Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File:                     J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier:          LEJTf/TSikSB5S9h9PsH6bcs7R7T3+FHBUThwKt1kjE=
Subject key identifier:   3A:73:B7:48:0A:0C:6C:82:11:CB:2B:C5:F7:0B:B1:F8:94:0F:34:35
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer:       /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial:       018F91272EA1EBB798448D9225CBFE34EC26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number:          0656
Signing time:             Sun 19 May 2024 14:00:15 +0000
Manifest this update:     Sun 19 May 2024 14:00:15 +0000
Manifest next update:     Mon 20 May 2024 14:00:15 +0000
Files and hashes:         1: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: M9F9Q7VCoiblUJuyQRcWmp16wjCeWFrzRIKgxD0GTAY=)
                          2: MImR3Pt-ZV7L6v8LMjXxS9m_YJY.roa (hash: HrHkDTKdvWvLUebcw/ppbB30lwznoQp/ymIQ3oFjbXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:27:2e:a1:eb:b7:98:44:8d:92:25:cb:fe:34:ec:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
        Validity
            Not Before: May 19 14:00:15 2024 GMT
            Not After : May 20 14:00:15 2024 GMT
        Subject: CN=3a73b7480a0c6c8211cb2bc5f70bb1f8940f3435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:65:4c:72:ae:97:4d:11:a7:14:0e:a4:68:
                    d8:7f:e1:47:0b:39:59:b8:43:45:43:6b:8a:f9:be:
                    5e:c7:99:bb:8b:05:9e:8f:91:e0:f4:a6:e0:df:30:
                    ba:47:9e:1c:68:e3:06:30:ff:f3:63:27:3e:e6:f4:
                    ae:69:3c:e1:da:59:09:22:f4:b9:b6:b1:4d:9c:ab:
                    58:eb:40:9e:81:1d:1f:75:02:06:47:99:51:51:be:
                    e2:8e:a4:f8:ac:23:83:71:51:59:f8:ac:c6:b2:ec:
                    af:18:13:af:dc:19:c5:02:54:1f:f8:54:10:a0:2d:
                    21:f4:7b:bc:47:b7:97:9b:16:e2:46:8d:56:f7:d4:
                    b8:82:78:2d:9e:13:70:32:11:8f:8a:a9:55:59:b0:
                    7c:22:f6:67:7b:9a:02:27:a4:e0:5a:34:7d:e9:a1:
                    2e:08:c8:2d:12:76:ea:5c:47:a2:fc:4f:8b:bd:32:
                    72:17:4d:4f:37:96:20:d4:a9:2b:03:56:8a:fb:7c:
                    81:8a:b6:5c:56:32:ad:ac:d3:15:1b:56:ab:73:a7:
                    09:70:7d:17:b9:b5:ad:ff:72:cb:00:43:a4:39:2b:
                    4b:aa:7a:e6:dd:a2:a3:b5:2c:dc:97:cf:85:11:58:
                    98:c1:29:eb:2a:1e:ab:bc:b6:ff:a7:c0:4f:11:fa:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:73:B7:48:0A:0C:6C:82:11:CB:2B:C5:F7:0B:B1:F8:94:0F:34:35
            X509v3 Authority Key Identifier:
                keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:72:f6:a7:6d:b8:27:9b:3e:33:2b:59:05:7a:7a:dd:f9:b0:
         97:c3:03:d7:d6:6c:f0:91:e5:67:cd:39:c6:95:1a:78:23:fe:
         0e:05:06:a4:cf:34:f5:4e:b9:9a:90:ba:e5:a7:95:42:07:98:
         61:a4:61:13:f6:42:e7:b4:fb:29:fe:f2:61:d9:7b:5b:db:ed:
         03:10:d8:48:5a:2a:d0:21:be:75:3a:63:04:12:00:06:5e:80:
         68:21:c4:be:24:8d:49:87:ab:37:9e:b2:35:f0:7c:4c:dd:aa:
         cb:c3:84:be:3d:41:2f:cd:6f:b2:e6:7a:93:f2:d8:f4:bf:83:
         39:e5:3a:f1:1a:dc:4e:34:b0:62:83:06:8b:9a:17:20:89:22:
         6c:2f:04:88:39:b7:0e:4e:6d:20:4b:72:96:68:78:fa:b0:47:
         68:22:b8:b6:f3:67:02:32:5c:ec:a0:e4:a2:7a:0b:02:97:1c:
         4b:7a:1c:3f:20:c0:c6:1d:36:e6:43:71:a1:ac:aa:d2:44:f3:
         fc:cc:de:61:55:da:f9:03:7d:bb:d5:2a:55:2b:99:f1:92:b2:
         6d:66:1f:e4:08:9d:7b:cb:c1:79:f1:52:72:16:e6:c2:7c:cf:
         b1:65:22:08:4b:5a:2e:92:70:eb:d9:26:28:a8:91:f2:86:52:
         bd:4d:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:59:04 2024 by rpki-client on console-fra.rpki-client.org