Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File:                     sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier:          wgop/RZKk5n463eDrXClxOHk19Z3wGCRHN98Aj37e20=
Subject key identifier:   28:CC:51:A9:33:CF:F6:2E:BE:8F:9B:C8:E4:06:A0:0A:56:16:A1:76
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer:       /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial:       018F8937A70A9F87083A7FA01C5388269E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number:          117A
Signing time:             Sat 18 May 2024 01:01:16 +0000
Manifest this update:     Sat 18 May 2024 01:01:16 +0000
Manifest next update:     Sun 19 May 2024 01:01:16 +0000
Files and hashes:         1: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: ydGHlq8qsX9kXt/jJsTLMcaclTC/zz75hymbZ+6Two4=)
                          2: xbyKD-XLecl0g8UyngzEsYQVsSA.roa (hash: 9Adz2Zemp9wx114Q5s5HBnQehIfSnu1Gh8EvZO/kcbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:a7:0a:9f:87:08:3a:7f:a0:1c:53:88:26:9e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
        Validity
            Not Before: May 18 01:01:16 2024 GMT
            Not After : May 19 01:01:16 2024 GMT
        Subject: CN=28cc51a933cff62ebe8f9bc8e406a00a5616a176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:46:b6:33:e9:f6:1e:bb:32:f8:43:aa:c0:fb:
                    46:dc:e2:b2:f9:7d:4f:f2:fd:f1:21:ed:68:6d:fd:
                    8d:af:7d:5a:42:73:d4:26:27:ba:f3:de:3d:11:e6:
                    11:07:51:05:63:eb:d5:87:fd:6a:61:80:80:50:7b:
                    92:04:44:09:02:8d:c9:be:fa:13:4d:c0:7e:3b:13:
                    63:08:1a:ed:96:e2:1f:47:47:44:45:2d:46:7d:bc:
                    1d:4a:b4:3d:e7:f9:76:da:04:b9:26:7f:b1:74:49:
                    65:e4:88:b2:a3:88:8c:e8:1a:cc:46:d9:a0:87:87:
                    78:10:da:d8:5c:77:3c:00:f2:d7:43:ed:d6:4a:52:
                    98:c9:9e:e7:9c:d3:0b:75:8a:07:d9:93:d7:23:11:
                    20:4c:65:89:2f:41:59:75:14:0f:6d:cb:06:36:ea:
                    fa:a5:50:70:e1:b0:91:cf:33:9b:63:24:05:c3:4c:
                    f3:16:7a:f6:4d:22:3c:ea:4f:34:52:51:6c:39:b5:
                    8c:90:53:94:37:d0:a4:9d:49:9b:5a:45:9d:89:69:
                    fd:8e:f9:eb:5b:19:71:06:30:02:15:81:6e:cf:4d:
                    8e:5a:d7:79:45:91:f3:81:d8:54:9d:e3:84:35:61:
                    a6:d2:cc:72:53:52:ee:5a:24:da:a2:b3:43:be:e5:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CC:51:A9:33:CF:F6:2E:BE:8F:9B:C8:E4:06:A0:0A:56:16:A1:76
            X509v3 Authority Key Identifier:
                keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:f5:7b:ca:05:1c:c7:a9:a1:be:6f:5c:e5:5e:56:02:4e:
         9f:6f:c3:5a:4a:e0:f3:41:20:e9:e4:48:45:2a:70:36:6f:18:
         ad:a1:48:09:67:be:03:cc:70:65:e7:ca:8d:57:8a:29:15:bc:
         20:08:3c:14:bd:21:7d:e4:37:2b:fb:b6:64:a6:0b:b6:6d:59:
         9e:2f:61:8e:ab:dc:f0:e1:8f:97:1d:ba:b3:ba:01:4f:15:31:
         dd:ff:e6:67:c0:66:44:19:03:24:29:d4:d1:a0:43:69:fd:46:
         09:08:09:51:43:c8:88:f2:b8:0a:51:b1:0f:9a:da:87:ad:85:
         53:64:7c:4b:f8:4c:4a:3a:c0:0c:36:c3:1e:2d:3b:ef:48:61:
         c2:bf:80:f9:af:5a:a0:e6:50:04:9a:69:e2:7f:d0:e1:04:88:
         e6:59:b7:e3:a0:e2:c3:46:ab:80:0c:45:18:ea:ba:bd:f6:67:
         fc:1b:b1:9b:a6:db:0e:13:f6:81:17:9f:ac:73:f9:76:df:da:
         1a:79:5e:d0:2d:85:35:f6:66:b2:7f:e1:6c:ee:d5:63:f9:4e:
         77:4f:4a:05:be:ba:13:56:c0:d1:a9:90:bf:81:b1:25:37:27:
         e9:9a:cf:c8:76:ef:4b:d5:df:b6:01:e0:51:62:71:47:62:7c:
         2f:12:ce:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:12:49 2024 by rpki-client on console-ams.rpki-client.org