Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          oK98JWd0vqy/1kjm+Z7lWOt+b5Hwd5elfaAZqz+n51s=
Subject key identifier:   BE:E0:57:64:DD:11:14:69:21:D1:C2:69:AC:57:7F:8B:03:43:6E:8E
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       018F874846850C7084E4A3F7575937873EC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:00:11 +0000
Manifest this update:     Fri 17 May 2024 16:00:11 +0000
Manifest next update:     Sat 18 May 2024 16:00:11 +0000
Files and hashes:         1: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: FfQBjumHIqqTdc0PixhWLJ4WtMnKwzXVHbSgnL/CQyE=)
                          2: WN8XSfewpSHiuDGpFM843bGQYR0.roa (hash: 6Jhs6sB+wSoIj1UwnQ8oMBrpZ9Zq1FkbJmAFPvrJAEg=)
                          3: bLAtDlVH7cqOuD1SaYHu9MHumt0.roa (hash: c2+7W041xMQSYAWw5dv6gRIylQ8yYDxEsY8uFcMFuTI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:46:85:0c:70:84:e4:a3:f7:57:59:37:87:3e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: May 17 16:00:11 2024 GMT
            Not After : May 18 16:00:11 2024 GMT
        Subject: CN=bee05764dd11146921d1c269ac577f8b03436e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:10:dc:4a:45:e8:a5:d9:3e:96:f8:82:be:
                    34:bb:8a:05:14:25:d9:9b:86:51:f7:44:d5:03:08:
                    04:79:70:9b:95:b2:51:99:b4:f5:e4:8e:3a:7e:1f:
                    c8:4d:e0:f9:62:03:2b:86:b9:d9:25:71:b4:14:bc:
                    a8:22:cb:6b:ef:cb:da:a2:59:6f:38:7b:70:37:74:
                    bf:a9:2d:3f:39:71:5a:ab:2b:66:fd:63:12:4e:ba:
                    99:9d:19:af:45:53:1d:84:18:75:8d:f7:cb:f0:a3:
                    06:31:a0:55:ff:c0:d2:f1:70:88:8e:3c:06:90:97:
                    2b:ac:9a:25:c7:56:d2:5e:5e:f2:f5:01:a9:c0:b4:
                    36:d3:21:ea:09:bc:f9:92:8e:8c:2c:7f:78:02:c1:
                    39:e8:f0:6b:5d:d1:8e:61:29:c0:7c:a1:23:8e:08:
                    4c:87:6e:d4:8a:b8:02:a7:ac:bb:e1:b2:36:3f:c6:
                    3e:33:ae:98:f4:49:ee:53:ad:57:08:94:95:b3:da:
                    bb:fe:58:9f:d1:d5:84:ef:ee:fa:e5:4d:d1:c3:1e:
                    49:28:3e:26:93:94:b7:d4:66:44:0e:fb:62:b9:06:
                    d8:ae:8d:44:e6:53:f8:80:2c:25:71:f6:c8:7e:8d:
                    e9:c5:37:4a:f7:ea:c5:3b:2b:53:e2:e3:05:b5:d3:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E0:57:64:DD:11:14:69:21:D1:C2:69:AC:57:7F:8B:03:43:6E:8E
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b4:f5:53:35:78:22:9f:90:53:cf:e1:bb:a1:4e:fa:43:4b:
         b2:a5:d2:df:43:10:a4:ed:f4:ff:d2:4d:30:4c:69:1e:1f:be:
         8f:b3:c0:d4:b2:fd:3f:fe:d1:5f:db:9d:9a:1b:96:23:e9:15:
         61:20:de:5c:76:7e:2f:7d:2b:eb:f9:04:39:77:a8:b4:01:07:
         e2:d7:c0:e3:e1:d8:b8:a2:0e:11:e8:ce:61:12:d1:6b:62:76:
         c0:0d:2d:da:12:72:cb:dc:8f:bf:e8:49:80:46:52:2f:75:89:
         d3:07:6d:75:16:e4:92:9e:c6:da:77:73:c1:bb:29:f0:fd:93:
         17:12:35:99:32:77:75:6c:eb:83:61:f3:55:7a:f8:24:dd:a8:
         80:62:28:5f:6b:f9:97:27:9b:79:f6:b3:07:c5:dc:2a:90:17:
         51:f0:6c:be:d9:7d:4d:a6:6d:88:7f:c2:26:83:f8:7b:9f:7a:
         09:b8:42:85:a8:0f:df:3d:4e:c0:9b:6a:2e:b3:b7:d7:52:fd:
         0e:37:72:b3:5f:0e:b7:b9:f8:c5:30:cf:ae:b0:ed:3f:01:97:
         fc:54:0d:a9:51:43:c7:96:e3:d4:73:aa:52:12:21:ee:ed:ea:
         0e:3e:e4:c3:ad:fe:b9:58:64:a0:dc:c2:b0:21:61:e2:60:1c:
         2e:2f:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:05 2024 by rpki-client on console-fra.rpki-client.org