Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File:                     jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier:          PipfaKPUe+U5cV6E4kDnCq6tc347xVTU409gkmFSx8Y=
Subject key identifier:   DD:5B:65:4E:45:0C:A8:C1:C3:21:66:0E:61:24:52:80:74:C5:4F:11
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer:       /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial:       01935877AD5CBDEA30A9E2CCA8FDB3FA408E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number:          0A7F
Signing time:             Sat 23 Nov 2024 10:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:58 +0000
Files and hashes:         1: 84Rjpqogdovosf2wvByCLvTjQPY.roa (hash: vu8PDSGplln/jSDXjczHei4yffxix5OAjycGu7LoKfg=)
                          2: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: oJU13ajxfGdCeE9mxSPxybgV1HlyfsNxw3jBwLsn9/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:ad:5c:bd:ea:30:a9:e2:cc:a8:fd:b3:fa:40:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
        Validity
            Not Before: Nov 23 10:00:58 2024 GMT
            Not After : Nov 24 10:00:58 2024 GMT
        Subject: CN=dd5b654e450ca8c1c321660e6124528074c54f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:28:29:e8:f8:f1:60:47:d0:b9:d7:66:56:
                    f8:0a:8a:0a:b5:c2:85:1c:52:70:7c:44:89:ac:32:
                    49:b4:0f:e5:1d:e6:21:69:ba:1b:56:a1:3a:db:58:
                    a8:cc:e0:c6:93:7b:91:0a:a7:d6:5c:bb:8e:30:e6:
                    e4:ae:31:30:73:9b:13:bf:06:bf:97:e4:43:cb:1b:
                    20:af:ce:b8:ea:28:b9:a9:c1:3a:b8:40:24:66:d7:
                    e8:dc:5f:ec:da:56:c7:31:e7:9e:9c:1a:1b:87:19:
                    d0:07:88:5f:a0:ed:53:11:54:69:8b:6a:a8:15:cb:
                    21:05:0c:6a:bc:4c:f9:8f:f2:06:f7:6a:29:ac:8a:
                    36:1d:e8:31:51:e1:d6:50:58:c8:1e:dc:15:9d:43:
                    fb:0c:90:ac:b4:35:bf:e6:a6:47:63:43:4e:f5:e6:
                    c8:c2:17:bb:f9:ad:62:0f:7a:40:23:24:ba:cf:04:
                    67:13:ea:7b:4f:14:02:82:d4:39:c3:84:12:f6:0d:
                    8b:37:34:02:3c:61:e4:0f:a7:eb:28:2b:25:0c:f1:
                    60:ee:58:8a:a9:9e:c3:cb:f7:ec:0c:04:1e:71:43:
                    d3:0f:aa:7b:b9:15:b0:96:31:8a:22:40:0b:fc:d3:
                    de:06:1c:06:10:fe:d4:d6:86:52:a8:88:32:53:a0:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5B:65:4E:45:0C:A8:C1:C3:21:66:0E:61:24:52:80:74:C5:4F:11
            X509v3 Authority Key Identifier:
                keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:13:de:c3:d4:9f:28:d3:55:32:23:18:47:bb:e8:73:20:d5:
         54:0c:13:c6:7d:67:63:d0:76:78:a5:c7:33:7b:ac:f9:55:9f:
         6c:80:df:40:5e:1d:da:f1:dd:b9:5b:4f:af:6a:2c:f0:94:69:
         65:fa:ea:ed:6c:be:f0:b4:66:5a:be:74:2f:05:c0:34:59:49:
         7b:80:3c:61:68:67:7f:90:75:f4:3d:d1:d5:b1:a9:76:be:5e:
         a8:51:0e:a5:1f:bc:40:18:ac:08:f6:40:72:13:2e:18:e5:92:
         fd:9d:ec:cb:b6:db:0f:82:2c:76:6a:0c:0c:12:04:38:92:f8:
         3d:cd:2f:0c:28:ea:87:1a:31:5d:14:94:fa:a1:7d:fe:48:7a:
         1a:41:2b:ed:ea:e0:ec:91:b4:ae:b9:d9:1d:19:60:fa:a8:f1:
         1a:40:4d:55:88:0c:f0:a8:62:f0:b3:d9:a9:44:d0:3c:2c:8b:
         f3:32:62:82:00:51:57:9b:1b:3d:7c:6c:52:ec:df:9f:d3:a3:
         94:5b:c7:39:ff:1d:c6:80:bd:5a:00:b7:77:72:ac:db:1e:d8:
         e6:c2:44:59:dd:a6:84:f4:33:96:43:57:b3:4c:8c:3f:50:ed:
         a2:29:7d:8c:e0:83:4e:1d:49:a9:d8:52:c8:e1:0b:f6:22:e2:
         dc:80:ce:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:18 2024 by rpki-client on console-fra.rpki-client.org