Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File:                     JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier:          irjQbLrkPa5smXmQ/HlKeEctyzsOER089FIeliZTtYI=
Subject key identifier:   71:B3:58:01:E9:64:7B:9A:CE:E2:AC:78:1C:BD:C3:AF:F3:85:A9:74
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer:       /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial:       018F874878837C5BACA250176D9D311C2F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:00:24 +0000
Manifest this update:     Fri 17 May 2024 16:00:24 +0000
Manifest next update:     Sat 18 May 2024 16:00:24 +0000
Files and hashes:         1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: Wll20rHc21pgGj8f3yySnJ1cgr0TpcoA9H2iyK1yGPs=)
                          2: ioqTCvuZjxQ3yw7gemXP-H1xxx8.roa (hash: qe6tymTitbFFCcDO0QGToxM83FtF9n6BAhjosa1/41M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:78:83:7c:5b:ac:a2:50:17:6d:9d:31:1c:2f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
        Validity
            Not Before: May 17 16:00:24 2024 GMT
            Not After : May 18 16:00:24 2024 GMT
        Subject: CN=71b35801e9647b9acee2ac781cbdc3aff385a974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ce:e0:a6:cb:ac:15:75:9d:a3:60:0b:aa:68:
                    c2:6f:32:69:c7:49:a2:be:7a:ea:ae:80:f9:19:1e:
                    25:09:36:ba:11:8d:a2:32:f3:74:07:09:ea:0e:a1:
                    f9:83:08:32:35:d1:fb:54:04:50:fa:76:0c:ff:6d:
                    c1:e7:49:ad:ac:cc:a0:2b:c3:fb:c5:5b:4a:d1:88:
                    ef:2c:df:96:c2:37:e6:ab:a6:63:b2:a1:a1:26:a7:
                    fd:37:eb:9f:15:c5:29:e6:a8:cd:06:18:b1:ec:34:
                    af:9e:ed:fa:ab:d4:90:cf:a0:cf:c2:12:25:cc:9e:
                    2a:e1:cb:c7:2e:82:96:31:7c:dc:b1:cd:e2:39:a7:
                    1a:17:83:d0:3c:1a:b3:34:4b:41:1e:08:f2:8c:6a:
                    42:2d:6e:d9:96:d9:1f:80:f5:71:0a:ef:5e:be:9a:
                    63:c1:b6:21:48:6c:02:96:8e:02:b8:69:23:67:cf:
                    11:3a:10:a0:1e:d4:34:c1:cb:19:d8:69:39:80:25:
                    93:bc:d0:0f:16:ae:07:45:0a:33:f5:bf:11:ad:1b:
                    2c:6d:40:18:06:04:c3:78:f0:c2:12:92:73:f5:fe:
                    02:6e:98:5e:f4:72:85:10:17:57:99:7c:e0:1c:93:
                    8c:5a:fa:4d:1e:30:aa:b8:8f:1f:1e:6e:94:81:6a:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B3:58:01:E9:64:7B:9A:CE:E2:AC:78:1C:BD:C3:AF:F3:85:A9:74
            X509v3 Authority Key Identifier:
                keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d0:ab:25:4d:34:a3:01:4e:a1:98:ac:00:d3:35:7b:5e:67:
         c8:8d:61:ee:b1:8d:e2:cf:cd:93:b3:a7:e4:66:c8:c8:d9:4f:
         e6:74:7b:61:62:1a:45:46:0d:ad:0c:d2:37:73:2d:92:97:10:
         cc:6d:b0:ff:0d:e7:bc:6b:b7:c6:0d:17:c6:9f:c7:a4:8b:77:
         61:47:b3:82:da:a7:e7:d6:ad:31:7b:48:21:a5:71:21:55:a5:
         c3:4a:1b:65:74:42:e7:89:0d:c5:7b:45:21:a0:8f:98:67:4f:
         b5:72:8c:b9:ca:b4:96:7c:67:70:37:0b:1b:60:7d:e7:7d:86:
         7b:57:18:62:3f:f1:fc:68:43:33:7f:6c:3a:40:d8:f5:f1:9e:
         ee:0e:ad:f8:85:d2:8e:68:ab:6c:78:46:5c:e1:3e:a3:97:6d:
         b0:bc:59:fa:88:f8:6b:31:0a:e0:53:1b:07:bb:a9:49:88:cb:
         17:61:37:89:f8:a6:e6:a5:7f:8d:93:41:aa:53:62:9c:a0:a9:
         6c:76:99:6c:25:34:61:a9:c5:6e:ea:d8:e0:2f:3e:66:ca:93:
         be:a2:fc:f2:a3:a6:cc:ab:ff:cc:d1:62:87:60:92:c9:76:69:
         d7:25:96:58:fa:6c:42:b5:46:96:db:51:19:e9:6b:0b:3e:3b:
         21:c7:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:17 2024 by rpki-client on console-fra.rpki-client.org