Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          Q9VHFx+FwtKEubrcEdp3pP6qNKuGT8QpjzQ0TuncukE=
Subject key identifier:   2F:5A:6D:26:3A:7B:E1:BD:99:42:C9:D0:83:F6:E7:B8:21:13:DC:8B
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       018F863614BD3B1826029B7916AE7EE0D434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          0A15
Signing time:             Fri 17 May 2024 11:00:42 +0000
Manifest this update:     Fri 17 May 2024 11:00:42 +0000
Manifest next update:     Sat 18 May 2024 11:00:42 +0000
Files and hashes:         1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: uxzLVsI3k1rsJozjQPEkQL3zI+TK67HbWJ6CV5QnkJ0=)
                          2: pmr0oeoxTie2nirqR7V3MQtVfPM.roa (hash: uCpamLlEEDUklMoNjmunm6RZIjxtuoipAzERlbvxqhI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:14:bd:3b:18:26:02:9b:79:16:ae:7e:e0:d4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: May 17 11:00:42 2024 GMT
            Not After : May 18 11:00:42 2024 GMT
        Subject: CN=2f5a6d263a7be1bd9942c9d083f6e7b82113dc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:00:e1:86:3b:0a:8f:ac:63:4a:85:0e:99:1f:
                    b9:cd:79:4d:17:11:38:34:ce:f1:7e:3e:6b:b7:8b:
                    26:0b:fd:2c:ba:7d:4e:4d:bd:f1:1b:6d:df:b0:c2:
                    2c:44:ef:70:81:18:81:9a:46:cf:07:2e:23:6d:d0:
                    f9:92:18:3e:51:df:cc:7a:31:02:1d:d9:e6:e6:9e:
                    66:4a:30:5e:25:dd:86:33:06:d3:9b:ef:e8:ec:43:
                    7a:53:c8:b8:39:b6:84:f6:64:23:70:51:90:01:78:
                    17:59:ef:8e:9b:80:89:1e:fc:dd:ad:a1:83:30:f7:
                    fb:85:14:d1:8f:a2:a7:54:30:da:e2:33:a0:98:33:
                    0c:10:b0:c6:62:f6:41:92:5c:1c:72:9d:6a:c2:ce:
                    3a:bb:78:6e:e2:9c:ec:a6:38:b3:ac:98:ad:1a:8c:
                    69:26:af:c6:09:82:ab:65:59:d6:d0:3f:e6:71:82:
                    7a:fa:3e:43:6a:9f:25:67:1b:67:6a:04:c2:a4:c0:
                    d0:be:39:50:2a:3f:b9:ff:f5:d8:19:47:91:e0:17:
                    19:7e:56:6e:99:ff:60:5a:56:13:79:ad:ad:33:a7:
                    77:ea:f9:c1:e1:4c:23:dd:90:29:f4:3c:ad:1b:8c:
                    39:03:62:cc:6e:22:49:d8:d4:cf:b4:1c:4a:b7:77:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5A:6D:26:3A:7B:E1:BD:99:42:C9:D0:83:F6:E7:B8:21:13:DC:8B
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:54:f5:99:b8:af:a8:ff:45:7c:e2:7f:ee:4a:fa:ee:b1:34:
         f8:1d:04:1d:08:91:50:09:d8:fc:30:2c:4c:bb:9d:5e:90:cd:
         98:9c:80:a7:cf:98:c5:01:86:c9:84:6a:77:a6:79:c5:af:32:
         23:94:48:45:ca:78:39:b5:f0:a6:5b:10:10:0b:a3:45:38:64:
         e6:c3:4c:84:ae:63:dc:86:f0:d9:f3:2b:28:67:33:3a:fd:4a:
         94:84:a4:9b:a7:f2:35:91:24:ba:2c:19:b7:e8:0c:e0:e4:d2:
         86:83:ce:70:7e:95:83:4b:9c:81:3b:a1:31:ef:e8:ef:24:d0:
         6e:91:29:c9:ec:ee:96:d8:8d:1f:c8:c3:ac:e1:b9:8d:dc:89:
         38:b4:67:6d:82:66:af:ab:05:0b:8f:ff:b2:c8:30:55:a0:f4:
         6d:90:10:a6:1b:72:93:2b:7b:49:72:6a:84:e0:8e:da:4a:fb:
         25:bc:96:29:22:9e:6d:c8:8b:f9:be:66:b7:72:13:7f:a6:65:
         61:27:1c:85:a8:db:de:8f:47:36:b0:25:ea:cf:3f:ba:01:5d:
         be:34:14:44:15:bf:ba:f8:90:86:a8:08:f5:d8:73:9d:ce:99:
         02:f5:47:0a:33:d5:e7:9c:3e:c6:38:bc:33:cd:c8:8c:c0:6f:
         49:b9:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:13 2024 by rpki-client on console-ams.rpki-client.org