Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File:                     jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier:          9yJ2CX1ibSFv4NHlSqYnPNqobAYfdgeUau9ykHMkK34=
Subject key identifier:   C4:20:AD:CC:0C:63:12:8E:3C:02:91:8C:B7:BD:AB:11:CF:C7:45:E4
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer:       /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial:       018F874B1AAEE0461F5C1DA9509741014477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number:          0F4C
Signing time:             Fri 17 May 2024 16:03:17 +0000
Manifest this update:     Fri 17 May 2024 16:03:17 +0000
Manifest next update:     Sat 18 May 2024 16:03:17 +0000
Files and hashes:         1: 0qnhdec3OZ27iXQx8sfwMl4UE8E.roa (hash: K1c/EkFgnEpI/LDtRJLuVgZ4x9K1o9+YolbAfgH8WwA=)
                          2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: AqC0YG+7MvM4Z4kkRdf8PQBn4hUfZsy5KGuufwAVlbw=)
                          3: rVu8OfKXpGICLiyECmcQc4i57Fw.roa (hash: 5nC9c71u1IBblqwkgE/j6ZMSuO0dAOAuYrW5y+9R5B4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:1a:ae:e0:46:1f:5c:1d:a9:50:97:41:01:44:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
        Validity
            Not Before: May 17 16:03:17 2024 GMT
            Not After : May 18 16:03:17 2024 GMT
        Subject: CN=c420adcc0c63128e3c02918cb7bdab11cfc745e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:75:3b:be:90:13:3e:e8:f7:6e:1f:9c:d8:
                    15:9f:95:9a:14:03:e6:cc:de:b3:b9:8d:0b:9c:5c:
                    99:fc:2f:d5:bd:2e:6c:43:18:54:86:72:bb:fe:a9:
                    bd:d4:d3:1e:58:73:8b:75:39:96:97:2b:9b:8e:c3:
                    c5:de:ab:18:89:3c:44:45:ef:08:ea:4e:a2:38:a8:
                    37:3f:54:d9:7f:bd:f8:e5:c7:5f:13:a5:0d:53:7e:
                    37:39:db:a6:3f:6d:36:3a:38:dc:5a:1c:d9:32:ce:
                    bd:a8:52:e4:ca:2e:cf:c6:d8:26:c8:da:5b:37:a0:
                    06:dd:0f:57:b4:b5:2d:12:3e:df:fa:c8:43:14:7e:
                    e4:bc:43:6c:a8:91:8c:16:b3:11:24:a6:12:b4:10:
                    1c:d3:e7:51:90:b6:f9:43:1a:d9:d6:e4:07:75:86:
                    ea:a8:6b:66:4c:13:16:de:01:50:a3:ca:c5:e7:bf:
                    37:3e:95:f1:25:35:94:bd:3c:e0:e5:cb:9a:c9:02:
                    06:1b:0d:94:10:dc:ba:4d:3d:b7:ad:3d:b3:19:74:
                    e8:ad:00:aa:da:10:3c:d9:72:64:fb:0a:03:44:9d:
                    1c:65:97:9e:85:7b:cc:9e:68:fc:f0:a6:0a:49:fb:
                    3a:be:13:17:a0:ea:54:f8:1d:17:30:0f:fe:1c:b1:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:AD:CC:0C:63:12:8E:3C:02:91:8C:B7:BD:AB:11:CF:C7:45:E4
            X509v3 Authority Key Identifier:
                keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:79:67:6e:3f:ea:75:24:f3:27:ec:7c:06:7e:0f:ae:f4:b0:
         81:fd:f5:1d:bf:31:47:06:7e:8a:9e:bb:a6:b0:73:e6:ed:8c:
         23:8b:27:9e:df:56:4a:f2:9a:38:4f:ed:f0:f9:91:22:7d:3a:
         ad:44:8b:2c:73:84:97:ed:ea:e1:fa:6b:a8:4b:87:ac:f3:d0:
         9a:74:34:2e:c9:29:44:30:6c:2c:45:7a:c8:01:fe:82:3b:30:
         08:fa:53:19:ff:1e:9e:9e:5d:46:d1:6b:69:5c:78:d6:94:82:
         7f:10:0e:d6:d7:a4:c4:90:e5:97:f8:44:0f:f4:5b:d4:6a:e8:
         58:3a:42:a3:71:1d:54:08:3e:a5:4e:6d:a0:5b:9a:a8:30:86:
         45:fe:b3:c2:cf:d4:ac:fb:98:2f:4c:cb:da:c1:05:f4:84:42:
         b2:a6:9e:fa:6b:3b:80:a2:c3:c3:b0:c0:f7:32:c7:e2:eb:55:
         3b:1e:68:56:2f:63:f7:2e:0d:6f:cd:ee:c8:0c:87:38:3b:32:
         b2:69:b7:92:c1:9d:cc:a4:70:56:5e:61:a3:43:0d:ba:e4:88:
         8a:c6:09:44:58:0f:5e:f2:e2:a3:dc:bd:05:5b:9b:c4:53:98:
         78:f6:1e:b3:65:a4:39:ad:26:ea:38:13:8d:bf:10:47:6e:fd:
         fc:11:a9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:45 2024 by rpki-client on console-ams.rpki-client.org