Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File:                     jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier:          pd+f5pwZUEI94qN0nGiOnyOncGkluFfxMU+Ou6EzLPI=
Subject key identifier:   39:BB:8B:1E:21:D0:85:05:59:A1:7B:4B:2A:B7:B8:69:71:0B:2D:71
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer:       /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial:       018F874867CECFBF7BCC8ED7FE8B0C9FBA8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:20 +0000
Manifest this update:     Fri 17 May 2024 16:00:20 +0000
Manifest next update:     Sat 18 May 2024 16:00:20 +0000
Files and hashes:         1: 4i1V55osIwjerc4Ci4M2UPpCaec.roa (hash: BRBqlMg5goGVMzHwmwO4dVEfIaqrPx34524cSrnFBuY=)
                          2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: m2imZCDJQlrJeY9SF9BGTr2wBSGIbxfpopFEZE6j3RA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:67:ce:cf:bf:7b:cc:8e:d7:fe:8b:0c:9f:ba:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
        Validity
            Not Before: May 17 16:00:20 2024 GMT
            Not After : May 18 16:00:20 2024 GMT
        Subject: CN=39bb8b1e21d0850559a17b4b2ab7b869710b2d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:fa:16:f2:e0:95:6a:06:f9:48:e8:fe:2b:
                    78:8c:f3:69:ba:3a:fc:ae:6b:7e:61:6e:d9:4a:36:
                    a4:55:a2:e3:a9:a4:4e:02:d7:ef:d4:fb:ba:c1:a3:
                    82:dc:43:30:6e:9e:e2:59:09:7e:f6:a4:c0:2b:4e:
                    c7:55:ff:b4:7a:21:cc:3c:7d:d4:af:87:57:93:e7:
                    a9:79:45:dd:2e:7d:d2:9e:29:f8:a4:e4:42:ba:ba:
                    79:a1:87:d3:2f:e8:42:13:69:1c:37:0e:d0:36:a6:
                    a3:8c:07:31:21:74:6a:5a:f9:81:28:aa:5f:54:f2:
                    06:26:60:29:4a:7c:5b:8c:b0:3c:9b:ab:32:3b:89:
                    a6:69:1c:61:b1:d4:74:4d:c5:d0:2c:2f:1f:c9:ce:
                    27:9d:24:4f:e8:39:3e:4f:98:52:69:88:d6:c2:af:
                    e4:56:9d:36:f5:71:cf:75:24:64:29:0d:ee:22:1d:
                    6f:4f:a1:bc:37:8b:f9:28:6c:5b:3b:e0:ce:57:d6:
                    bc:2c:68:27:00:d3:45:a3:33:d1:8d:75:91:33:9b:
                    a3:b5:00:e4:ab:4c:85:57:d7:42:62:15:02:85:6e:
                    be:55:83:d9:c0:98:69:fb:a6:b6:11:db:ed:fb:8f:
                    03:6c:b4:c1:25:3c:34:78:cf:7a:ad:8a:50:81:4c:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BB:8B:1E:21:D0:85:05:59:A1:7B:4B:2A:B7:B8:69:71:0B:2D:71
            X509v3 Authority Key Identifier:
                keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6a:fc:5f:c7:fe:96:68:01:04:8b:f9:ed:91:78:ea:9e:51:
         47:cd:67:15:02:53:db:a2:d4:5d:c8:8b:aa:a5:de:29:b8:c6:
         3b:86:2b:bf:04:9e:71:ce:e1:4d:87:b4:6b:4d:6d:fd:83:8b:
         7c:cb:86:57:b3:e7:7f:5f:65:e7:45:88:0a:d2:8d:0c:ad:ae:
         d4:43:8f:63:fa:50:73:c0:64:2d:74:7e:4a:b9:31:02:a6:15:
         c7:c7:a0:d1:14:8e:aa:91:ce:92:f4:38:b3:87:71:85:e7:dc:
         b3:5c:20:35:96:a5:9d:95:2f:4f:b3:49:24:79:3d:c1:b1:af:
         e6:4c:6c:9a:5d:47:35:75:19:4f:96:25:2c:49:c1:88:f3:91:
         7c:27:bb:d9:7f:27:8f:8b:b0:de:41:8c:22:b4:8d:d1:cc:89:
         d0:88:37:d2:45:69:54:af:98:3b:61:84:e5:15:49:2a:3a:e1:
         c5:a6:99:69:03:34:5f:6a:8c:ec:27:60:df:d8:4f:b1:f8:a1:
         b4:00:70:f7:1c:7f:ce:f0:ae:e5:9a:f3:6e:f8:ad:42:08:17:
         20:1d:52:6f:70:18:23:81:ba:b7:38:d9:40:f9:88:c5:2d:45:
         fa:e9:f4:ab:a9:30:1e:7a:44:dd:fd:32:41:02:b4:5f:50:c3:
         94:fd:49:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:02 2024 by rpki-client on console-ams.rpki-client.org