Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.mft
File:                     0JB4V5jOxnafF83XXL-q8vyGXOY.mft (raw, json)
Hash identifier:          ErOapRTKKnpREuo8Pe/jB9brBY/5dutAlaLZnj9v7Fc=
Subject key identifier:   42:E2:89:25:43:14:23:DA:3C:C0:D5:9D:3A:C0:27:04:41:D8:77:1F
Authority key identifier: D0:90:78:57:98:CE:C6:76:9F:17:CD:D7:5C:BF:AA:F2:FC:86:5C:E6
Certificate issuer:       /CN=d090785798cec6769f17cdd75cbfaaf2fc865ce6
Certificate serial:       018F570295B9C0FD54A0B984E837A460251A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JB4V5jOxnafF83XXL-q8vyGXOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.mft
Manifest number:          115E
Signing time:             Wed 08 May 2024 07:02:18 +0000
Manifest this update:     Wed 08 May 2024 07:02:18 +0000
Manifest next update:     Thu 09 May 2024 07:02:18 +0000
Files and hashes:         1: 0JB4V5jOxnafF83XXL-q8vyGXOY.crl (hash: xL2ekGFmeNClTG69csdwkXU8nW47RWrwbEVeNk0pQqw=)
                          2: SW7S7ENjk2XhNxzMSYkKNasvO_Y.roa (hash: tk06mqNFbwv2K0yWHbdVofsS7zLFbIqcL7o3Zrs1m08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JB4V5jOxnafF83XXL-q8vyGXOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:02:95:b9:c0:fd:54:a0:b9:84:e8:37:a4:60:25:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d090785798cec6769f17cdd75cbfaaf2fc865ce6
        Validity
            Not Before: May  8 07:02:18 2024 GMT
            Not After : May  9 07:02:18 2024 GMT
        Subject: CN=42e28925431423da3cc0d59d3ac0270441d8771f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:2a:45:ea:58:97:32:91:c0:a3:d5:5d:19:
                    86:7c:db:80:4b:da:f3:4b:20:18:08:4c:b4:1f:71:
                    67:1e:a5:f8:71:0c:c2:7b:65:66:b0:d2:ed:cd:b6:
                    56:c6:e1:70:6b:50:18:76:98:93:45:6a:1f:5f:2d:
                    67:2d:ea:1e:01:c9:7a:27:04:bd:1c:ae:6c:53:af:
                    01:fd:6d:8c:78:15:e0:f3:41:70:ac:bd:a2:4f:ff:
                    67:b5:2a:cd:49:9d:d6:9f:06:70:0f:6c:47:71:ea:
                    27:7f:77:6a:b1:c3:59:6b:e7:d3:f9:4e:fe:47:a4:
                    b1:9b:e1:ba:09:9d:b8:f0:8e:f4:3f:fb:04:1f:58:
                    3f:d7:6d:f7:84:f7:11:f4:d4:d8:88:80:4e:99:1c:
                    bb:40:e0:c7:c7:7e:e9:db:03:27:a2:91:d3:a1:0e:
                    92:a6:d5:b8:0e:c2:e9:81:d9:0c:4c:cb:d0:ac:c8:
                    c6:68:28:29:11:ce:ce:7b:74:49:38:17:d3:d5:b0:
                    24:1b:0c:66:cd:ce:44:8b:5f:cf:bd:12:11:57:3b:
                    14:5d:c2:59:08:ff:36:25:5b:b8:11:01:79:f7:53:
                    9f:76:28:74:21:f0:bc:7d:25:75:4e:03:a1:f7:37:
                    7f:bf:a4:8d:a7:ca:15:16:6c:ca:f9:5b:28:3a:50:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E2:89:25:43:14:23:DA:3C:C0:D5:9D:3A:C0:27:04:41:D8:77:1F
            X509v3 Authority Key Identifier:
                keyid:D0:90:78:57:98:CE:C6:76:9F:17:CD:D7:5C:BF:AA:F2:FC:86:5C:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JB4V5jOxnafF83XXL-q8vyGXOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:8b:e6:b5:f0:2d:0d:c2:e6:a8:7e:d5:d7:b5:7d:b1:66:
         a9:aa:7e:81:02:48:52:85:63:a0:09:51:5f:31:03:1b:88:28:
         4f:7b:4a:60:5c:45:07:58:6a:4a:84:8a:ca:c9:f8:2e:ca:90:
         c2:92:d1:98:ae:f9:e1:1b:57:5b:ab:90:d7:f5:06:3b:0d:72:
         dc:12:72:39:1e:1d:5d:e9:86:c6:50:46:1f:7c:cd:8f:8b:75:
         bf:c1:7a:3d:f9:63:42:5b:5c:43:e3:97:54:c1:c7:bd:61:61:
         18:2f:8c:a1:8c:6b:fa:b6:05:66:5f:be:92:aa:f5:e4:40:f5:
         99:df:0c:f6:9b:99:42:ea:6f:cd:59:f6:c9:78:f2:4e:5b:b5:
         2e:9f:e6:94:f8:ff:fd:1c:e8:d2:53:53:c2:ae:1b:ea:54:27:
         22:21:40:13:a9:f8:e1:8b:4c:46:4d:3e:f6:62:9e:c2:cf:04:
         a3:c5:26:18:f4:f3:18:ab:85:07:c4:f4:65:bc:c0:53:ff:1f:
         72:89:9a:76:e6:2a:0b:d0:ad:87:01:44:12:8d:09:25:09:ec:
         24:dd:67:ac:3e:76:5d:84:36:8d:97:73:09:d8:e5:d3:e9:5f:
         ba:74:bd:2b:f2:d6:60:aa:1f:66:d4:12:77:b5:0f:4e:ec:cb:
         28:2d:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:14:54 2024 by rpki-client on console-ams.rpki-client.org