Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File:                     jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier:          y8h+RJ9P0oH+bEsb2M2Em3odt2l3QSPoYky26/aSUQ8=
Subject key identifier:   E6:B9:D1:0A:3F:89:7A:86:81:21:3F:C0:C4:87:F4:FF:6F:67:C7:A6
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer:       /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial:       018F87B6441987A4283D8BB4F1777BC9EA9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number:          0437
Signing time:             Fri 17 May 2024 18:00:20 +0000
Manifest this update:     Fri 17 May 2024 18:00:20 +0000
Manifest next update:     Sat 18 May 2024 18:00:20 +0000
Files and hashes:         1: 1XLSnQgav6UV_hSY2B-fLL9A1qA.roa (hash: St/vs86HSf6Kf45/HRxgkF5+PXho7Fwmrt/qtlOxeyQ=)
                          2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: 2YXVOyhXnoXpK3Pj4sLpPXOL67QX1pppUOgqu/X+zTY=)
                          3: yuPuMgiOTDY-g2k5Ie42nqCNDn4.roa (hash: 5WdFqnb0YXoS4/t5ms6Yy3vRVxvCVrPpJhvxtFYOKTk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:44:19:87:a4:28:3d:8b:b4:f1:77:7b:c9:ea:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
        Validity
            Not Before: May 17 18:00:20 2024 GMT
            Not After : May 18 18:00:20 2024 GMT
        Subject: CN=e6b9d10a3f897a8681213fc0c487f4ff6f67c7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:27:72:06:f6:23:85:21:76:dc:d9:99:d1:
                    5a:73:9a:41:e0:d9:7a:f4:2d:89:e5:a7:1d:70:c1:
                    58:28:f5:9b:ae:b8:f7:60:9a:d9:02:25:b8:49:e1:
                    4c:f7:b2:ad:08:15:f5:fc:95:2f:4e:3b:ec:21:83:
                    99:46:a5:99:ca:d3:c4:a8:ab:54:63:68:6d:e6:75:
                    12:35:f7:f3:f4:10:e0:ad:e4:57:74:2f:83:50:34:
                    dc:c1:b8:a0:83:31:7b:90:ca:51:09:46:82:ea:7c:
                    ed:f3:7a:0a:6d:61:d2:84:58:ad:2f:3e:6b:2e:a1:
                    52:59:9c:b6:09:15:b9:70:17:63:5e:09:c5:6e:51:
                    ea:0e:91:41:91:60:e3:b7:22:07:fa:d3:8e:d8:4d:
                    7a:f0:e8:e6:61:48:27:14:c2:ef:6f:40:a1:80:98:
                    e5:06:3f:14:c4:fa:81:9f:2a:fa:e9:24:93:fb:b1:
                    86:92:39:40:2f:28:a8:20:96:0a:d5:4a:d7:49:84:
                    51:d9:03:0a:d9:85:87:f8:f4:58:39:88:f8:1b:41:
                    0d:12:ce:b8:56:7e:c9:16:a3:9f:20:a1:b6:38:d5:
                    a7:a7:c2:16:52:f7:35:99:f6:51:53:24:e6:86:ba:
                    ba:52:ce:ba:46:5e:3f:76:51:d3:19:52:ab:10:10:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B9:D1:0A:3F:89:7A:86:81:21:3F:C0:C4:87:F4:FF:6F:67:C7:A6
            X509v3 Authority Key Identifier:
                keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:75:88:61:77:47:f9:48:59:8d:13:0d:b0:d6:0e:60:98:cc:
         41:e4:e0:48:1f:29:20:e5:ac:9f:55:07:bc:03:eb:14:8e:82:
         b1:ec:8b:14:29:fe:7f:2a:ca:33:bb:96:e6:f4:eb:8a:cc:5b:
         04:28:cc:03:48:c7:01:07:46:6f:c9:f1:5e:9f:91:5e:43:3a:
         e6:71:30:97:7e:93:c2:ab:4a:d0:ef:df:35:ba:48:88:e3:9d:
         bf:19:6d:54:57:21:10:65:89:bf:bf:38:3b:36:fd:05:f4:fd:
         f3:2a:bc:a3:99:18:70:ee:32:94:fc:87:86:59:a6:f3:cd:22:
         39:bd:ba:18:6d:80:bf:e1:24:44:e1:af:c4:d6:cf:4a:a3:b9:
         41:36:a8:90:35:12:e0:e0:9a:14:87:d7:9d:c9:14:13:99:9f:
         0b:c4:8d:25:dd:c0:83:1e:cb:ae:c7:4a:68:50:19:29:ee:c1:
         30:1e:df:62:80:65:54:33:02:2a:57:51:0e:d7:ea:e0:b4:92:
         9a:e3:a2:e4:4a:19:07:23:f4:9a:8f:b6:68:85:8e:de:6c:09:
         5e:dc:08:7c:37:ed:1c:81:c6:bc:3c:bc:80:1e:23:54:23:4c:
         0d:5f:21:61:84:59:e2:fc:9b:4b:56:fb:a1:45:63:6e:1c:9b:
         60:49:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:54 2024 by rpki-client on console-ams.rpki-client.org