Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File:                     j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier:          hBZFBRXvYtoUEKXj+t/diSjJCV/WzXwG6LSqG7uKHA4=
Subject key identifier:   88:65:97:14:11:E5:8B:6B:6C:D9:80:B9:24:87:65:85:CB:6E:81:6E
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer:       /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial:       018F8749F37035F5B6F90CE4782EA0FB707B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number:          0E52
Signing time:             Fri 17 May 2024 16:02:01 +0000
Manifest this update:     Fri 17 May 2024 16:02:01 +0000
Manifest next update:     Sat 18 May 2024 16:02:01 +0000
Files and hashes:         1: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: 0W4I4B0A+A+oAAKNnR2RJpJTHB0bEmjm4+WRX6+IWc8=)
                          2: y5lN1Br1U5sMnwQLEgeYSeqvKCo.roa (hash: Oxn/Ms5LcRmxmZYfamVA4qCqFYUbsMy9KzZoqwNnvJQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f3:70:35:f5:b6:f9:0c:e4:78:2e:a0:fb:70:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
        Validity
            Not Before: May 17 16:02:01 2024 GMT
            Not After : May 18 16:02:01 2024 GMT
        Subject: CN=8865971411e58b6b6cd980b924876585cb6e816e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:78:49:a4:b4:b1:9f:54:a8:7c:48:d1:27:f7:
                    d3:ff:7f:53:03:18:8e:3e:b4:1f:24:27:73:81:01:
                    14:23:59:24:2e:75:e2:90:b9:07:a0:6c:89:4c:cd:
                    b4:7b:f8:c4:08:11:86:cf:43:15:98:fd:9c:cf:63:
                    ce:84:b1:37:2f:a5:0e:49:d2:65:04:7f:eb:5f:c1:
                    b4:12:5b:b9:3e:78:a8:15:f2:6e:5f:02:8f:62:b2:
                    8b:1c:66:75:a0:bd:31:10:38:8a:c9:53:8c:7b:27:
                    69:84:13:a5:bb:73:ef:f7:79:91:5e:9e:68:5e:98:
                    c3:fc:77:39:ea:d9:fb:7c:e3:20:68:9a:58:07:39:
                    74:6b:0e:c7:f3:ba:d7:9d:e5:88:fd:3b:dd:7d:f4:
                    fb:62:47:92:69:45:34:8c:75:80:fa:dc:54:7a:a3:
                    ef:0c:74:aa:ff:77:08:d3:a7:09:4c:0d:d8:d9:fe:
                    75:8f:11:d7:1a:02:62:eb:32:ca:b7:21:bb:4a:4b:
                    29:fe:7a:bb:64:5d:d7:e1:af:83:08:66:15:20:70:
                    dd:1b:46:31:70:13:ad:1c:16:0d:94:4f:41:c7:3e:
                    7a:d3:21:cb:46:e9:d4:10:9c:5e:02:9c:ef:77:1f:
                    27:e5:80:2f:dd:3c:14:42:e0:fe:65:bf:44:43:03:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:65:97:14:11:E5:8B:6B:6C:D9:80:B9:24:87:65:85:CB:6E:81:6E
            X509v3 Authority Key Identifier:
                keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c5:be:0c:89:ef:29:43:ad:ab:40:eb:38:3f:26:bd:db:ea:
         a6:b5:80:68:f3:4f:49:4f:25:8a:02:f6:f1:db:fa:92:89:07:
         c0:1f:4e:1d:85:9b:17:ef:60:dd:ef:0c:ed:28:9f:61:2a:29:
         ca:5e:32:1a:b9:8c:4b:e5:9a:41:39:25:6e:7c:11:70:09:1d:
         3c:10:eb:b2:dd:8e:fe:9d:a3:eb:4f:35:c5:3d:9e:2f:d0:7c:
         f3:c8:7f:8a:65:8e:71:7c:ec:c7:3b:0d:40:69:06:b2:57:8c:
         f6:23:6e:ef:7d:81:a6:da:f0:8f:b3:ad:02:d0:c2:ce:db:c7:
         bc:4f:8f:88:57:35:3d:7e:88:52:3a:0a:49:ad:2b:ac:98:f6:
         7d:77:06:1c:db:bd:76:6a:61:11:99:29:f5:d6:b9:a5:b0:5d:
         f2:f8:04:5e:e0:9f:d0:5a:c4:10:b8:60:95:73:05:7a:e9:e4:
         8e:9e:10:29:8f:d4:94:81:6d:31:05:a9:1f:40:08:83:38:46:
         2c:38:81:0c:a2:6f:11:58:14:b5:d3:96:6b:49:c5:e9:fc:6c:
         c7:8c:f8:f3:d5:6c:45:2c:ce:d4:9a:1b:8c:e4:8d:ec:b5:8d:
         7b:5e:fd:96:07:20:8a:bd:ce:5e:97:02:b6:dc:39:b6:a5:d7:
         c5:5e:9a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:11 2024 by rpki-client on console-ams.rpki-client.org