72:64:91:DA:91:86:11:3B:D9:1B:3A:25:DB
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Certificate issuer:       /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial:       018F836B797B1887DA2E2BD05A3143D4B0F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
Manifest number:          10CD
Signing time:             Thu 16 May 2024 22:00:09 +0000
Manifest this update:     Thu 16 May 2024 22:00:09 +0000
Manifest next update:     Fri 17 May 2024 22:00:09 +0000
Files and hashes:         1: 0lAkUHWZ6ou0VC9FN00aa-vgLZU.roa (hash: tdQ1tLaGTQ7CmfvsiqATF+mMwmkyQIWihDl8I+lOTak=)
                          2: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: kzEQnwypNFkdyounK5J521k04KuJPop8WiPthKqQ94A=)
                          3: W5dou1-3e3Q495D9hGQNQyrG-r0.roa (hash: ML7A/EMna8XT8Y6TuV9l06uT+8y3IL9Uz8Vp9s9nsQI=)
                          4: X8yDvbv4EH-LWpeQbiDqBT_ruHw.roa (hash: TtEgA9jbqVTMP/p4z81bj6KaVYQYxF+iTo0BsvZV2Vc=)
                          5: xEB9tvgxiGaELBv_1SV4WntHMqc.roa (hash: voPIYUdcAHNXJTbGvktTyHHfFk8QvULAMfqsasGnC+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6b:79:7b:18:87:da:2e:2b:d0:5a:31:43:d4:b0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
        Validity
            Not Before: May 16 22:00:09 2024 GMT
            Not After : May 17 22:00:09 2024 GMT
        Subject: CN=d0e8d499cfc557726491da9186113bd91b3a25db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c3:5f:e9:81:2b:65:5d:09:4c:0e:74:a6:77:
                    55:65:05:15:5e:42:92:39:73:08:86:31:5f:7f:fc:
                    a0:ed:32:31:99:ce:54:17:7d:82:cb:23:03:10:8a:
                    01:f4:e2:52:71:10:38:9b:07:a3:d8:d3:b0:e5:3b:
                    3c:0c:3d:2f:a3:80:91:79:a1:2b:df:90:c8:31:3a:
                    aa:1d:12:e7:2b:83:41:fb:b2:89:47:2a:09:76:a8:
                    02:d9:78:94:88:af:1f:d6:9b:8a:b6:85:e0:f6:a6:
                    19:d6:44:72:ff:9a:91:d1:d7:32:35:b4:0a:be:c4:
                    df:54:a3:a2:2e:1c:ee:0c:54:89:03:22:23:e0:5c:
                    64:4a:9a:6c:15:16:ea:44:4d:08:ab:35:a5:31:72:
                    79:2f:79:28:10:da:6b:b4:4b:3c:19:1b:60:26:05:
                    69:d7:a3:55:13:b8:de:a1:17:4e:b0:dd:32:c7:75:
                    c9:6c:9f:d8:15:72:c1:35:aa:ce:d9:04:33:6d:08:
                    d5:46:7d:3f:21:fe:50:87:f8:7e:44:b6:3e:c4:eb:
                    57:15:f8:04:3f:d8:30:2c:cc:37:62:ef:e6:b0:76:
                    cf:11:2d:29:46:4f:c1:4d:eb:4a:08:a8:ec:77:00:
                    26:6e:b5:44:2d:d9:a5:99:27:78:ce:af:38:f5:b7:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E8:D4:99:CF:C5:57:72:64:91:DA:91:86:11:3B:D9:1B:3A:25:DB
            X509v3 Authority Key Identifier:
                keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:65:03:80:e4:9e:6d:f7:45:7b:fb:cc:db:89:b2:da:90:f1:
         7f:b8:f7:b3:9a:a5:83:3a:33:c8:7e:6d:41:d3:16:a5:20:fc:
         88:62:23:7f:98:02:c5:f9:f7:c3:cd:e7:c3:21:2a:2d:58:32:
         33:f3:03:16:05:7e:63:4c:8f:d5:c1:d7:be:f0:26:4f:91:aa:
         05:f0:a0:95:3d:0c:d5:b1:26:ad:1d:9a:a1:5b:61:2e:52:c9:
         d8:e0:c4:8e:df:8f:a8:ec:05:e0:67:af:b9:44:42:02:9f:28:
         56:bc:52:f3:36:f9:95:fa:97:ac:7d:4c:c6:d5:7b:e9:12:bf:
         d7:ec:f3:94:80:7b:81:6f:34:41:2e:f4:2c:5a:bb:87:05:3a:
         5a:04:75:de:d4:d1:e6:11:5f:a8:32:98:23:f2:d7:e1:75:5b:
         df:a9:49:d0:b9:c2:b7:65:59:60:6d:8e:ef:c8:92:75:62:31:
         a6:ad:4e:6c:ec:94:44:2f:ad:cb:a1:99:cb:22:57:b6:8a:af:
         20:bc:19:d6:26:40:74:4d:b1:3f:25:9e:d5:4e:ab:89:ef:9b:
         89:b2:1c:95:a9:05:95:24:b0:82:dd:48:7d:35:eb:32:84:dd:
         06:1b:d6:b6:d6:f3:c2:91:f4:f3:0e:7b:15:19:c5:d1:98:e0:
         da:89:dc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:02:15 2024 by rpki-client on console-ams.rpki-client.org