Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File:                     jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier:          jbJDvam87DukNT31C36SpmCKZt+liROJ4ghy+W7lj48=
Subject key identifier:   62:88:6D:8F:90:8E:58:21:DB:8C:2F:87:04:08:12:91:06:EE:E2:ED
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer:       /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial:       018F88927EA802876DFD74B9E4BB613CE8A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 22:00:52 +0000
Manifest this update:     Fri 17 May 2024 22:00:52 +0000
Manifest next update:     Sat 18 May 2024 22:00:52 +0000
Files and hashes:         1: UiFvEwu7zsW-6l12aWIPnZLm6aE.roa (hash: SooOsU7dRbaCMIqA0JDLJEaKuJ2iYt+EVKmLhFvVphg=)
                          2: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: DVKdTRhuHyllgy5KmhP250PzAovT2smsJnXIlpPQzGA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:7e:a8:02:87:6d:fd:74:b9:e4:bb:61:3c:e8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
        Validity
            Not Before: May 17 22:00:52 2024 GMT
            Not After : May 18 22:00:52 2024 GMT
        Subject: CN=62886d8f908e5821db8c2f870408129106eee2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:c3:94:78:89:13:6f:17:8e:21:6b:15:b7:
                    94:3d:fd:9b:33:bd:e4:5d:f6:d9:1f:8f:74:0b:55:
                    e3:b5:37:dc:0e:10:88:8d:99:c8:aa:a8:4f:c1:06:
                    f1:75:8c:3b:fd:3e:cf:ea:5d:3b:b5:ef:bc:9c:1c:
                    e1:5f:29:3b:2e:2d:43:33:51:a6:09:9a:f5:aa:ce:
                    c1:b6:25:99:2e:5c:34:27:56:91:18:4c:aa:7e:65:
                    4f:8f:7b:4b:56:7b:00:30:7c:bd:88:7a:d3:59:c9:
                    a6:45:62:e3:4e:e9:04:dc:0b:38:c1:87:ed:52:1c:
                    40:9e:d1:84:b8:a4:8e:58:bd:23:b1:dd:1d:80:4d:
                    7a:43:7e:0b:09:8b:90:e3:ad:c1:cd:0e:71:c0:91:
                    c4:f2:33:2f:b3:a4:31:a1:9e:56:b3:4b:9a:8b:18:
                    ea:a1:dc:75:58:22:8c:4c:0e:b2:25:7c:3e:e5:b3:
                    aa:c9:d5:26:87:ec:da:3c:3c:0f:80:78:8f:b2:c7:
                    d3:6d:30:fd:df:bf:44:2e:35:0a:c0:aa:6a:af:61:
                    b2:32:f8:91:44:8f:c2:c2:8f:d7:fe:18:e6:e2:30:
                    96:74:fa:71:42:ff:59:8b:0d:b2:e1:a2:93:0f:d7:
                    6a:a1:f0:5e:75:ff:ce:33:92:58:28:85:75:a0:3e:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:88:6D:8F:90:8E:58:21:DB:8C:2F:87:04:08:12:91:06:EE:E2:ED
            X509v3 Authority Key Identifier:
                keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:72:54:ed:f5:86:40:5d:f7:78:b9:d9:ef:6f:e9:d5:6c:
         ed:f4:a2:e3:76:2e:41:d1:ea:6a:3b:43:37:7d:db:14:51:96:
         9b:78:e5:ea:5a:67:9c:31:35:bf:a7:16:cd:f8:46:b0:05:7c:
         54:02:f3:d7:50:53:62:f3:ab:26:8d:f1:cb:d8:fe:bb:8c:65:
         b4:43:43:7c:70:af:3b:ec:00:9b:ca:aa:01:90:3c:a4:0c:a6:
         0a:f8:cc:06:bd:fc:fc:b2:e5:0d:75:d7:4b:99:c6:74:36:e6:
         67:cd:29:21:dd:fe:16:e5:32:58:c4:e5:c3:2a:ba:64:12:18:
         1a:95:77:4e:79:d2:ac:c2:f4:6e:0e:04:bf:d9:b8:1e:14:40:
         22:93:b7:0b:d8:51:eb:1e:09:6c:9c:7b:6b:37:4c:2e:d7:14:
         74:56:51:1b:da:9b:bd:23:53:24:33:dc:72:3a:4e:48:b6:f6:
         4d:cf:6c:c0:49:f4:66:d5:da:f9:d8:43:3f:0e:e2:d1:ea:8f:
         59:58:2c:7c:a9:cb:62:94:31:79:4a:f2:6f:43:78:71:bd:8b:
         aa:d9:12:bf:af:c9:ff:ad:2e:d9:7a:08:6d:c7:4d:7d:34:03:
         3b:f3:d8:6e:31:85:2e:f1:54:d6:0e:4f:32:cb:e9:de:c7:fd:
         1b:fe:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:06:06 2024 by rpki-client on console-ams.rpki-client.org