Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
File:                     jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json)
Hash identifier:          d9ozOFbTrzovy3MTpivHmHQ27Coihb6CdDIcj53fsIs=
Subject key identifier:   CB:15:08:44:0B:E1:6A:85:12:4A:07:13:B8:7E:18:F3:32:AA:C9:F9
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Certificate issuer:       /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial:       01935688B0B4FAF94984F96954248A458BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:18 +0000
Files and hashes:         1: Z_uOcNVsYYI4KtdO5467b21uykI.roa (hash: cHk7vKN94MUj/YYcRH3lXsw40gXCk2630NLCO8IJbCA=)
                          2: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: tWU4ZpcwgHqxxEQICjRN2JKW6j8mhLEuJWTc9mu4+zQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:b0:b4:fa:f9:49:84:f9:69:54:24:8a:45:8b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
        Validity
            Not Before: Nov 23 01:00:18 2024 GMT
            Not After : Nov 24 01:00:18 2024 GMT
        Subject: CN=cb1508440be16a85124a0713b87e18f332aac9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:1e:40:c1:ed:ec:a1:f8:fe:ba:e5:37:a3:
                    8e:0c:63:4a:7e:06:81:51:ab:17:da:5f:02:c5:ec:
                    12:02:6c:eb:33:a9:18:29:58:b9:f6:86:da:d7:7e:
                    b8:2e:e6:27:61:fd:1a:41:52:24:37:27:c3:3c:4d:
                    e5:66:bc:a1:64:1b:c2:ff:1e:f6:06:98:ec:a4:b8:
                    c9:ce:06:59:15:9a:de:33:05:a5:60:e5:e6:ef:83:
                    79:cb:fd:c0:79:76:ce:39:0f:a0:27:b3:7e:3e:fc:
                    d2:2b:61:9c:5a:be:3f:a1:82:18:ea:56:5c:6c:bc:
                    21:1b:0a:aa:fc:f6:20:fd:8a:04:ff:0e:3c:df:a5:
                    a9:50:89:0b:25:f6:1a:c6:49:53:2e:1f:90:a9:5f:
                    c1:7d:bc:3e:15:51:e9:cc:02:ea:cc:83:06:14:25:
                    72:57:16:c8:a1:0e:d5:68:04:b3:80:40:d0:1e:4b:
                    63:e0:3d:2e:e8:b6:c8:c1:15:58:5a:9b:8a:15:28:
                    4d:23:7a:e0:12:b6:bd:c6:8f:54:b1:02:b5:80:82:
                    25:e9:c4:49:6e:72:f4:d4:e5:b4:86:d6:55:aa:ef:
                    21:33:47:b8:f5:c8:58:10:15:e2:41:42:ff:82:19:
                    2b:98:73:79:66:90:33:bf:e1:37:2b:1b:89:cc:fd:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:15:08:44:0B:E1:6A:85:12:4A:07:13:B8:7E:18:F3:32:AA:C9:F9
            X509v3 Authority Key Identifier:
                keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:ec:0e:38:2d:71:77:79:f7:b0:79:51:c1:3e:70:55:2c:
         d0:c0:9b:8f:1b:e5:17:6b:fc:26:f9:fc:e9:90:a3:cd:c2:3e:
         59:cd:31:b6:37:4b:5c:d6:72:fe:7d:e2:39:6c:53:7c:e6:41:
         31:6f:d0:c8:39:6f:8a:4d:72:f8:76:91:07:c7:0d:e9:de:77:
         5c:5c:d9:b0:f6:ee:51:5f:a7:c5:6d:ac:01:9d:97:12:9c:59:
         bf:76:82:1d:e7:96:a3:48:3e:84:c1:d4:28:00:32:37:cb:48:
         ea:c1:cf:a0:ed:f3:87:50:51:44:cd:c3:16:0d:60:0a:45:67:
         e5:2e:dd:9f:42:89:2b:bc:63:0f:d5:81:88:81:45:e6:ce:d0:
         01:8a:61:05:f7:2c:9b:5e:9d:02:ce:9d:b5:d4:07:33:59:e4:
         23:a3:4c:d7:d4:53:aa:59:71:62:c5:61:8c:d6:83:3d:94:9f:
         19:2f:ae:bf:44:f6:03:f0:d6:f1:62:11:f9:85:d7:7d:f6:e0:
         29:75:3b:d7:3c:19:63:c4:0c:f6:53:85:61:b0:42:18:ce:b6:
         c9:6f:5d:4e:db:55:20:e3:48:d9:f5:e1:2e:80:f2:e7:45:ee:
         f1:91:d8:70:dd:88:e1:7b:64:21:a8:d6:a9:87:e1:5a:8f:4e:
         6e:ad:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:16 2024 by rpki-client on console-ams.rpki-client.org