Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
File:                     JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json)
Hash identifier:          XCpD/VYZKTxTt5qu+/vQGZKEEeIPLhlKuHP7duTxyhY=
Subject key identifier:   01:8A:49:D3:4B:D5:55:90:5B:77:CA:F9:06:80:1E:3F:C7:73:9C:6B
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Certificate issuer:       /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial:       018F874A823451258C065E2618A1B041C950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
Manifest number:          114C
Signing time:             Fri 17 May 2024 16:02:38 +0000
Manifest this update:     Fri 17 May 2024 16:02:38 +0000
Manifest next update:     Sat 18 May 2024 16:02:38 +0000
Files and hashes:         1: 1-YREF94QmMW_M6JolbcBG-HWe-s.roa (hash: 938CmReoihnHJeIsQxcgesd9caTwo8ryh+IsxEtuYDo=)
                          2: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: ilpH85Keh2mC8i0+XSYlkL+65H2P6q18lFhijo2ohPs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:82:34:51:25:8c:06:5e:26:18:a1:b0:41:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
        Validity
            Not Before: May 17 16:02:38 2024 GMT
            Not After : May 18 16:02:38 2024 GMT
        Subject: CN=018a49d34bd555905b77caf906801e3fc7739c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:f9:5a:79:37:cd:d5:18:ed:c8:64:ff:27:
                    a0:11:a9:fe:1d:e1:30:4d:26:89:54:6c:99:d1:33:
                    b8:a8:80:24:3b:c3:0b:d5:a5:7b:ad:d5:c0:32:ad:
                    37:15:0b:73:43:6c:46:5d:8b:40:ea:ac:2b:90:90:
                    a4:1f:45:ec:61:f0:2a:78:d4:33:ff:5f:cc:2f:25:
                    e8:08:f0:17:05:95:18:ea:b9:1a:76:dd:e6:59:11:
                    53:ad:e6:fd:1b:88:19:f7:d8:80:8a:8f:e5:b1:dd:
                    4a:83:4f:8f:20:d7:9c:21:0c:40:7d:16:18:ab:41:
                    cb:79:4d:f1:05:a2:21:4e:88:26:af:f8:73:e1:ae:
                    99:bf:e9:88:fa:ab:1c:44:a5:bd:37:bf:59:f4:26:
                    69:66:a5:de:80:1c:ff:1a:89:4d:67:81:b2:e9:aa:
                    87:f0:fc:76:4b:1e:6d:04:6e:0e:d9:9a:eb:33:30:
                    c5:f5:7c:de:ae:16:de:53:bc:2c:23:37:47:4c:e2:
                    89:6d:5c:bd:28:34:d6:18:5b:09:c3:0c:6f:9e:6b:
                    c5:1c:eb:3f:7a:ae:ee:4d:05:82:b9:8e:77:ea:41:
                    54:d4:ff:c6:36:ba:ba:0a:aa:60:04:6d:ed:f4:d5:
                    cb:50:ec:08:e9:49:06:cd:16:d5:f1:d1:66:e0:91:
                    a0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8A:49:D3:4B:D5:55:90:5B:77:CA:F9:06:80:1E:3F:C7:73:9C:6B
            X509v3 Authority Key Identifier:
                keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3c:af:43:f6:03:f1:d7:13:93:23:84:7f:5a:e1:37:fc:b4:
         55:7f:81:c5:69:dd:b8:65:92:c2:54:f5:e5:19:80:ec:d0:79:
         f0:6b:b4:b1:af:3d:15:0d:e1:87:d0:81:3c:25:47:6b:ea:d4:
         98:02:ca:71:06:11:44:1c:de:07:8d:fe:63:f9:3f:56:d4:d4:
         31:77:2d:a5:68:0e:0f:80:01:1b:f3:63:ed:a9:6a:3b:ec:40:
         2f:53:d4:64:f4:34:83:d0:c5:3c:7b:11:c2:e6:f1:1c:34:0b:
         04:a7:5a:5e:4c:69:ba:cc:52:f1:77:0a:8b:e5:e9:3b:08:c7:
         2f:ef:9f:2f:7f:81:75:ea:9e:29:58:4e:74:07:ea:20:44:0b:
         f6:f5:d9:0f:98:90:e7:dc:6b:75:72:5c:e3:c6:72:a9:0d:04:
         3a:60:48:29:8a:2c:5b:f4:bd:33:9f:5b:4e:59:e6:d6:5e:92:
         1e:16:f4:88:0b:19:29:ac:cb:69:58:53:07:c1:53:60:1b:60:
         04:d9:c5:f6:c9:a7:52:e2:d6:4f:ea:0a:c1:18:42:c0:50:d6:
         fd:76:70:22:3a:93:ea:a0:71:fd:5d:af:49:fe:96:d5:e8:a5:
         fd:1b:ab:df:c4:82:7e:7f:1e:95:87:9c:c7:f7:97:b0:02:d2:
         44:6c:68:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:16 2024 by rpki-client on console-ams.rpki-client.org