Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File:                     JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier:          f/NekVJyO9h9P6zLeYyCkoIOsQ583MeZTMrqu6RFBK8=
Subject key identifier:   4F:AC:81:47:12:A3:96:6E:BB:FD:69:E3:85:02:6D:B7:6C:54:98:91
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer:       /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial:       018F855CC5F231F3B094D99E9159FAC88521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number:          095C
Signing time:             Fri 17 May 2024 07:03:20 +0000
Manifest this update:     Fri 17 May 2024 07:03:20 +0000
Manifest next update:     Sat 18 May 2024 07:03:20 +0000
Files and hashes:         1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: LxngGI7hk2T78yZEg8ezpDts24bgIdbjKs46HBVXFM0=)
                          2: OZLsOnF4b-1Br2AXgyfuE7fovTw.roa (hash: OpispfEnIIDiKYzwfNfUlgsy7/vfj480Ss0Ag3dfTyI=)
                          3: y8iYUkz9jYdwVRZT0iWOVSwV90w.roa (hash: sUx5I10tcOWbV7uFCL8OG8lSTWDQ6gTCWxg/sFAiDSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5c:c5:f2:31:f3:b0:94:d9:9e:91:59:fa:c8:85:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
        Validity
            Not Before: May 17 07:03:20 2024 GMT
            Not After : May 18 07:03:20 2024 GMT
        Subject: CN=4fac814712a3966ebbfd69e385026db76c549891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:0e:46:a1:b8:22:99:4e:63:7d:d3:b3:34:
                    c9:fe:d1:86:48:c9:f3:47:ca:6b:df:b8:0d:ea:7f:
                    8b:ee:ce:b7:8c:31:3e:a0:90:b0:5e:6f:86:96:69:
                    52:84:1e:d8:9b:ce:15:56:32:4e:7d:4f:0a:06:b7:
                    15:58:41:09:01:12:f0:cf:f3:5a:b6:bc:5d:d2:88:
                    7c:58:05:7b:6a:51:4e:09:c5:0a:be:c1:c1:e0:df:
                    cf:c0:0c:18:0f:fa:a0:5e:61:c5:91:6f:05:d7:ed:
                    47:2e:f4:9c:84:20:0b:77:cd:ee:c5:f9:2d:b1:3d:
                    d3:85:06:19:b5:1a:0c:51:28:63:51:dc:50:51:94:
                    41:28:a8:b1:a7:a3:b0:b0:94:d0:0a:80:f8:a6:72:
                    97:7a:23:3e:50:7c:43:cd:92:49:46:a5:90:b8:d0:
                    18:3b:53:97:69:97:1f:21:14:d3:e9:45:59:d3:e6:
                    bf:20:b7:bf:5c:35:c6:cb:2c:89:b8:57:fc:b4:1c:
                    7c:5f:19:9a:04:a8:1c:b1:7a:64:03:68:98:af:ef:
                    df:98:01:e4:52:1b:d1:8a:ee:ec:72:89:d1:b6:f1:
                    4e:5b:ce:e6:a4:76:c9:fc:de:1c:20:f0:37:77:37:
                    38:5f:6d:41:ed:84:ab:81:32:91:c6:f0:13:50:5c:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AC:81:47:12:A3:96:6E:BB:FD:69:E3:85:02:6D:B7:6C:54:98:91
            X509v3 Authority Key Identifier:
                keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5f:5d:00:cf:d6:21:47:97:46:e9:16:6b:34:88:e2:da:2d:
         14:67:c4:d3:dc:f0:81:4f:50:87:4a:f9:d8:29:df:b4:93:f9:
         79:3f:21:83:8b:86:61:c9:72:ef:25:2f:05:4e:28:22:ac:1e:
         4e:f0:75:3e:ba:a4:30:c7:9d:8a:98:3b:3d:51:ac:90:a8:d8:
         60:99:4b:f9:76:0e:ef:06:3b:6a:d2:38:b6:14:05:6a:c0:cb:
         d5:de:16:55:ff:b3:82:dd:88:cd:b1:f3:b9:f9:24:77:66:7e:
         dd:46:8e:33:65:d8:4e:3f:b3:eb:4f:5a:71:fd:d6:a0:fb:25:
         fe:e7:ab:ec:41:df:01:60:56:da:9b:a3:6a:ba:4a:74:cf:22:
         b6:11:a5:00:1a:90:93:8e:40:e9:30:ec:3f:ed:77:a1:90:c4:
         0b:df:58:f5:14:f9:bd:6e:e8:32:45:d1:a0:bd:13:d7:10:9f:
         79:ad:13:96:31:21:7d:a9:b7:50:75:f1:d9:19:21:fa:8b:d6:
         d0:38:a1:c4:48:34:83:e5:1b:7d:85:01:7c:46:1d:11:51:1b:
         56:bd:fb:ae:aa:75:25:e9:77:ff:71:bd:59:e2:c1:c8:6e:81:
         14:5e:e1:3f:42:31:ba:b6:c4:ff:9d:ed:64:ca:e2:33:04:5d:
         1d:8e:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:41:49 2024 by rpki-client on console-fra.rpki-client.org