Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File:                     jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier:          oBnxqmiDENvuY7dOj4k9vQgvCC+xUerlPrY/HZdtjgw=
Subject key identifier:   5C:97:20:FC:92:E6:F9:24:EC:2F:0B:D6:C8:19:39:86:DA:29:08:D3
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer:       /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial:       018F8749BD1CCFC7D1EA25D2832DDCBD9080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number:          039F
Signing time:             Fri 17 May 2024 16:01:47 +0000
Manifest this update:     Fri 17 May 2024 16:01:47 +0000
Manifest next update:     Sat 18 May 2024 16:01:47 +0000
Files and hashes:         1: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: a2mOu1yV49em4YxYFONO8eZ/PhteogRRmR07mrkYGps=)
                          2: vubdtat8dmJBz04Dcs03ejHVcw8.roa (hash: L2es/YHRzu4MYeTlTsxKzqiIfKredP2T073o76K1evM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:bd:1c:cf:c7:d1:ea:25:d2:83:2d:dc:bd:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
        Validity
            Not Before: May 17 16:01:47 2024 GMT
            Not After : May 18 16:01:47 2024 GMT
        Subject: CN=5c9720fc92e6f924ec2f0bd6c8193986da2908d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:ad:a1:ec:89:e0:da:41:46:28:3f:d4:20:
                    2e:93:1d:82:f6:1e:ff:4b:51:55:65:08:ee:2e:12:
                    f7:f3:69:68:5b:89:87:f9:63:7c:66:c0:b1:5d:32:
                    98:67:34:91:86:40:f9:af:ec:91:12:7e:ac:e2:be:
                    cc:7a:a4:3f:da:1d:92:06:a1:62:8f:c7:06:d8:78:
                    1c:14:c3:73:9d:b6:37:7d:68:fb:15:ef:6a:e6:88:
                    98:5f:c4:41:cd:38:ff:91:6a:53:f9:47:d7:8a:5e:
                    94:e7:43:a2:e6:fc:6e:8b:c6:82:01:da:29:57:9a:
                    be:12:3d:c4:b9:38:39:ab:a9:a7:34:5a:e3:46:23:
                    5b:11:85:89:14:a5:2d:17:a1:ce:de:8b:10:79:fe:
                    aa:6f:66:10:d6:9b:7e:1d:36:25:99:fc:49:33:97:
                    d5:11:5a:61:cc:5f:1f:7c:12:75:34:d0:fc:e5:94:
                    26:b9:f1:7b:44:8a:e5:94:6d:29:bf:55:12:83:08:
                    6c:17:6d:ab:24:52:c7:02:00:e3:8a:ad:73:24:6b:
                    87:17:e2:da:0f:0c:74:70:7b:bf:8f:78:0c:ec:c8:
                    50:d3:de:2d:83:d1:7e:3d:ee:1f:02:05:51:03:ee:
                    9c:f0:00:99:14:c3:21:8c:13:cc:f7:27:3b:2f:81:
                    a2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:97:20:FC:92:E6:F9:24:EC:2F:0B:D6:C8:19:39:86:DA:29:08:D3
            X509v3 Authority Key Identifier:
                keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fd:f0:22:88:fd:86:91:e1:1e:13:3f:83:1a:aa:f3:79:96:
         9a:27:f8:9f:97:b3:27:91:55:8a:9a:b4:af:81:c4:58:f2:69:
         1e:ab:d3:88:8a:41:60:c9:cb:c0:0a:b7:8a:8f:9a:a7:2e:c2:
         0d:ec:f8:71:69:25:bf:8c:3f:a4:7c:7f:e3:5a:a5:07:ff:3b:
         f7:80:4d:af:ab:0e:e8:d3:67:3e:96:1e:a1:47:8d:43:6b:4d:
         f3:1d:13:1c:ce:d7:fa:18:70:05:7f:fa:ca:13:58:f3:48:b2:
         ad:e7:86:8d:28:26:73:e9:80:1a:1f:a9:eb:83:61:bd:35:7e:
         1b:f6:10:73:af:a3:2b:c9:61:c8:ad:4c:93:73:57:d0:81:7d:
         bc:83:57:25:cb:42:18:79:13:e3:49:0b:2f:ee:05:96:9a:46:
         d2:6a:60:7e:ce:e6:22:32:01:88:b8:59:72:ac:e6:5b:6f:42:
         ba:e2:a0:f7:a0:81:e7:a7:8b:e6:c2:d5:1b:78:5f:d9:2c:4b:
         e1:56:e9:22:ea:d5:df:85:f0:eb:c5:ee:73:7d:5b:8c:68:0b:
         5c:2a:40:36:bc:92:71:dd:82:c4:62:10:d3:03:92:de:f5:d9:
         88:70:b1:97:67:d5:6c:eb:01:76:39:2d:46:91:e1:f0:71:06:
         d8:e1:c5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:00 2024 by rpki-client on console-ams.rpki-client.org