Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
File:                     JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft (raw, json)
Hash identifier:          TWYZBkuYN62WK8uyDVKBP3LJCLz0hud416xOeIahpJQ=
Subject key identifier:   28:43:9B:93:4E:2A:51:29:C4:7E:C8:2E:46:24:A2:DE:96:4D:6F:72
Authority key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
Certificate issuer:       /CN=27032f79023052100c4393c9e690f97d7896926f
Certificate serial:       018F874A61881D64D9522496455FAA65FD18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
Manifest number:          116E
Signing time:             Fri 17 May 2024 16:02:29 +0000
Manifest this update:     Fri 17 May 2024 16:02:29 +0000
Manifest next update:     Sat 18 May 2024 16:02:29 +0000
Files and hashes:         1: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl (hash: ghx+rO7ldJbGqBduvBUSOVVFVhPJLL8c9EO4M0ymAVo=)
                          2: fQpvOgag-JJCHGruto4b2DF5O0A.roa (hash: 5VQin2Nxl9eSR1+jSBQIeLK1+cdyP86jUnPJVsynKh0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:61:88:1d:64:d9:52:24:96:45:5f:aa:65:fd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27032f79023052100c4393c9e690f97d7896926f
        Validity
            Not Before: May 17 16:02:29 2024 GMT
            Not After : May 18 16:02:29 2024 GMT
        Subject: CN=28439b934e2a5129c47ec82e4624a2de964d6f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:8f:dc:d8:f0:e7:e5:70:89:90:b2:8b:3a:
                    cb:ae:ae:66:99:18:08:7f:ba:5d:7c:98:80:f4:07:
                    0b:fc:81:de:77:1c:6d:fb:80:44:f9:39:d5:ee:0f:
                    33:c2:ef:4c:2f:57:fd:d7:80:16:29:fb:ec:03:98:
                    21:2d:f1:60:6d:55:2a:b6:f2:3b:c5:c0:65:cf:50:
                    59:93:5e:22:87:17:57:7a:0a:cc:fa:3b:e2:15:01:
                    ab:71:b3:b7:a5:ea:e8:3e:46:7b:b1:68:b1:94:a2:
                    be:59:f8:14:5f:4e:61:fd:1f:d2:31:89:4b:4a:50:
                    5d:63:14:e7:52:50:48:5c:eb:9d:83:a5:c0:65:01:
                    59:4f:e9:3d:11:d1:fd:2e:74:4c:1c:98:d7:09:eb:
                    75:4f:4d:a4:69:1e:e4:fb:a9:44:e1:ec:9f:24:2d:
                    97:3d:a7:12:4c:7d:66:95:31:84:dc:dc:46:ce:b2:
                    a8:12:3b:46:bf:ff:f4:88:89:35:ab:a0:06:9d:91:
                    3f:32:6b:13:60:3c:ed:7c:12:7c:d6:18:14:14:78:
                    63:41:64:06:19:97:82:3d:82:68:73:ff:fc:6b:e6:
                    77:92:1f:45:a9:10:55:e9:8b:14:9d:a3:4c:1c:80:
                    32:6c:8c:e0:2f:c4:9b:fc:fd:74:31:67:82:1f:61:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:43:9B:93:4E:2A:51:29:C4:7E:C8:2E:46:24:A2:DE:96:4D:6F:72
            X509v3 Authority Key Identifier:
                keyid:27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:14:ae:e6:d4:d1:58:7c:28:f9:f4:66:93:9d:9c:6c:36:a6:
         9e:c6:7f:1b:13:c0:7f:35:b9:6e:33:d7:6b:a8:82:e5:df:e5:
         59:9e:5c:7c:6b:16:91:d9:00:59:da:4e:4e:9b:f4:f5:f0:48:
         30:c6:ad:03:38:0e:f0:5d:62:6f:18:5c:b4:62:db:7c:1f:91:
         98:2d:09:9d:c3:c7:a3:7c:e2:70:18:09:39:68:fd:d2:2d:15:
         dd:ce:af:b8:8b:99:8d:ef:b0:5a:a9:92:78:30:ed:da:2d:05:
         ba:c5:0c:4a:b9:88:e2:b6:55:c4:fb:8b:f1:b1:98:5d:c7:47:
         20:e6:ab:eb:ce:91:47:c1:d3:42:91:36:38:4e:f4:74:aa:ec:
         1a:f2:89:cd:c1:ca:f3:ec:79:26:25:85:86:83:7a:4f:5e:cc:
         4f:77:9c:16:2a:03:2f:af:29:1d:65:d7:35:1b:2a:55:98:3f:
         f5:72:2a:ac:12:66:3d:87:ae:00:d9:89:a4:37:b7:c5:6d:cd:
         dd:c6:83:a1:21:9a:62:e5:70:a4:02:f5:1a:2b:23:f8:fe:41:
         f2:0d:92:42:b9:3c:6d:e5:b8:d6:d2:90:02:c4:35:2a:fb:eb:
         3d:e9:f2:24:90:c7:d7:11:b8:8f:9a:75:c0:3e:ed:0d:d7:c6:
         47:8c:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:25 2024 by rpki-client on console-ams.rpki-client.org