Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
File:                     j2slsXxNBOCwSSNA56wkzITSo0c.mft (raw, json)
Hash identifier:          zFyKufgCMPV/8HxxwJR7+F8ic8G1y3YzuN9bhW6+4oQ=
Subject key identifier:   AF:58:4E:82:9D:4E:D2:E1:7E:9C:46:1F:27:7C:41:3E:E7:63:FC:BD
Authority key identifier: 8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
Certificate issuer:       /CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Certificate serial:       018F874AED424AFC47664D357B91BFFDDAB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
Manifest number:          0821
Signing time:             Fri 17 May 2024 16:03:05 +0000
Manifest this update:     Fri 17 May 2024 16:03:05 +0000
Manifest next update:     Sat 18 May 2024 16:03:05 +0000
Files and hashes:         1: j2slsXxNBOCwSSNA56wkzITSo0c.crl (hash: 7RkuUEWMYbPPZTXFENcsYUQSKyE9FhT2AlQaviGgPqA=)
                          2: wwaQ9e8fzqHozLJc_YG0aNJ30y8.roa (hash: yzyC4AJ2XcGUFp8+ppGndT5z/Hw6CdxIjyZyN3S7fnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ed:42:4a:fc:47:66:4d:35:7b:91:bf:fd:da:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
        Validity
            Not Before: May 17 16:03:05 2024 GMT
            Not After : May 18 16:03:05 2024 GMT
        Subject: CN=af584e829d4ed2e17e9c461f277c413ee763fcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:b7:cc:80:04:8b:eb:b2:fb:df:a6:33:d7:
                    4c:f6:cc:66:ac:8f:49:c7:d2:4e:85:12:5d:06:85:
                    82:2c:1b:5b:21:97:e5:3b:a2:01:fc:47:61:bf:cc:
                    d6:ef:0f:86:78:e7:9a:1e:f3:a6:16:a4:a9:c3:12:
                    6b:8f:ac:35:b9:73:48:18:50:10:49:87:2a:72:10:
                    d1:46:f1:bc:1a:e5:50:c6:46:57:a0:2c:f1:63:55:
                    62:bd:d6:91:48:c9:03:4f:40:83:75:fb:1a:85:f8:
                    4c:60:ad:a6:5a:ec:da:94:cd:38:28:01:d9:54:90:
                    5c:58:42:55:59:01:d9:b8:77:db:d4:35:ec:12:cb:
                    39:79:ef:4f:1c:d5:6f:ca:b6:73:47:18:e3:2f:f4:
                    75:bd:44:aa:cb:f0:77:80:0c:6a:d4:a3:78:a4:99:
                    f5:8e:04:34:19:0f:c0:cd:b7:44:0d:f7:fb:60:43:
                    59:28:4d:49:bb:11:ad:2f:29:d5:62:47:f1:51:02:
                    10:2e:8f:54:d2:3e:ab:01:1c:83:7d:b9:df:8d:e9:
                    ad:16:07:5f:21:b5:19:c8:07:7a:01:71:d3:75:64:
                    48:8b:cc:f9:93:2e:ee:c9:d4:06:46:ff:4b:39:5f:
                    03:d6:20:67:c2:36:4e:1e:8b:c1:29:6e:b0:1a:c5:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:58:4E:82:9D:4E:D2:E1:7E:9C:46:1F:27:7C:41:3E:E7:63:FC:BD
            X509v3 Authority Key Identifier:
                keyid:8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:71:86:4a:1c:00:b4:2a:77:1d:58:f3:48:3a:81:9d:25:1d:
         40:15:5c:5d:aa:12:b1:10:30:a3:05:ad:6f:81:cf:70:99:db:
         7a:37:63:39:13:73:9a:3b:21:ec:20:6d:9b:72:73:1a:a5:44:
         05:8c:78:cf:71:28:a8:9f:77:0f:62:63:02:7b:dd:00:29:1d:
         86:b1:c1:6f:c3:15:6c:d8:bb:8f:b9:74:b7:90:ea:7a:98:0f:
         53:a5:c3:f3:db:b8:cc:71:05:0c:b8:b7:60:b9:48:23:95:ea:
         27:7f:42:60:3f:bb:33:b8:15:8e:88:a2:df:df:20:ee:dd:7b:
         96:ef:11:3d:ee:b5:3d:67:5c:d7:9d:1e:0e:62:ac:eb:3d:91:
         15:cd:1a:ca:15:a9:fd:84:30:23:65:90:09:ee:5f:d0:5b:ba:
         22:cd:66:11:07:01:fc:6f:f5:2f:b5:dc:1d:99:42:26:ac:02:
         6d:81:f2:58:28:c9:89:76:67:9d:ef:e7:d7:14:4b:12:f9:1c:
         e3:91:39:54:34:61:49:34:24:6e:be:e7:53:12:e4:9c:9e:ea:
         bf:c4:97:ab:72:59:6d:50:fc:70:2c:68:f2:d3:9a:11:fd:09:
         02:87:30:15:15:d3:6d:41:2e:74:0a:e2:de:53:02:7b:11:64:
         f3:89:eb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:29:45 2024 by rpki-client on console-fra.rpki-client.org