Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File:                     JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier:          2hCBPlMe77cZvMpzKoGslEKcjVUVlfHIwf5G6FQJaok=
Subject key identifier:   0C:B6:1F:F2:56:DF:84:7E:38:D6:91:1B:5E:7A:18:5F:12:A1:F3:32
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer:       /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial:       018FB5A491D62CE2BCF00664891C148FEC52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number:          0269
Signing time:             Sun 26 May 2024 16:03:32 +0000
Manifest this update:     Sun 26 May 2024 16:03:32 +0000
Manifest next update:     Mon 27 May 2024 16:03:32 +0000
Files and hashes:         1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: rVt7e52kKWhgG3YNLLLEpF57NE0j7eMGkmUcYXBowqE=)
                          2: esx1Dq9RqrL_U3kT_Atcd0KoG1Q.roa (hash: IDmmifIGgle+1CDckJ0rRIQkmBPgZBID+HP6Ii80FXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 16:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b5:a4:91:d6:2c:e2:bc:f0:06:64:89:1c:14:8f:ec:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
        Validity
            Not Before: May 26 16:03:32 2024 GMT
            Not After : May 27 16:03:32 2024 GMT
        Subject: CN=0cb61ff256df847e38d6911b5e7a185f12a1f332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:b5:b8:39:a2:9b:06:48:80:95:8e:4c:1d:
                    6e:8f:c9:ff:6b:04:e6:e9:eb:21:a9:fa:d9:0d:c7:
                    a6:4b:60:25:eb:05:73:8c:64:d3:a1:95:0a:0f:5d:
                    40:92:e6:66:f8:d8:85:7d:fb:20:d7:63:f9:7b:bb:
                    9d:75:85:68:92:54:e1:b6:c5:a1:c0:33:5f:3e:95:
                    5b:40:00:93:b5:f8:53:d1:fd:ba:ad:ba:9e:13:35:
                    f3:82:43:34:ce:82:78:34:28:18:4b:25:dd:fd:7b:
                    01:2a:02:89:8b:2c:da:e9:bf:a5:25:e8:b9:a1:aa:
                    52:d0:5f:95:ec:0b:64:03:59:82:76:87:f9:0b:20:
                    c2:7e:93:cc:3a:46:03:70:58:eb:63:c7:8a:44:22:
                    c8:7c:a1:62:bb:08:95:1b:3a:87:3a:5b:3d:4f:0e:
                    f8:c9:cb:f5:0c:d8:b2:36:b0:c9:e1:7d:74:79:69:
                    68:36:cb:b6:67:e1:bc:b4:e8:f1:36:a0:d3:79:fb:
                    cb:5b:1f:0e:eb:88:ae:de:b4:2b:5b:60:13:b3:17:
                    21:ef:7c:90:63:69:a2:c0:fa:91:f1:43:90:a2:be:
                    63:f3:39:40:ec:fd:24:a0:f8:7f:98:53:5f:e2:79:
                    70:38:92:48:cf:d3:da:30:25:d4:57:05:58:01:7f:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:1F:F2:56:DF:84:7E:38:D6:91:1B:5E:7A:18:5F:12:A1:F3:32
            X509v3 Authority Key Identifier:
                keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:4b:1c:50:05:00:24:25:67:5e:c9:fc:b2:d0:b7:89:48:
         d8:17:4a:f2:97:cb:ba:4b:70:33:20:87:8e:12:fc:b7:d1:f0:
         77:3c:24:c5:16:c9:d2:a9:34:83:5c:72:5a:94:d1:37:84:b5:
         6d:e2:50:2a:28:dc:fe:46:77:a5:62:39:17:81:2d:a0:c8:06:
         12:1c:4d:bc:b1:f6:64:92:c4:d4:c5:9b:71:a4:2b:e6:5d:1e:
         08:81:c2:08:38:6a:5b:55:3a:5c:77:31:77:e3:42:e8:ca:71:
         f7:2d:8f:ed:f9:a8:48:36:7e:5b:79:b8:97:48:be:24:41:0b:
         05:37:8f:c7:5e:c3:a9:34:4e:87:4e:f7:38:d7:9d:d3:7b:b4:
         68:d3:59:17:5a:6e:7d:c8:1a:1b:9e:3f:53:e2:b5:d8:80:b8:
         d0:dc:22:37:89:c4:4a:45:69:5a:4c:fd:61:92:02:fe:32:a8:
         12:25:f6:cc:b4:4d:59:36:3b:ec:1b:28:45:6f:5e:ba:f1:66:
         12:79:3d:8d:16:7c:77:d2:58:f0:27:d1:9a:26:a9:9c:e0:ee:
         7a:0c:e2:2c:0b:08:df:70:2f:2a:19:aa:b4:67:53:66:fe:38:
         36:6f:a2:04:18:04:1a:10:6a:9e:47:e2:eb:a3:72:fc:f3:b6:
         3e:6f:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 18:36:11 2024 by rpki-client on console-fra.rpki-client.org