Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
File:                     JsmI8h_x7X30KmJjcjImaG08GNY.mft (raw, json)
Hash identifier:          TWs30EsxKmJqnBM7FyhSLDk8AqYslNaConps3SupEUs=
Subject key identifier:   43:DD:B2:CE:8B:28:0C:6B:32:E9:36:F2:62:1C:A4:1D:C4:2C:3D:87
Authority key identifier: 26:C9:88:F2:1F:F1:ED:7D:F4:2A:62:63:72:32:26:68:6D:3C:18:D6
Certificate issuer:       /CN=26c988f21ff1ed7df42a6263723226686d3c18d6
Certificate serial:       018F8749CF7AA3550311D2B14C88FB0D8B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
Manifest number:          026B
Signing time:             Fri 17 May 2024 16:01:52 +0000
Manifest this update:     Fri 17 May 2024 16:01:52 +0000
Manifest next update:     Sat 18 May 2024 16:01:52 +0000
Files and hashes:         1: JsmI8h_x7X30KmJjcjImaG08GNY.crl (hash: XmXiHJsEAN6THOi1+jt1M+noDF8e9uwXwCQtwuMbgfs=)
                          2: YrE20UzaASY_mfuwOS9UmrTt28M.roa (hash: +/g+S8NiaXpdx2NYeWpcNiQKNUOVj3vzbA+H1k8HKmQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:cf:7a:a3:55:03:11:d2:b1:4c:88:fb:0d:8b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c988f21ff1ed7df42a6263723226686d3c18d6
        Validity
            Not Before: May 17 16:01:52 2024 GMT
            Not After : May 18 16:01:52 2024 GMT
        Subject: CN=43ddb2ce8b280c6b32e936f2621ca41dc42c3d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:3b:67:58:45:ba:c7:d3:45:70:d3:ea:15:
                    4d:0f:82:55:ff:b2:68:15:e7:3a:e4:73:15:22:bd:
                    b5:06:0d:63:58:d2:1d:8a:17:12:42:8a:d8:76:d0:
                    99:df:48:48:1d:b5:05:4f:94:f9:a6:c4:2f:af:7e:
                    07:d3:05:16:b8:92:9c:b7:8a:08:c8:57:00:0c:18:
                    94:72:88:6a:99:5a:f0:d9:41:93:f4:de:64:43:3e:
                    eb:e9:1b:03:bd:e6:95:8d:44:1f:fb:33:4c:14:db:
                    9e:71:df:ab:db:67:1a:b7:77:f0:1a:60:01:75:b8:
                    f4:3d:3d:df:de:ef:d1:6b:32:96:c2:1b:f0:12:24:
                    9c:4c:32:20:9c:ce:11:e5:65:b9:be:60:de:29:fc:
                    a8:dc:2e:6b:55:a1:0f:99:ec:f0:f4:5d:6e:c0:af:
                    48:9a:81:72:f0:b3:ad:91:2f:62:11:da:8f:8d:cb:
                    be:58:b8:bf:31:b8:4a:b5:26:0a:a4:68:69:27:20:
                    14:1f:6d:8b:1a:98:7a:c8:63:0a:67:dc:c0:ec:2a:
                    27:a8:dd:7c:77:51:05:c3:b2:b1:f5:6b:cf:f0:5e:
                    03:6d:3d:c6:32:e1:87:0e:54:0c:6e:89:63:18:d3:
                    ee:64:d1:02:51:db:1f:30:4f:ec:a3:5a:50:b6:b2:
                    7c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DD:B2:CE:8B:28:0C:6B:32:E9:36:F2:62:1C:A4:1D:C4:2C:3D:87
            X509v3 Authority Key Identifier:
                keyid:26:C9:88:F2:1F:F1:ED:7D:F4:2A:62:63:72:32:26:68:6D:3C:18:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:12:e6:ba:5d:72:1e:a9:b6:8b:c5:67:d6:e6:95:ff:a9:b4:
         d7:78:38:1b:c2:77:dc:9b:e9:1b:27:15:32:8c:c6:8a:ca:5a:
         7b:30:36:46:28:4e:0b:f9:d0:30:69:f6:b7:7b:80:98:35:ba:
         1d:76:2f:0f:0e:b2:68:35:da:49:5e:1b:a7:e2:7d:26:29:ee:
         39:fd:93:c7:9a:96:79:d6:b1:2c:5e:7a:9b:e3:4c:3f:1a:f2:
         01:fe:ef:d7:6c:1a:ac:5f:84:a0:40:bc:73:ee:aa:2c:ad:dc:
         c6:1a:ce:b1:7e:22:cd:2b:1e:fe:07:43:23:3d:b4:c0:24:61:
         0d:54:38:92:db:56:89:68:2e:d6:eb:f2:91:6b:cb:02:bf:d8:
         d6:0b:ec:f6:90:bf:88:28:c0:80:ce:ab:28:99:d4:44:ae:ef:
         e9:73:3e:96:c3:ec:5c:ef:c0:03:44:b7:05:88:ac:80:e8:9b:
         d9:50:df:bd:64:50:0d:df:fb:ee:e1:dd:6c:82:e2:68:66:49:
         04:89:7b:e4:46:93:e0:bc:61:d3:00:07:70:5a:23:d0:63:9d:
         ef:4f:1b:91:d4:72:f4:3c:a0:eb:3e:46:d8:46:ed:5d:bb:08:
         76:90:29:dd:5e:20:04:a0:36:c7:f4:60:89:d0:ae:de:bd:36:
         fa:8f:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:35:30 2024 by rpki-client on console-fra.rpki-client.org