Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File:                     j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier:          jBU5bkAUvlDXcf/AZxwRJpmXCYlFmuZdBLswhstWg/k=
Subject key identifier:   6F:ED:42:0E:8D:46:12:07:9F:A2:CF:E5:48:7A:E4:6A:8A:AE:A7:55
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer:       /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial:       018F9760A60409B032214DBE2274075A0659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number:          02EC
Signing time:             Mon 20 May 2024 19:00:44 +0000
Manifest this update:     Mon 20 May 2024 19:00:44 +0000
Manifest next update:     Tue 21 May 2024 19:00:44 +0000
Files and hashes:         1: EWSUWJiX2MAQubE-qGo1ugtLUfo.roa (hash: qcVZgHfgOntW86iZLy9cCK5l6fTdsYgg+VGXt1tuBX0=)
                          2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: 6gBVRFCV3gn/3rs58cYP+MrtGHZ0lo4K0sBDKF/v1Fc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:60:a6:04:09:b0:32:21:4d:be:22:74:07:5a:06:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
        Validity
            Not Before: May 20 19:00:44 2024 GMT
            Not After : May 21 19:00:44 2024 GMT
        Subject: CN=6fed420e8d4612079fa2cfe5487ae46a8aaea755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:e1:4a:11:d2:b0:96:83:ae:f2:8a:7f:48:
                    22:c9:76:be:d0:98:4d:5d:55:a7:04:78:cb:8d:15:
                    d3:75:4e:66:03:29:f1:da:85:bb:08:60:35:97:4a:
                    99:43:37:3a:e4:87:76:3b:24:3a:42:e1:9c:fb:28:
                    2b:42:ea:2c:5f:d3:0d:e5:a3:95:d5:d9:5c:cc:49:
                    ad:5b:68:f4:61:20:37:38:2b:59:27:5a:f8:d0:79:
                    a3:bb:e7:d7:8c:ad:b5:ef:3e:5c:83:df:94:2e:d7:
                    5b:cc:0c:21:94:27:e7:56:a3:f6:e5:2e:dc:66:a7:
                    62:cd:ed:df:92:ac:85:f4:6f:5a:f5:31:19:57:e1:
                    cb:c6:1d:7b:0c:dd:d3:78:e2:e5:a5:1a:73:2a:f2:
                    32:65:e4:ea:8d:9d:1a:31:84:60:21:b4:b4:13:ca:
                    57:3d:30:ff:4a:3d:f8:1c:f8:2b:da:a6:ed:a9:01:
                    79:c2:4d:63:0f:18:d1:89:19:a7:12:23:ca:92:8e:
                    4b:82:a0:17:7a:1d:d8:f3:8d:1a:06:a1:d0:fa:38:
                    31:44:16:08:f3:84:e7:09:d4:ca:7e:f6:1d:a9:5e:
                    92:bc:2d:5a:12:24:1b:03:1f:c3:d8:f9:86:b1:72:
                    c6:ea:4e:b6:6f:0d:37:71:ad:bc:a9:05:34:54:09:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:ED:42:0E:8D:46:12:07:9F:A2:CF:E5:48:7A:E4:6A:8A:AE:A7:55
            X509v3 Authority Key Identifier:
                keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:55:77:b5:6a:2f:6d:42:90:b1:ce:a1:ee:52:06:76:99:eb:
         68:d5:06:71:fd:40:f1:71:06:75:d5:53:ae:9b:dd:c3:5f:38:
         f4:76:2d:20:dc:87:c8:ad:fc:ef:25:63:f7:68:38:ab:cc:44:
         8b:93:13:16:25:06:d2:49:a2:6f:8b:c1:0a:35:40:ae:4c:fe:
         55:09:cc:82:b1:34:ab:08:cc:81:3f:2b:92:7f:9b:42:46:74:
         e1:e6:ea:6f:d4:3b:f8:02:1d:e0:0d:d7:0f:b3:c9:9b:75:04:
         ad:5d:89:34:6a:33:fd:17:bb:a9:48:d4:03:b6:96:ff:4d:3c:
         aa:0c:8f:58:17:0e:b1:d2:13:54:bc:39:d7:a3:b7:8f:6e:f8:
         f1:0d:4d:c6:d8:e8:db:32:0d:d1:6f:a5:fb:f4:64:d5:84:df:
         8a:dc:97:54:64:8a:0e:96:66:3c:cd:34:90:15:07:19:85:bf:
         30:df:bd:7a:c7:08:f7:ba:84:3e:45:fe:3d:be:97:d6:d9:7d:
         53:db:f0:ed:dc:93:9b:00:37:a5:42:ef:0a:21:98:9e:25:b1:
         68:40:20:a2:f8:7a:fb:42:a8:b8:35:43:0f:bf:38:ee:23:13:
         0d:94:d6:9d:7e:ce:35:ac:6c:ea:18:80:d1:b9:44:11:42:b6:
         85:ff:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:07:02 2024 by rpki-client on console-fra.rpki-client.org