Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          VHUxSb5BEugn+t+Elx0aaIFja1NKSq2SnSsWHeJtbz8=
Subject key identifier:   31:37:E9:3A:A4:4A:67:8D:A0:3F:1E:F8:F5:40:A7:5E:35:E5:BE:69
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       018F874A8E92A4BE3F2A5DE5D0DCA9CAE079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          066F
Signing time:             Fri 17 May 2024 16:02:41 +0000
Manifest this update:     Fri 17 May 2024 16:02:41 +0000
Manifest next update:     Sat 18 May 2024 16:02:41 +0000
Files and hashes:         1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: SYED+A+rj/+YqgCVkvZcDwZdJInuCQSJGna6cwJwHyg=)
                          2: QfC0dTPaHTJs2kX8a-EtEofPdDU.roa (hash: b3j+HNk7mqt9ZS5pDr3rVOF/uCBmWsQWxb0OzHj4JLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:8e:92:a4:be:3f:2a:5d:e5:d0:dc:a9:ca:e0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: May 17 16:02:41 2024 GMT
            Not After : May 18 16:02:41 2024 GMT
        Subject: CN=3137e93aa44a678da03f1ef8f540a75e35e5be69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:72:25:6e:f1:e7:32:a9:64:35:dd:50:f2:
                    2b:57:dc:3d:1e:18:4a:9f:0e:a3:d4:d5:e4:cb:8b:
                    41:85:54:6d:f7:fe:e6:2c:10:2d:97:4c:e3:b9:f5:
                    6a:b7:96:fa:a1:4b:69:09:c2:e2:50:12:4f:8d:55:
                    c2:12:43:bc:d0:2f:ae:de:08:f5:ce:20:f7:09:64:
                    07:fb:b9:98:58:82:fb:03:76:5f:72:99:10:eb:ec:
                    b7:1a:72:85:59:87:d2:7d:ca:87:8a:cc:e1:3b:3c:
                    2c:c6:53:a8:e7:3c:c5:dd:d1:d4:60:ba:b9:31:01:
                    d0:a1:62:45:a4:7b:a9:31:31:89:47:c8:0a:1f:20:
                    5e:b7:36:c3:17:e9:e5:67:d9:51:67:84:b3:51:b7:
                    d8:ab:af:64:da:45:75:86:6c:3d:e0:ee:21:54:b8:
                    21:ef:6b:b9:b5:91:ae:9c:5c:12:84:a2:e2:61:3b:
                    f6:df:62:6c:ed:12:79:ae:89:7c:8a:a0:7b:ad:d3:
                    af:3d:24:f6:db:52:06:f5:d0:f5:c1:5b:97:f4:e9:
                    c0:d6:97:99:64:71:79:fa:6f:21:b1:c5:cc:02:08:
                    0b:4b:1c:36:e4:e7:2d:54:a4:79:0c:7d:56:48:0f:
                    ab:ab:0b:d2:3a:5f:a6:a6:bd:41:1c:50:1f:b9:39:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:37:E9:3A:A4:4A:67:8D:A0:3F:1E:F8:F5:40:A7:5E:35:E5:BE:69
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:85:73:0e:dd:ff:29:2f:e4:45:ad:54:53:97:e1:ed:57:11:
         2e:97:0b:c8:c1:30:a9:54:bc:10:b2:26:4d:91:4a:37:7b:bf:
         07:18:14:04:81:2d:0a:f5:7f:d3:40:b0:87:7d:16:6a:dc:3c:
         ce:83:2b:49:ea:f3:e6:5e:7b:42:14:54:48:a7:08:75:48:a3:
         31:dc:6e:96:d2:0b:50:fd:81:6d:28:d2:10:99:2c:ef:d7:7e:
         58:c6:d4:98:2e:f1:90:da:af:d7:84:c6:d4:70:71:6b:40:8e:
         6a:70:79:91:15:30:3c:7e:48:14:ab:5f:52:67:62:6a:66:89:
         97:d4:31:9f:02:d7:20:58:05:3a:98:3e:2d:54:19:79:a8:b6:
         0e:cb:7f:bf:5d:32:76:8f:41:5e:2a:40:d1:c2:a3:24:ea:bb:
         11:c1:01:28:e7:0e:ec:02:c9:c0:77:ad:98:72:d7:a9:b2:ab:
         df:05:1a:1c:42:bc:13:8c:a4:d4:a6:38:d8:bc:87:ce:f7:ca:
         4e:f8:48:b5:a3:e3:72:e0:9d:1b:77:1c:42:37:19:b7:0f:67:
         4f:26:a7:8e:66:85:3f:4f:3d:df:62:6d:f9:39:bb:0a:94:1a:
         4b:e4:75:0e:0d:bb:8f:d8:ca:64:cd:80:0d:70:c1:07:c8:a3:
         ac:b4:2a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:54:07 2024 by rpki-client on console-fra.rpki-client.org