Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File:                     jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier:          S4e4sSCQK1QT/GUmuwELrawxkzy2u1sZXhiZef3Jj6c=
Subject key identifier:   0C:5F:35:69:C3:A0:5D:D0:2E:E7:03:AF:DA:2D:FA:96:44:09:43:67
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer:       /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial:       018F874AC7AD09BA4437C1D8BB171FC851DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:55 +0000
Manifest this update:     Fri 17 May 2024 16:02:55 +0000
Manifest next update:     Sat 18 May 2024 16:02:55 +0000
Files and hashes:         1: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: RiPtTHvlY4MciPMMoOlVu7sLkdZ50TzX7KMpXVkftMo=)
                          2: x7W0IeWOFHTmFdkxE10o8br2p5s.roa (hash: bof2xPtvHuexvRcZjHwU+TOJRtPvLtvfn8SQzN+O5as=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c7:ad:09:ba:44:37:c1:d8:bb:17:1f:c8:51:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
        Validity
            Not Before: May 17 16:02:55 2024 GMT
            Not After : May 18 16:02:55 2024 GMT
        Subject: CN=0c5f3569c3a05dd02ee703afda2dfa9644094367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:25:cf:e1:c3:a0:83:62:02:f1:ed:1e:a9:
                    fb:9e:0d:98:56:f6:f7:2d:67:33:f0:59:95:83:d5:
                    00:72:62:ed:23:0b:ab:b9:bb:6d:d8:a6:b1:60:1f:
                    ad:f4:18:74:fa:7b:22:f4:3f:f6:34:97:d3:13:dc:
                    8e:40:1e:30:fc:a1:ce:bb:f6:67:65:4e:80:02:33:
                    a7:d5:b0:1c:90:39:e8:3b:3d:b8:0f:5f:89:b6:f8:
                    db:f8:6e:4f:41:62:a4:dc:b5:41:1b:87:c1:27:15:
                    54:f0:cc:bf:a1:24:70:5d:36:82:3f:75:b9:59:4b:
                    31:d7:47:d2:0a:50:b5:11:1f:9b:9b:d2:ba:a8:3c:
                    56:76:07:07:c6:8d:98:ac:45:01:46:1c:4a:07:ae:
                    64:3e:02:6e:c2:0f:09:30:6e:4a:a3:c1:67:00:b4:
                    fd:5e:53:d6:15:8c:89:b7:a3:9b:ed:0b:6d:33:b1:
                    4e:86:28:e4:ed:0a:15:1d:79:d0:38:6d:0e:38:db:
                    98:b8:8e:b9:25:4f:53:2e:75:e1:96:3d:8c:12:09:
                    9f:2f:9a:41:b1:a6:92:1a:be:2a:ed:aa:c5:e4:9b:
                    f9:f7:81:2c:7e:a3:b4:cc:6a:ae:eb:d7:f8:82:48:
                    61:52:d9:94:3c:76:d8:74:95:09:25:e6:5d:e0:7d:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5F:35:69:C3:A0:5D:D0:2E:E7:03:AF:DA:2D:FA:96:44:09:43:67
            X509v3 Authority Key Identifier:
                keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:60:cf:36:88:16:9b:9e:4d:77:9b:43:e4:c6:67:75:51:96:
         0a:a6:6c:31:92:a8:20:fb:b1:c1:ad:30:1a:9c:7a:f1:df:55:
         54:74:4e:7b:b8:56:b1:e8:0b:1b:08:d1:1b:c2:84:9b:45:16:
         9d:a6:a2:3f:25:b2:2e:e0:94:58:eb:01:91:68:e9:48:09:88:
         c5:5e:22:7b:df:c5:5f:1d:56:86:a5:0b:b9:0e:c2:f9:c9:cf:
         d7:10:28:a9:2b:57:14:4e:9b:66:53:0d:43:92:2e:39:7e:1e:
         f0:a7:f2:41:93:69:89:cc:a9:c4:cf:60:38:fa:56:94:a7:a1:
         8e:60:e5:be:39:c1:d0:65:ce:f7:fc:7e:2e:18:92:fc:ca:d8:
         02:90:be:32:8e:bd:1c:6f:83:03:e4:41:05:a2:f4:51:7a:a4:
         36:5e:96:d6:b6:c9:d5:c0:2d:4b:28:d5:9b:76:e0:dc:a0:57:
         be:18:ba:74:13:85:31:30:c8:90:24:d5:65:b9:fd:65:32:a4:
         0c:66:e9:3b:5e:fb:42:c4:21:26:fb:3b:d2:69:f4:ee:00:93:
         78:ca:45:a7:fc:e3:3d:f1:40:ac:ac:e5:91:72:b5:9e:5e:19:
         5e:5e:bf:29:80:69:3f:b0:d6:b3:9b:d7:ba:96:88:ce:28:14:
         8b:05:1a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:04:27 2024 by rpki-client on console-fra.rpki-client.org