Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File:                     JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier:          bduSKqAi4LJwCHjIyYUj/ULTkUl71TupnkxvberMGIc=
Subject key identifier:   B0:72:6D:7F:EA:E0:38:9E:50:DE:C5:24:7A:44:9F:36:FB:9B:ED:73
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer:       /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial:       018F866CB36D2818FCA0157CB06899D3F788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 12:00:21 +0000
Manifest this update:     Fri 17 May 2024 12:00:21 +0000
Manifest next update:     Sat 18 May 2024 12:00:21 +0000
Files and hashes:         1: 56N6B3-gvwOPEjNUvkIfxmMdw3k.roa (hash: /ELQMQEhPlK5qyGwB7MViUfTphNFYtL6TicCkDlhPrg=)
                          2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: LpDy/Xqw3uUIQuYUT1EZpFNc4GPL6gsGynteSy7Imp8=)
                          3: ZraCt9rw4rZB9JyRU3cNDOCETz4.roa (hash: xGAJ+IyVzPvcLg19he0kfxZQeDI08JeM2n9Zt7eL7/4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:b3:6d:28:18:fc:a0:15:7c:b0:68:99:d3:f7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
        Validity
            Not Before: May 17 12:00:21 2024 GMT
            Not After : May 18 12:00:21 2024 GMT
        Subject: CN=b0726d7feae0389e50dec5247a449f36fb9bed73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:12:25:ee:8b:57:23:11:3e:6b:08:ad:87:
                    a2:52:08:1f:d6:ea:a3:c6:a9:55:2d:69:93:70:7f:
                    56:4d:d4:64:a0:95:54:2f:45:3e:81:90:f5:2c:a6:
                    33:b3:a5:29:25:95:2c:6f:d6:d3:a8:25:e8:6d:2e:
                    65:51:0e:f0:4b:fe:c8:c3:83:c5:52:cf:a5:d3:7e:
                    78:95:38:f5:91:d4:40:e6:8d:89:92:9d:69:1e:60:
                    b9:98:86:88:a4:78:14:56:90:3b:f9:6f:c7:b6:bc:
                    5e:32:83:c7:3d:b0:97:39:e8:68:a4:a2:92:fc:84:
                    da:1c:83:fc:b7:90:c9:b6:be:0f:fc:72:52:01:60:
                    48:38:e3:8e:c9:73:bb:a8:94:98:4c:9c:ed:27:aa:
                    30:16:05:b2:d9:3a:73:c4:94:b7:61:28:33:91:93:
                    67:c5:4d:fb:34:aa:5f:58:5d:a3:23:62:47:02:85:
                    2f:4b:69:ac:5d:b5:cf:ea:8e:83:ad:5a:35:ca:be:
                    de:6a:ca:f4:9a:60:a8:7d:f7:e3:42:61:46:ff:35:
                    59:6a:a4:fc:95:b1:35:6e:9c:7a:d1:1f:ab:13:6f:
                    c4:4f:f3:52:58:bc:85:24:b7:d3:76:3a:54:81:fc:
                    5f:b1:e2:e2:69:fe:53:b0:4f:59:5f:43:a4:c3:ce:
                    67:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:72:6D:7F:EA:E0:38:9E:50:DE:C5:24:7A:44:9F:36:FB:9B:ED:73
            X509v3 Authority Key Identifier:
                keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a7:1b:43:2f:e2:c8:b7:c7:31:ac:61:98:16:a2:a3:63:72:
         02:b1:0a:5b:09:28:48:a9:ab:1a:24:08:9d:93:a4:e0:1c:52:
         4f:98:71:55:b0:3b:ba:d3:fd:eb:0c:2d:8f:1f:8c:e2:c0:49:
         4d:d4:84:53:56:ad:17:a7:16:ba:29:44:1b:06:dc:2d:5e:af:
         87:39:6c:bf:a9:20:05:f5:4c:15:62:34:00:60:c4:5f:42:be:
         50:55:e3:ca:3e:e8:d2:cb:c2:e7:51:59:ae:01:fc:5c:10:f2:
         ec:5f:5d:2e:9f:7b:a6:08:0d:02:88:a8:cb:9e:70:0f:54:e4:
         5a:39:bc:e5:8a:61:aa:d9:a8:41:f4:c3:4d:e4:1e:e3:db:9e:
         bb:fb:a9:28:93:5b:d9:9b:bd:8a:00:9c:31:2f:10:87:23:e6:
         97:ee:a8:50:70:ac:4f:ba:b3:ea:77:6a:20:79:8b:43:58:c3:
         e6:31:46:b1:58:e8:14:a6:48:36:23:10:a2:1c:d7:05:cf:35:
         e8:1a:96:27:5c:75:b0:2a:b3:be:7b:93:bf:cf:92:b3:44:ac:
         1f:24:db:df:f2:b8:10:10:a4:e8:37:c3:09:5e:d9:22:c9:65:
         2f:2b:a8:f0:8a:05:12:59:4d:3e:11:cf:46:cf:31:e6:d5:fd:
         12:65:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:19:21 2024 by rpki-client on console-ams.rpki-client.org