Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
File:                     JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft (raw, json)
Hash identifier:          9TrmR1pVJEAxGM8pdoPX0XHE9q2HyhOK7K/lnjEztqw=
Subject key identifier:   2B:DF:33:8E:7A:1E:9C:25:27:0E:B6:56:7E:79:15:F9:44:25:1C:E1
Authority key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Certificate issuer:       /CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Certificate serial:       018F84104238886F87EDC753E8B30FB4C450
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 01:00:09 +0000
Manifest this update:     Fri 17 May 2024 01:00:09 +0000
Manifest next update:     Sat 18 May 2024 01:00:09 +0000
Files and hashes:         1: 2RnI5w5LFav4opswaQmTfuPMDbk.roa (hash: iBAVhxadqFTotnVUwg8yt/VoKXTmVcmvMmPwz4mhD6o=)
                          2: JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl (hash: a8tSLhjF+0flUm7W3h+ee4cNjKAihwmUbvWvZBTrFTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:10:42:38:88:6f:87:ed:c7:53:e8:b3:0f:b4:c4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
        Validity
            Not Before: May 17 01:00:09 2024 GMT
            Not After : May 18 01:00:09 2024 GMT
        Subject: CN=2bdf338e7a1e9c25270eb6567e7915f944251ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:07:66:a1:58:d7:2c:22:b1:83:8a:c5:7a:
                    1d:59:28:74:72:f3:1e:47:5e:ff:75:01:08:5b:04:
                    0d:bc:c1:be:a7:6b:96:32:8e:bc:7c:2a:ee:cd:19:
                    78:00:d3:37:6c:4c:b0:cb:bd:c2:c4:e9:49:12:1c:
                    20:44:5a:0f:b5:32:be:49:f6:d2:66:52:06:fe:04:
                    8d:56:ea:64:ac:39:7e:ed:d2:86:2d:35:16:0c:9d:
                    85:57:d0:e2:c4:cd:b7:d2:8b:60:ce:66:f0:15:c6:
                    44:a1:db:a6:b9:67:4d:3e:c9:df:16:85:e4:64:1d:
                    3e:07:c2:06:88:45:80:a0:bb:8c:d9:a0:55:55:da:
                    70:75:c2:e0:1b:21:a7:ae:88:11:04:d0:6b:98:3b:
                    cc:29:a9:94:cb:04:f1:56:89:1b:18:7a:2d:8f:e6:
                    82:a7:2b:b1:f1:9c:97:fd:a6:43:c0:2c:84:28:12:
                    1f:c6:79:a9:bc:8d:f8:c4:f5:af:a4:ba:45:4f:1b:
                    55:44:27:0d:e9:71:33:44:ed:32:82:18:32:82:57:
                    4b:c2:00:bf:d3:45:1c:39:31:08:1b:ad:18:9a:84:
                    fc:db:c1:c0:94:26:59:7b:eb:4d:8b:60:f8:f1:2d:
                    9c:c6:ef:3a:1e:69:a0:db:d6:78:c0:aa:3e:c4:60:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DF:33:8E:7A:1E:9C:25:27:0E:B6:56:7E:79:15:F9:44:25:1C:E1
            X509v3 Authority Key Identifier:
                keyid:25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:10:b6:a0:96:98:09:0b:5e:ab:42:ef:40:2b:90:97:bb:
         e8:85:94:db:b1:79:a3:c2:f9:74:f2:f1:f3:15:e2:64:8d:75:
         46:7a:67:3b:d9:91:fc:e3:1d:82:9c:dd:51:da:9e:fb:7f:d7:
         ed:7b:0d:33:b2:a1:38:dd:f1:15:75:89:6b:b5:ba:f0:8d:38:
         d4:ce:ea:1a:ad:a9:85:af:2a:db:22:ec:5b:a0:82:76:fb:22:
         75:0a:7c:4f:ee:35:78:c5:4d:87:4d:2f:5c:2c:f0:fc:e8:1e:
         dc:04:4e:05:8a:df:6d:6e:5d:f6:78:48:69:78:cc:60:6d:d4:
         08:7a:81:64:64:f8:e3:4f:e5:1f:7f:c5:1e:70:1b:ec:6f:f1:
         0d:6d:22:c1:df:3c:62:8f:8b:19:3b:ae:9c:21:94:24:99:fc:
         fb:1e:28:72:51:5f:c0:2e:fd:6e:44:82:cb:a4:e2:e0:a7:21:
         c3:89:0f:f4:c2:2a:ee:fc:f1:8b:9f:bf:f1:e8:b7:a7:5b:39:
         ff:43:87:16:8a:fc:7d:8d:37:db:01:eb:ea:69:87:a2:22:ed:
         fd:64:e7:24:2d:7f:0d:0e:98:30:e2:01:68:bd:5f:5c:df:b2:
         1b:a0:ea:cf:fa:a2:a9:fd:b7:32:cb:6f:34:a3:04:db:8b:f3:
         2b:80:c3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:28:30 2024 by rpki-client on console-fra.rpki-client.org