Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File:                     Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier:          FwmxvuFypTqnuVy28YgocIsDnp6UTH2qn6sNZzJtFLI=
Subject key identifier:   44:64:8A:78:61:E9:56:49:B6:D5:F3:5D:2B:47:A9:03:47:85:98:01
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer:       /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial:       018F87ED26AAF076DAC41298E0767190F257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number:          0D0A
Signing time:             Fri 17 May 2024 19:00:16 +0000
Manifest this update:     Fri 17 May 2024 19:00:16 +0000
Manifest next update:     Sat 18 May 2024 19:00:16 +0000
Files and hashes:         1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: RiYwXBwwNFjujigpiyGgWT5inUDdp6kGVjHzRjp7Z60=)
                          2: hRniPKDMNH8bGieMKO10BwYZS3E.roa (hash: NQH7zxziEjSw1+Bnv/+5p/BxYuRG0RhKVk6eFL3K7hE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:26:aa:f0:76:da:c4:12:98:e0:76:71:90:f2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
        Validity
            Not Before: May 17 19:00:16 2024 GMT
            Not After : May 18 19:00:16 2024 GMT
        Subject: CN=44648a7861e95649b6d5f35d2b47a90347859801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bd:e0:bc:5f:00:51:d4:d3:8d:bf:1f:b1:ac:
                    70:ad:31:68:28:de:b4:03:00:e2:00:a8:c9:16:bb:
                    47:15:a7:12:52:ee:b6:f7:23:18:04:9d:14:50:9e:
                    81:cc:fb:7d:5b:a3:ed:db:de:dd:d2:08:63:a0:2d:
                    9b:58:e9:b9:47:86:03:59:6a:e1:ff:77:bf:cb:1f:
                    f8:d0:87:32:b0:6d:f4:85:78:4b:69:7a:dd:7b:ce:
                    5f:a4:9d:23:54:d0:d3:a0:db:12:e7:4c:16:00:3f:
                    dc:c3:6b:f6:21:71:c4:06:0c:35:11:e6:1c:79:16:
                    f3:71:58:7d:37:dc:f1:54:13:80:9c:a4:a2:57:75:
                    05:75:68:7f:13:93:be:2c:98:b2:80:b8:cc:0f:70:
                    ff:27:c4:61:7c:51:cd:b7:36:56:73:c8:62:2f:ac:
                    55:50:84:6b:2c:25:7d:b3:ce:43:91:80:e3:0e:2c:
                    be:1e:87:57:41:ff:e5:c3:37:8d:31:01:94:14:32:
                    37:91:cf:75:4e:86:95:db:72:e1:fe:d3:8b:22:d1:
                    10:58:8d:bd:43:c0:3d:9d:5d:12:77:24:d4:8d:9a:
                    27:bb:2f:6b:34:4e:63:ca:b0:de:b6:bc:bf:9f:9f:
                    70:3d:9c:8c:7c:58:62:68:f2:9c:05:e0:1e:c7:2c:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:64:8A:78:61:E9:56:49:B6:D5:F3:5D:2B:47:A9:03:47:85:98:01
            X509v3 Authority Key Identifier:
                keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:21:42:a2:f8:a5:54:fc:57:72:ce:1f:63:34:9b:7f:3c:c0:
         f9:b8:cf:f5:1a:87:a1:2d:1c:35:09:f2:81:f7:0f:04:8d:28:
         90:40:7f:8d:17:b8:53:ae:8f:dc:f8:8b:d8:20:0e:cd:8b:f3:
         26:1e:54:8c:56:7f:82:5c:3b:be:80:5f:32:4e:56:e7:96:f9:
         b8:8a:55:08:ba:04:e8:29:9b:b0:43:05:fb:e7:e7:5a:28:b2:
         df:2c:7f:9f:18:6d:fa:b1:53:21:78:83:55:0c:7d:be:3f:82:
         e5:f8:9c:fc:dc:b9:9c:29:19:85:34:21:d3:ad:4b:9b:2e:16:
         4e:ed:a6:4c:d2:29:cc:97:85:20:9b:60:7c:b9:17:ca:6e:d9:
         bb:6b:dd:d2:e8:c9:92:d6:a7:2e:e7:3d:9d:85:1f:c0:ad:13:
         42:f1:b9:6d:52:d8:81:c4:51:bf:03:bb:66:78:84:b4:a3:b1:
         bb:32:4a:6f:9b:bb:8a:21:87:e5:d3:21:c6:f8:ec:17:d3:f0:
         14:23:fb:d2:d0:b9:be:7e:95:4c:3f:f0:f5:10:ec:c9:0d:14:
         3d:3b:d3:4a:0f:c4:1d:98:b8:a4:7d:09:c2:6c:b9:15:c9:26:
         66:12:dd:c8:30:20:18:1a:16:41:18:be:cf:81:c7:6f:0a:52:
         3d:f1:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:30 2024 by rpki-client on console-fra.rpki-client.org