Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File:                     0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier:          KH0UGB4QX5/01FAHjNF0PlU6Ls2XtKCaY5BmnmdBF34=
Subject key identifier:   14:C4:8A:7F:F0:37:6B:8B:9B:D9:33:BE:EE:BD:E9:75:8D:23:C0:88
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer:       /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial:       018F90F1275F4C65B390F7BA2433A0D892A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number:          117D
Signing time:             Sun 19 May 2024 13:01:14 +0000
Manifest this update:     Sun 19 May 2024 13:01:14 +0000
Manifest next update:     Mon 20 May 2024 13:01:14 +0000
Files and hashes:         1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: TH8fKGpst2cgQgtyA7Aut/CdyB9yg4A9hLquZocHxAw=)
                          2: CNi3KFjXvN86EVjOU9Fpq2qwTn8.roa (hash: eMLHNX0jbZbhjhcHcpbWWwg7q4nYo//ubFSkUM+mCAU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:f1:27:5f:4c:65:b3:90:f7:ba:24:33:a0:d8:92:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
        Validity
            Not Before: May 19 13:01:14 2024 GMT
            Not After : May 20 13:01:14 2024 GMT
        Subject: CN=14c48a7ff0376b8b9bd933beeebde9758d23c088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:f8:fa:04:72:19:1b:fc:58:be:a6:b1:85:
                    02:30:12:2e:3d:25:f0:e1:f2:f1:0f:40:a7:3e:1d:
                    69:65:7b:b2:56:3f:3b:4c:71:f0:7b:03:77:fc:46:
                    be:41:d6:4d:60:21:e4:df:3b:fe:54:2b:9a:61:e7:
                    ea:b6:45:94:b0:d5:c2:68:de:88:3c:d2:cd:a3:3d:
                    36:81:80:2d:ca:45:b7:5e:8d:36:26:39:15:2f:be:
                    ce:fc:57:aa:07:70:10:f3:48:a9:43:83:80:96:43:
                    d9:36:de:5a:74:ce:26:cd:d3:3c:c4:6d:eb:43:fc:
                    68:b8:ab:e6:3f:92:35:94:7c:c2:ad:93:22:ff:6f:
                    8a:0e:43:87:54:27:ee:63:9e:f4:fe:ee:b2:73:5e:
                    74:2f:25:7d:09:71:3d:19:03:6d:fc:ef:a1:9c:fc:
                    23:97:58:a5:98:db:cd:b0:d8:74:ea:4b:60:9b:ee:
                    c0:a6:60:86:5e:7d:22:54:47:b2:bd:87:5f:8c:ba:
                    ea:90:8b:0f:7b:9c:69:a8:f3:0b:29:7e:2c:a9:94:
                    5d:84:fe:de:0b:28:7d:1d:30:a8:d6:85:f2:5b:51:
                    ee:d9:9b:3d:33:86:a6:86:df:9e:85:bf:c4:80:85:
                    ae:f6:3c:65:b9:11:e1:89:16:5f:60:83:b3:12:4d:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C4:8A:7F:F0:37:6B:8B:9B:D9:33:BE:EE:BD:E9:75:8D:23:C0:88
            X509v3 Authority Key Identifier:
                keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:e7:82:98:a6:e8:43:49:07:5a:ef:48:1b:b8:49:f5:11:4b:
         cf:31:b9:89:81:9e:d9:69:34:f0:53:24:89:16:8f:b8:0b:38:
         0c:59:06:e0:98:37:ef:ec:e1:ce:5a:1c:a4:09:2f:0b:03:90:
         2b:31:9e:c7:22:9f:84:86:e5:59:b3:f1:ab:83:ee:d4:f8:b7:
         07:33:a1:5d:62:56:4c:79:ad:c5:48:04:fa:d7:7d:bd:75:98:
         da:eb:52:f3:69:56:0b:52:1e:ae:ae:f5:30:4e:5e:cc:64:bc:
         bb:57:2c:15:d9:0d:bf:02:68:10:ff:ca:17:c9:84:18:ba:ef:
         b1:ac:43:a6:1e:c5:49:ef:fc:80:cc:8d:57:6e:d2:59:ce:ac:
         75:8c:6c:06:89:2a:32:23:6d:d4:b8:8b:d1:4f:4f:fb:bd:c0:
         ed:be:a3:c9:32:d9:f2:1d:bd:38:dd:79:b3:9a:ba:97:50:d1:
         61:f9:ef:b6:80:66:51:4e:cb:50:a5:08:32:bc:96:32:f2:2e:
         34:8a:5a:b5:0e:a1:10:09:9c:0f:f8:fe:8c:17:9e:e1:fe:f8:
         33:09:6d:20:24:07:93:94:c9:19:3c:c5:0a:a9:08:a8:62:71:
         d8:1e:64:fc:77:eb:c4:63:a4:24:92:97:a1:c6:9d:20:e7:80:
         0e:22:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:08:43 2024 by rpki-client on console-fra.rpki-client.org