Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.mft
File:                     JDdzbm9VkArb-wRWxBZPZ7RTrI8.mft (raw, json)
Hash identifier:          t/1Z9cT6HRM+NpH9y4JsyS0eAKNGW6AKKXlse4d4bZ4=
Subject key identifier:   7A:CC:98:8E:1C:93:44:4E:1B:24:5D:6C:C5:42:DC:5C:11:9F:FD:8B
Authority key identifier: 24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
Certificate issuer:       /CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Certificate serial:       018F87114780ACA1CEE2BF72C60CF6E3527A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.mft
Manifest number:          09AC
Signing time:             Fri 17 May 2024 15:00:07 +0000
Manifest this update:     Fri 17 May 2024 15:00:07 +0000
Manifest next update:     Sat 18 May 2024 15:00:07 +0000
Files and hashes:         1: 2J9K2FUlpVlcpkAGKDiXseJyyCg.roa (hash: cxiu71fn6O5GUI9ovPHE7VnEOxABH145Di8EU0jUuGE=)
                          2: 7_KE4XYIRmTg0rFDA0LxDtjDp3s.roa (hash: KAOhj08UVCaw7SycVpuezBaw6H+lsIi6zxeRxXhVeOI=)
                          3: DsRkFERg3safkrDbHQgR2WE6irI.roa (hash: FlIuzROuwU5rHrxY2Sgd5Z3T0xShaWYQyIPOnsjMPmk=)
                          4: JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl (hash: 0nABFc2W/5lhDdzAYmQjNXZa6DVc0YTk78SoNlrjrk8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:47:80:ac:a1:ce:e2:bf:72:c6:0c:f6:e3:52:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2437736e6f55900adbfb0456c4164f67b453ac8f
        Validity
            Not Before: May 17 15:00:07 2024 GMT
            Not After : May 18 15:00:07 2024 GMT
        Subject: CN=7acc988e1c93444e1b245d6cc542dc5c119ffd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:ca:31:6e:d3:55:50:2b:d7:35:52:55:7a:
                    3e:0f:cc:e2:d5:ad:91:fb:28:d2:61:0c:02:9f:e9:
                    1b:7d:16:c2:d2:c3:8a:b6:6e:b0:0f:95:5e:03:b8:
                    0f:c9:dc:10:c3:31:8b:93:4c:06:ee:b2:01:b1:df:
                    9e:55:36:fb:31:35:2a:9f:72:1f:dc:ba:ee:60:e6:
                    4c:e1:78:b3:37:33:b6:ff:5c:f8:db:be:11:b4:44:
                    2d:ad:4b:f6:98:fc:cc:11:ed:10:d5:9a:58:ef:11:
                    1e:85:ab:31:4a:8f:bd:95:16:c6:ea:88:da:3a:d3:
                    97:f4:a4:7d:c2:2f:12:c1:22:14:3a:70:22:b3:ff:
                    8f:b8:c2:12:2d:8d:43:45:78:c3:68:f2:ca:ae:6d:
                    5d:40:6e:8f:01:44:ad:b3:fb:53:65:6b:2e:b2:b3:
                    dc:9e:61:69:e0:1c:5a:a3:ac:b6:56:66:b3:44:a2:
                    d0:6d:3a:7a:2f:88:9c:13:d7:43:2c:cc:2e:0c:57:
                    22:6c:f9:a1:7f:a7:f1:0d:ab:a3:bb:86:18:f6:06:
                    e1:df:a0:44:40:15:17:8b:99:4e:3b:5a:84:d2:84:
                    81:85:19:4a:23:d8:5c:c4:42:b3:f6:f6:36:45:17:
                    0c:ee:fc:7f:fc:6d:24:1e:c8:71:31:ad:ba:ba:ce:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CC:98:8E:1C:93:44:4E:1B:24:5D:6C:C5:42:DC:5C:11:9F:FD:8B
            X509v3 Authority Key Identifier:
                keyid:24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:4e:83:ce:cf:c4:be:b1:75:07:64:e4:5a:44:8b:93:88:
         9d:5e:b9:5e:35:32:3d:8e:be:96:07:64:e6:fe:8b:fb:a8:0f:
         52:69:b1:e6:e4:c7:31:e6:d6:b9:e3:1a:b3:89:57:15:87:df:
         d7:b3:6f:ae:cc:63:4f:68:f1:49:6c:8e:47:24:09:d2:6b:ea:
         9c:09:fb:8a:08:24:4c:64:10:35:bb:7e:c6:31:75:6d:25:ec:
         5e:d7:f3:6a:59:36:d0:fa:b1:f9:41:ab:ee:b2:69:38:ff:0b:
         a4:08:c9:06:bb:7b:c2:0b:5c:b6:8d:00:77:54:db:85:f2:1c:
         f2:3b:5a:fc:15:37:38:6e:bd:0b:2e:49:db:28:5f:c5:c3:bd:
         f1:a0:9e:ed:b1:0b:c5:00:31:75:b6:1c:8c:89:be:f9:21:5a:
         74:a7:4b:88:8d:3d:e9:db:6f:fc:4b:0c:91:e3:5e:2a:46:27:
         71:2e:9c:4c:23:d3:6a:24:e3:0d:c8:7a:c0:d6:15:bc:90:2f:
         2b:c0:1b:d7:b4:e0:69:56:74:43:27:da:2a:6a:8e:62:73:6b:
         bd:08:6f:d6:9a:e6:82:40:20:81:3a:ff:a7:8f:1d:c9:5b:63:
         7e:a7:9e:28:99:fc:88:aa:46:c5:26:7a:3b:fc:3c:e4:9c:94:
         36:f9:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:06:39 2024 by rpki-client on console-ams.rpki-client.org