Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File:                     Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier:          z8YjwRMr241/EMI9081QPgMFmCFXCidQCV/62l12FkM=
Subject key identifier:   5A:24:45:7D:1E:BB:9F:5E:9A:C7:17:75:5C:57:D3:DF:B6:15:0D:8E
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer:       /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial:       0190448AAD7FAAB18AD797089303712686FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number:          040A
Signing time:             Sun 23 Jun 2024 10:00:57 +0000
Manifest this update:     Sun 23 Jun 2024 10:00:57 +0000
Manifest next update:     Mon 24 Jun 2024 10:00:57 +0000
Files and hashes:         1: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: b0j1zhY2zVvYqGprOl/TPwMOMCuPf+rP9i/Pul8yi1M=)
                          2: vRxAsIeapiA7q7gpg2Jn11Vxsq8.roa (hash: YN05dRRls7qLNI4pFQHIDvd8WICagBHpqqgDs4ReVXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:ad:7f:aa:b1:8a:d7:97:08:93:03:71:26:86:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
        Validity
            Not Before: Jun 23 10:00:57 2024 GMT
            Not After : Jun 24 10:00:57 2024 GMT
        Subject: CN=5a24457d1ebb9f5e9ac717755c57d3dfb6150d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:9e:b5:a9:07:59:4e:02:e2:0e:97:91:25:
                    27:09:34:9c:ec:28:43:a0:6a:e4:ea:87:57:65:bb:
                    cb:0e:10:4b:69:d0:86:96:4e:16:9c:4b:b8:c0:d1:
                    71:5f:d7:be:12:83:da:fd:35:07:da:90:e4:3d:f9:
                    bf:a2:ea:32:1e:11:fc:95:26:ed:d2:e4:7c:12:f2:
                    6e:a4:dd:2f:bd:a1:f5:c9:ce:dc:13:71:71:38:4b:
                    10:c1:50:81:65:ff:fd:52:87:52:77:a2:73:38:a0:
                    40:44:fc:63:c6:27:62:e1:52:a7:56:34:0d:c1:5b:
                    35:db:ef:e5:0c:f3:ae:e5:f5:3c:80:61:4f:5a:39:
                    3a:1c:a6:2c:7a:71:0f:bf:d6:78:dd:52:d8:d7:ea:
                    d7:b0:c9:90:96:bc:3d:e8:f7:7f:35:50:46:0b:b7:
                    f9:0c:70:ef:f4:8e:10:58:62:8b:4e:a3:08:f5:56:
                    ae:8d:0b:db:2d:8e:6a:d0:6f:49:b3:98:bc:71:99:
                    eb:06:fc:1c:98:7f:30:b0:16:43:3e:b5:b8:6b:c5:
                    e3:38:d4:86:48:4a:55:ee:54:88:0c:3e:e7:83:f1:
                    59:db:a9:41:ff:b7:6d:5d:64:c3:97:79:35:b8:09:
                    8f:62:3f:75:b0:69:da:d7:79:26:ad:19:df:a1:ba:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:24:45:7D:1E:BB:9F:5E:9A:C7:17:75:5C:57:D3:DF:B6:15:0D:8E
            X509v3 Authority Key Identifier:
                keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:22:75:9e:45:f2:1c:55:9a:df:ff:6a:a8:61:a5:45:02:
         42:7f:73:e7:54:9b:17:84:9e:a4:43:83:66:c0:24:c2:f5:e7:
         f5:14:61:e9:e0:a6:ff:ed:6e:40:05:d9:50:48:8c:94:94:6d:
         85:97:8b:8e:54:ef:66:7b:28:ef:db:8d:31:e4:5c:7a:84:40:
         e6:52:08:f1:3d:5c:09:19:d8:02:96:6e:65:82:76:6e:70:e8:
         af:55:0f:bb:b6:81:10:76:54:8e:c1:69:d8:8a:80:f6:16:bc:
         fc:32:bf:dc:e1:7b:25:5a:3d:67:fe:7c:05:2b:e0:79:5c:ee:
         a5:a3:62:bb:4c:54:40:02:94:a5:a2:bc:a4:a4:3f:0b:3a:97:
         72:4d:aa:1a:dd:54:15:30:88:a9:8e:8b:51:2e:0c:65:27:c6:
         eb:b9:19:40:61:66:e5:c9:26:f0:82:76:f0:0b:1e:ce:a8:2f:
         48:ef:b7:24:cf:99:02:c3:8e:87:78:9d:38:1d:55:90:08:df:
         94:f5:a9:19:7b:1d:a4:9d:11:e2:3e:79:51:43:02:66:ea:e1:
         db:af:a0:96:88:e4:2d:6b:3a:59:59:c2:dc:3e:59:66:de:4f:
         31:3f:1a:cd:07:11:11:cb:e9:32:7e:e3:f8:5d:b0:c8:94:06:
         2c:78:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:58:26 2024 by rpki-client on console-fra.rpki-client.org