Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/jr7W3J6X_xjumCch2Pkld1YmYSE.mft
File:                     jr7W3J6X_xjumCch2Pkld1YmYSE.mft (raw, json)
Hash identifier:          QKO6R/FHJYAqYPB0D8EusTMXC+jLE9E2mxYYaPrNZzY=
Subject key identifier:   17:D0:DC:BC:D4:D7:49:A7:4E:EE:51:C0:BF:32:6A:2D:36:84:59:37
Authority key identifier: 8E:BE:D6:DC:9E:97:FF:18:EE:98:27:21:D8:F9:25:77:56:26:61:21
Certificate issuer:       /CN=8ebed6dc9e97ff18ee982721d8f9257756266121
Certificate serial:       018F874992DB75402F313E1138A13CA7B23B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jr7W3J6X_xjumCch2Pkld1YmYSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/jr7W3J6X_xjumCch2Pkld1YmYSE.mft
Manifest number:          0D25
Signing time:             Fri 17 May 2024 16:01:36 +0000
Manifest this update:     Fri 17 May 2024 16:01:36 +0000
Manifest next update:     Sat 18 May 2024 16:01:36 +0000
Files and hashes:         1: L_i5f5cBS7COsdRE9ZitvTntJ7s.roa (hash: aJZj2slcNn6GUmKc2z30cLMJC3cjlvdiQkT9UD/zd4s=)
                          2: jr7W3J6X_xjumCch2Pkld1YmYSE.crl (hash: B1NGkHm5ibxjcXIza4TA0FN8hhd69TTyseiIi67/I3Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/jr7W3J6X_xjumCch2Pkld1YmYSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/jr7W3J6X_xjumCch2Pkld1YmYSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jr7W3J6X_xjumCch2Pkld1YmYSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:92:db:75:40:2f:31:3e:11:38:a1:3c:a7:b2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ebed6dc9e97ff18ee982721d8f9257756266121
        Validity
            Not Before: May 17 16:01:36 2024 GMT
            Not After : May 18 16:01:36 2024 GMT
        Subject: CN=17d0dcbcd4d749a74eee51c0bf326a2d36845937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:6c:71:7c:cd:56:08:42:18:f1:1c:58:95:
                    d5:7a:80:24:ac:3d:fe:9d:34:b3:2f:a9:6c:00:91:
                    5f:dc:45:0a:45:39:54:4f:44:b7:ab:3a:a3:b6:fc:
                    cd:a7:cf:15:e5:f1:fd:b5:73:a5:89:79:92:74:df:
                    67:4d:9e:03:83:7f:36:7b:41:f0:88:5e:ea:cf:61:
                    30:4c:14:b0:67:8e:86:82:50:42:48:98:3a:e0:2f:
                    a1:6b:37:bc:41:bd:cf:2d:14:d7:e1:d4:4c:d6:f0:
                    1c:a5:27:e5:eb:80:b3:f5:3f:2a:5e:20:b5:34:4d:
                    bf:1b:4d:52:2d:f4:43:cd:24:33:d0:1f:c9:f5:31:
                    f6:57:68:11:31:d8:d8:a9:c5:35:59:d4:6e:b9:d9:
                    8f:b1:99:df:a2:0a:2b:ca:5d:30:15:96:88:7b:f7:
                    9e:19:9b:ab:5e:46:94:f9:33:45:cb:c0:1e:84:6a:
                    4b:64:8c:2d:4b:d1:f8:41:b1:82:c6:de:f2:65:d6:
                    5c:ee:48:a7:d3:71:74:ac:8a:1a:68:cc:d5:6b:e9:
                    18:eb:e1:4a:ed:0c:2e:73:74:e9:7e:e6:d2:0c:f9:
                    70:0c:5d:d5:54:77:2e:37:a3:6f:7d:63:ed:06:91:
                    70:11:70:d1:09:70:f5:d8:b3:29:83:24:ab:10:21:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D0:DC:BC:D4:D7:49:A7:4E:EE:51:C0:BF:32:6A:2D:36:84:59:37
            X509v3 Authority Key Identifier:
                keyid:8E:BE:D6:DC:9E:97:FF:18:EE:98:27:21:D8:F9:25:77:56:26:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jr7W3J6X_xjumCch2Pkld1YmYSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/jr7W3J6X_xjumCch2Pkld1YmYSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/jr7W3J6X_xjumCch2Pkld1YmYSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c5:21:83:48:ce:2d:15:fb:72:70:f7:c7:65:66:9c:02:3d:
         7f:30:9e:9a:ea:c9:91:c8:a7:25:6e:ed:04:0b:63:2b:eb:38:
         a4:4f:e7:da:27:5b:a2:35:b0:2e:ec:e9:8f:9e:87:5a:89:16:
         85:09:bc:ea:00:12:c7:37:90:f8:d6:18:e4:71:44:b5:cb:00:
         5b:03:2a:37:61:4c:4c:83:d6:ee:25:72:af:d9:ba:05:a7:59:
         92:d2:03:62:10:99:e6:36:6c:11:7a:8a:43:ef:f6:4b:8e:8b:
         05:a8:d8:db:1c:ce:f7:d8:ab:3e:6c:a5:99:33:8a:2e:96:18:
         49:26:5a:1e:47:9f:8c:4b:19:d8:54:65:5a:aa:05:9a:a2:22:
         22:0a:03:5a:23:e8:d2:a8:70:10:65:f5:41:e9:36:b1:e3:f1:
         33:4f:1c:c8:f4:87:b6:1f:1e:78:98:d5:dc:da:79:b3:d9:39:
         9e:fb:61:03:2f:57:8c:5f:3e:ef:d9:17:e1:81:a9:29:6f:28:
         ad:66:56:59:9e:56:fa:d9:20:ec:bb:8b:ee:b7:b7:85:8c:64:
         1c:93:67:a6:83:3e:05:62:44:a8:6e:66:6f:2a:91:6b:36:ba:
         b6:51:e9:37:89:18:15:4c:01:a1:71:13:ba:a1:ef:23:2d:a7:
         f7:40:c7:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSZLbdUAvMT4ROKE8p7I7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYmVkNmRjOWU5N2ZmMThlZTk4MjcyMWQ4ZjkyNTc3NTYy
NjYxMjEwHhcNMjQwNTE3MTYwMTM2WhcNMjQwNTE4MTYwMTM2WjAzMTEwLwYDVQQD
EygxN2QwZGNiY2Q0ZDc0OWE3NGVlZTUxYzBiZjMyNmEyZDM2ODQ1OTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV1scXzNVghCGPEcWJXVeoAkrD3+
nTSzL6lsAJFf3EUKRTlUT0S3qzqjtvzNp88V5fH9tXOliXmSdN9nTZ4Dg382e0Hw
iF7qz2EwTBSwZ46GglBCSJg64C+haze8Qb3PLRTX4dRM1vAcpSfl64Cz9T8qXiC1
NE2/G01SLfRDzSQz0B/J9TH2V2gRMdjYqcU1WdRuudmPsZnfogoryl0wFZaIe/ee
GZurXkaU+TNFy8AehGpLZIwtS9H4QbGCxt7yZdZc7kin03F0rIoaaMzVa+kY6+FK
7Qwuc3TpfubSDPlwDF3VVHcuN6NvfWPtBpFwEXDRCXD12LMpgySrECFQSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfQ3LzU10mnTu5RwL8yai02hFk3MB8GA1UdIwQY
MBaAFI6+1tyel/8Y7pgnIdj5JXdWJmEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanI3VzNKNlhfeGp1bUNjaDJQa2xkMVltWVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kZTI4NGItYjgzYi00NmQzLWJiYzgt
ZDI1NjgwYjRkZjFmLzEvanI3VzNKNlhfeGp1bUNjaDJQa2xkMVltWVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kZTI4NGItYjgzYi00NmQzLWJiYzgtZDI1NjgwYjRkZjFm
LzEvanI3VzNKNlhfeGp1bUNjaDJQa2xkMVltWVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcUhg0jO
LRX7cnD3x2VmnAI9fzCemurJkcinJW7tBAtjK+s4pE/n2idbojWwLuzpj56HWokW
hQm86gASxzeQ+NYY5HFEtcsAWwMqN2FMTIPW7iVyr9m6BadZktIDYhCZ5jZsEXqK
Q+/2S46LBajY2xzO99irPmylmTOKLpYYSSZaHkefjEsZ2FRlWqoFmqIiIgoDWiPo
0qhwEGX1Qek2sePxM08cyPSHth8eeJjV3Np5s9k5nvthAy9XjF8+79kX4YGpKW8o
rWZWWZ5W+tkg7LuL7re3hYxkHJNnpoM+BWJEqG5mbyqRaza6tlHpN4kYFUwBoXET
uqHvIy2n90DHLA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:52:03 2024 by rpki-client on console-ams.rpki-client.org