Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
File:                     jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft (raw, json)
Hash identifier:          DeNY82E9VrOsvyr5eJc8i9g4aOaCiVMSipC20eJRyQc=
Subject key identifier:   F4:FE:D6:F2:D8:6F:59:D2:67:84:62:06:8D:46:3C:27:ED:9C:34:01
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Certificate issuer:       /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial:       01947CEF37FFB3E5E1D9FA4B0B7D406BCE2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
Manifest number:          0706
Signing time:             Sun 19 Jan 2025 05:00:39 +0000
Manifest this update:     Sun 19 Jan 2025 05:00:39 +0000
Manifest next update:     Mon 20 Jan 2025 05:00:39 +0000
Files and hashes:         1: jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl (hash: UyLAi+82crqfVQg5diWOsAoibS2vlJzvPwjWmO+PUzo=)
                          2: tGF0KepWs_QQSq5Gqg3jdlf7Wg4.roa (hash: TESttPZc3JvCUN0ojsF44ZWR9WcYNw/S3gDe81zvl7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jan 2025 05:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:7c:ef:37:ff:b3:e5:e1:d9:fa:4b:0b:7d:40:6b:ce:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
        Validity
            Not Before: Jan 19 05:00:39 2025 GMT
            Not After : Jan 20 05:00:39 2025 GMT
        Subject: CN=f4fed6f2d86f59d2678462068d463c27ed9c3401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:53:d2:33:59:16:02:b0:4d:4e:2e:99:c8:
                    df:c3:78:f7:68:f2:ea:09:cb:4a:ee:3c:9f:34:de:
                    f6:ee:d2:82:27:40:62:15:b5:54:16:98:67:c2:fe:
                    77:7d:42:3d:97:70:2a:75:c4:db:e2:93:ca:c2:16:
                    b8:1a:17:90:90:2a:fd:db:0b:42:f7:a7:ae:2f:6b:
                    88:fc:f3:30:ed:8a:07:d7:91:86:33:34:35:a6:2d:
                    49:c8:4f:b4:ef:fd:35:40:64:36:08:51:5a:57:c5:
                    45:bb:37:20:a7:63:cd:9e:08:cf:9b:ce:bf:1b:93:
                    3e:f6:02:4e:39:31:b5:da:2f:1c:54:2d:e8:f5:4e:
                    5a:aa:d3:55:c0:d0:42:b2:3c:e4:f2:b2:62:6f:78:
                    21:63:ed:cd:b5:f3:52:da:42:92:fe:26:5c:cc:d4:
                    ec:bb:a0:ba:a0:66:13:c8:38:bb:c6:c6:7e:96:bd:
                    5e:d1:b0:c3:ab:51:b2:d6:99:85:4c:85:fe:41:9d:
                    57:16:68:f4:64:e3:a2:a3:fd:55:14:33:74:02:62:
                    13:35:3a:10:0b:46:09:5b:48:c6:c0:f6:cc:51:e7:
                    ea:d2:88:8d:3f:b0:0e:49:c6:ba:76:d4:32:8c:bd:
                    6e:cd:b9:5c:c1:24:8c:c3:48:5a:ff:64:47:33:0f:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FE:D6:F2:D8:6F:59:D2:67:84:62:06:8D:46:3C:27:ED:9C:34:01
            X509v3 Authority Key Identifier:
                keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1d:e2:c1:17:ed:76:92:5f:3c:1b:82:cf:c8:2b:62:75:40:
         90:21:fb:e6:29:1b:c2:aa:38:3f:88:d5:0c:be:3e:5c:f7:6c:
         68:54:1c:89:e6:4a:67:c0:cc:90:76:56:09:b6:17:0d:a4:61:
         ab:cb:6b:7c:2b:52:5b:d0:bd:13:70:0f:ab:68:fd:ce:f3:ed:
         ea:30:a2:83:4d:85:37:7c:6e:fb:23:d2:45:3a:af:ec:b2:09:
         58:ed:f1:c8:4f:fd:06:b3:d7:d7:e5:f0:a4:c5:40:32:5a:76:
         97:75:27:32:cc:71:3d:2f:af:be:cb:a9:23:b6:1a:bb:79:e6:
         36:3d:e4:76:14:71:a3:0d:17:15:32:6a:dd:8a:eb:92:49:be:
         21:17:4b:8d:e7:42:6a:ce:43:65:20:67:81:d4:ff:26:32:76:
         b1:de:03:72:a1:9c:27:63:fe:56:65:33:f9:fa:79:b9:a4:1a:
         25:b1:da:4b:16:2d:d2:c4:65:a5:ba:b6:a4:0f:ff:62:2c:f2:
         10:3c:4b:e9:4b:66:26:84:b2:18:39:36:ea:df:e0:e1:f0:54:
         91:1c:0c:db:72:05:a6:aa:bb:fa:86:fd:7b:59:1a:dc:95:2f:
         35:6f:69:a0:3f:0a:e9:71:f0:70:ec:63:73:58:43:14:d2:a4:
         ba:50:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 19 10:02:38 2025 by rpki-client on console-fra.rpki-client.org