Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File:                     jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier:          1WtysGcnrxf6CRd25fTXqZI8ar2S297fQ82qRCVm650=
Subject key identifier:   BF:8F:7A:EA:29:25:84:CD:56:BA:85:F3:89:A4:A1:1D:5A:C3:B4:2F
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer:       /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial:       018F874AB8A78D50252F22232A958CB4631E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number:          0CD2
Signing time:             Fri 17 May 2024 16:02:52 +0000
Manifest this update:     Fri 17 May 2024 16:02:52 +0000
Manifest next update:     Sat 18 May 2024 16:02:52 +0000
Files and hashes:         1: FYEnXPltTK7x-Tm558OZ166qvsY.roa (hash: XYYAJZjWbPjgIAPPpWW8vwmDlQPwIsR5XksKgSWl2Yk=)
                          2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: jHyQff9MFNRArOTrPNhzpvrf+Zk/q6bj2h0o1Egc9MI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b8:a7:8d:50:25:2f:22:23:2a:95:8c:b4:63:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
        Validity
            Not Before: May 17 16:02:52 2024 GMT
            Not After : May 18 16:02:52 2024 GMT
        Subject: CN=bf8f7aea292584cd56ba85f389a4a11d5ac3b42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:44:67:d7:a2:04:23:b3:5c:f5:eb:43:0f:
                    22:01:00:f3:32:8a:c7:3a:e4:9a:5b:19:82:ee:ad:
                    d7:8c:5b:7f:a0:2c:cd:ff:c0:7d:f3:29:3f:df:e4:
                    fa:26:1f:5f:cd:d5:ac:6f:52:4a:1b:41:25:bb:21:
                    ba:39:80:ff:23:e5:89:fe:1e:41:cd:2f:3f:a6:20:
                    5a:4a:05:3c:62:76:b4:c3:0c:18:68:6b:12:12:a8:
                    d7:ce:87:bb:a0:92:32:22:0e:1c:69:28:ad:8d:e5:
                    a3:fd:ac:f0:a6:67:81:7d:a0:76:1d:42:71:53:f2:
                    e7:d2:0e:cf:e8:18:aa:83:54:7b:2e:94:21:92:15:
                    bb:b8:0b:7d:f9:9a:b3:f3:b1:80:ca:6c:e9:57:49:
                    0e:45:88:d9:42:d5:0b:6a:8b:d6:72:7f:e9:e6:6c:
                    e2:86:53:b6:43:fb:e4:63:04:e8:f8:18:21:cc:c2:
                    45:75:65:c2:55:1c:6e:ba:ee:69:8a:c7:cb:e7:d7:
                    74:99:2e:5c:6a:89:2f:61:45:20:3d:96:9b:8b:18:
                    31:d8:61:32:87:49:a0:0e:68:dd:52:35:bd:30:dd:
                    e0:e7:42:0a:4e:80:78:b1:4f:77:d8:0b:a0:1c:28:
                    9c:68:6a:84:e6:d7:17:f8:d1:ab:70:80:d1:11:31:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8F:7A:EA:29:25:84:CD:56:BA:85:F3:89:A4:A1:1D:5A:C3:B4:2F
            X509v3 Authority Key Identifier:
                keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9a:2f:36:5f:a5:e4:3d:12:e8:e4:a2:64:ed:71:3b:55:0e:
         0d:18:77:d5:e6:09:4a:e1:22:c3:31:4f:15:f3:8e:53:46:dd:
         7d:bc:e3:25:77:c5:24:73:72:38:32:58:65:70:52:c0:7a:9e:
         cf:6c:b3:61:a6:3a:b9:14:a2:bd:48:04:84:e7:62:0d:13:11:
         ee:95:36:4f:03:e9:58:93:6e:a4:d9:89:f6:1c:fe:1d:4f:fc:
         f2:6e:c4:e6:80:f4:ab:d7:2d:51:ed:c3:0c:92:1c:08:d6:97:
         77:32:5f:24:0d:93:47:16:e7:c3:25:ba:52:61:5d:fe:ec:68:
         51:06:37:35:76:32:64:01:d9:0c:6e:6c:33:ad:8d:c6:09:71:
         d2:59:54:37:89:fb:14:dd:22:aa:11:19:24:19:9e:81:5a:3c:
         54:2a:02:08:41:b2:9b:ac:59:40:d8:27:77:2e:b3:ca:80:c5:
         ee:59:03:5b:29:90:c4:e3:ab:ad:43:36:3f:66:cb:fc:49:7a:
         26:c7:27:e8:80:0d:bc:59:5f:c8:75:21:f2:31:4c:d6:1e:e0:
         0e:84:e3:74:e9:f1:4a:52:44:ac:a5:a6:cd:5b:a0:42:76:e2:
         f6:ab:62:f6:bd:5f:d1:70:1a:4b:90:a9:5b:bb:53:7e:82:1c:
         87:c1:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:00:46 2024 by rpki-client on console-ams.rpki-client.org